Skip to main content

Know. Respond. Protect.

Outcomes by security role

Plans and pricing

Common security workflows

Browse everything we publish

Insights and analysis

Latest press

Talks and demos

Guides and solution briefs

Our mission and team

Join the team

Stories as they unfold

What's moving right now

Live Dashboards

Exploitation and reserved-but-public CVEs

Sign in Start Free Trial

Loading intelligence…

Intelligence your team can act on. Mallory reasons across your attack surface and the global threat landscape. Before adversaries strike.

Twitter LinkedIn GitHub

Platform

Platform
Solutions
Use Cases
Pricing
Status

Company

About
Blog
Careers
Contact

Resources

API Reference
Community Slack
Documentation
Intelligence
Feeds
Utilities

© 2026 Mallory.ai Inc. All rights reserved.

Privacy Policy Terms of Service DPA Sub-processors

Loading reserved CVEs…

Back to intelligence

Reserved but Public CVEs

These CVE IDs are still marked RESERVED at MITRE — no official description, no CVSS, no NVD record — yet the world is already talking about them. Mallory tracks the chatter so you see the risk before the paperwork catches up.

1,185 reserved CVEs with public mentions, ranked by all-time mention count.

Page 19 of 48

#451
CVE-2024-29381
First seen Aug 15, 2026
1mentions
#452
CVE-2020-17008
First seen Aug 14, 2026
1mentions
#453
CVE-2022-42013
First seen Aug 14, 2026
1mentions
#454
CVE-2019-4089
First seen Aug 14, 2026
1mentions
#455
EPS Parsing Vulnerability in Hancom Hangul Office Suite (CVE-2013-0808)ExploitedCWE-119
CVE-2013-0808 is a vulnerability in the Hancom Hangul Office Suite (HWP), specifically in the handling of Encapsulated PostScript (EPS) objects. The vulnerability allows for arbitrary code execution when a user opens a maliciously crafted HWP document containing a specially crafted EPS object. This flaw was actively exploited by threat actors, notably Group 123, as an initial infection vector in targeted spear phishing campaigns against South Korean entities.
CVE-2013-0808First seen Aug 14, 2026
1mentions
#456
CVE-2021-44910
First seen Aug 14, 2026
1mentions1 in last 30d
#457
CVE-2023-39120
First seen Aug 14, 2026
1mentions1 in last 30d
#458
CVE-2024-23163
First seen Aug 14, 2026
1mentions1 in last 30d
#459
CVE-2021-28073
First seen Aug 14, 2026
1mentions1 in last 30d
#460
CVE-2018-16341
First seen Aug 14, 2026
1mentions1 in last 30d
#461
CVE-2023-39024
First seen Aug 14, 2026
1mentions1 in last 30d
#462
CVE-2021-28854
First seen Aug 14, 2026
1mentions1 in last 30d
#463
CVE-2018-10818
First seen Aug 14, 2026
1mentions1 in last 30d
#464
CVE-2024-25669
First seen Aug 14, 2026
1mentions1 in last 30d
#465
CVE-2021-26292
First seen Aug 14, 2026
1mentions1 in last 30d
#466
CVE-2026-18680
First seen Aug 13, 2026
1mentions1 in last 30d
#467
CVE-2026-16858
First seen Aug 13, 2026
1mentions1 in last 30d
#468
Reflected XSS in LibreNMS Proxmox appCWE-79
CVE-2026-45694 is a reflected cross-site scripting vulnerability in the LibreNMS Proxmox application handler. Attacker-controlled GET parameters are incorporated into a JavaScript assignment to document.title without safe encoding, allowing script injection in the rendered response. The issue specifically affects handling of Proxmox-related request parameters, where insufficient output encoding permits untrusted input to break out of the intended JavaScript context and execute in the victim's browser.
CVE-2026-45694First seen Aug 4, 2026
1mentions1 in last 30d
#469
CVE-2026-6882
First seen Aug 12, 2026
1mentions1 in last 30d
#470
CVE-2025-71386
First seen Aug 11, 2026
1mentions1 in last 30d
#471
CVE-2026-61478
First seen Aug 11, 2026
1mentions1 in last 30d
#472
Vulnerability in Icinga 2
CVE-2026-61551First seen Aug 10, 2026
1mentions1 in last 30d
#473
Vulnerability in Icinga 2
CVE-2026-61552First seen Aug 10, 2026
1mentions1 in last 30d
#474
Vulnerability in Icinga 2
CVE-2026-61550First seen Aug 10, 2026
1mentions1 in last 30d
#475
CVE-2026-42619
First seen Aug 10, 2026
1mentions1 in last 30d

Previous page 1…18 19 20…48 Next page