Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
1,192 vulnerabilities · highest exploit probability first
- CVE-2018-7573Critical 9.8A remote FTP server can send 400 characters of 'F' in conjunction with the FTP 220 response code to crash the application; after this overflow, one can run arbitrary code on the victim machine.ftpshell · ftpshell clientEPSS69%5 exploitsPublished Mar 1, 2018
- CVE-2018-6481Critical 9.8A buffer overflow vulnerability in the control protocol of Disk Savvy Enterprise v10.4.18 allows remote attackers to execute arbitrary code by sending a crafted packet to TCP port 9124.flexense · disksavvyEPSS21%5 exploitsPublished Feb 27, 2018
- CVE-2014-3206Critical 9.8Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the auth_name parameter to localhost/backupmgmt/pre_connect_check.php.seagate · blackarmor nas 110 firmwareEPSS51%1 exploitPublished Feb 23, 2018
- CVE-2018-7314Critical 9.8SQL Injection exists in the PrayerCenter 3.0.2 component for Joomla!mlwebtechnologies · prayercenterEPSS58%2 exploitsPublished Feb 22, 2018
- CVE-2018-7297Critical 9.8Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to obtain read/write access and execute system commands on the device.eq-3 · homematic central control unit ccu2 firmwareEPSS64%1 exploitPublished Feb 22, 2018
- CVE-2017-5817Critical 9.8A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.hp · intelligent management centerEPSS83%5 exploitsPublished Feb 15, 2018
- CVE-2017-5816Critical 9.8A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.hp · intelligent management centerEPSS86%5 exploitsPublished Feb 15, 2018
- CVE-2017-12557Critical 9.8A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and earlier was found.hp · intelligent management centerEPSS80%3 exploitsPublished Feb 15, 2018
- CVE-2017-12542Critical 10.0A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found.hp · integrated lights-out 4 firmwareEPSS99%2 exploitsPublished Feb 15, 2018
- CVE-2018-6892Critical 9.8An unauthenticated remote attacker that can connect to the "CloudMe Sync" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition.cloudme · syncEPSS93%9 exploitsPublished Feb 11, 2018
- CVE-2018-6605Critical 9.8SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla!zh baidumap project · zh baidumapEPSS58%2 exploitsPublished Feb 5, 2018
- CVE-2018-0101Critical 10.0A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code.cisco · firepower threat defenseEPSS87%2 exploitsPublished Jan 29, 2018
- CVE-2017-13696Critical 9.8A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze Enterprise 9.9.16, and Disk Pulse Enterprise 9.9.16 where an attacker can craft a malicious GET request and exploit the web server component.flexense · diskpulseEPSS79%7 exploitsPublished Jan 24, 2018
- CVE-2017-2741Critical 9.8A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D.hp · d3q15a firmwareEPSS85%3 exploitsPublished Jan 23, 2018
- CVE-2018-6000Critical 9.8The do_vpnupload_post function in router/httpd/web.c in vpnupload.cgi provides functionality for setting NVRAM configuration values, which allows attackers to set the admin password and launch an SSH daemon (or enable infosvr command mode), and consequently obtain remote…asus · asuswrtEPSS85%5 exploitsPublished Jan 22, 2018
- CVE-2018-5999Critical 9.8In the handle_request function in router/httpd/httpd.c, processing of POST requests continues even if authentication fails.asus · asuswrtEPSS88%5 exploitsPublished Jan 22, 2018
- CVE-2018-5955Critical 9.8User controlled input is not sufficiently filtered, allowing an unauthenticated attacker to add a user to the server via the username and password fields to the rest/user/ URI.smartmobilesoftware · gitstackEPSS81%4 exploitsPublished Jan 21, 2018
- CVE-2017-12635Critical 9.8couchdb - security updateapache · couchdbEPSS100%3 exploitsPublished Jan 21, 2018
- CVE-2017-18044Critical 9.8A Command Injection issue was discovered in ContentStore/Base/CVDataPipe.dll in Commvault before v11 SP6.commvault · commvaultEPSS70%2 exploitsPublished Jan 19, 2018
- CVE-2018-5347Critical 9.8Seagate Media Server in Seagate Personal Cloud has unauthenticated command injection in the uploadTelemetry and getLogs functions in views.py because .psp URLs are handled by the fastcgi.server component and shell metacharacters are mishandled.seagate · personal cloud firmwareEPSS54%2 exploitsPublished Jan 11, 2018
- CVE-2017-16720Critical 9.8A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier.advantech · webaccessEPSS50%2 exploitsPublished Jan 5, 2018
- CVE-2014-7862Critical 9.8The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action.zohocorp · desktop centralEPSS81%1 exploitPublished Jan 4, 2018
- CVE-2017-17968Critical 9.8A buffer overflow vulnerability in NetTransport.exe in NetTransport Download Manager 2.96L and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long HTTP response.xi-soft · nettransport download managerEPSS39%3 exploitsPublished Dec 29, 2017
- CVE-2017-17932Critical 9.8A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow remote attackers to execute arbitrary code and/or cause denial of service on the victim machine/computer via a long string to TCP port 888.allmediaserver · allmediaserverEPSS54%7 exploitsPublished Dec 28, 2017
- CVE-2014-8389Critical 9.8cgi-bin/mft/wireless_mft.cgi in AirLive BU-2015 with firmware 1.03.18 16.06.2014, AirLive BU-3026 with firmware 1.43 21.08.2014, AirLive MD-3025 with firmware 1.81 21.08.2014, AirLive WL-2000CAM with firmware LM.1.6.18 14.10.2011, and AirLive POE-200CAM v2 with firmware…airlive · bu-2015 firmwareEPSS51%1 exploitPublished Dec 27, 2017
- CVE-2017-17411Critical 9.8This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0.linksys · wvbr0 firmwareEPSS88%6 exploitsPublished Dec 21, 2017
- CVE-2012-2576Critical 9.8SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, and SolarWinds Backup Profiler before 5.1.2 allows remote attackers to execute arbitrary SQL commands via the loginName field.solarwinds · backup profilerEPSS59%4 exploitsPublished Dec 20, 2017
- CVE-2017-17105Critical 9.8Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 (and possibly in-between versions) web cameras are vulnerable to unauthenticated, blind remote command injection via CGI scripts used as part of the web interface, as demonstrated by a…zivif · pr115-204-p-rs firmwareEPSS85%2 exploitsPublished Dec 18, 2017
- CVE-2017-17560Critical 9.8An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices.westerndigital · my cloud pr4100 firmwareEPSS73%3 exploitsPublished Dec 12, 2017
- CVE-2012-5357Critical 9.8Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true, which allows remote attackers to execute arbitrary code with NETWORK SERVICE privileges via crafted XSL data.ektron · ektron content management systemEPSS68%2 exploitsPublished Oct 30, 2017
- CVE-2014-7205Critical 10.0Arbitrary JavaScript Execution in bassmasterbassmaster project · bassmasterEPSS79%1 exploitPublished Oct 24, 2017
- CVE-2017-15222Critical 9.8Buffer Overflow vulnerability in Ayukov NFTPD 2.0 and earlier allows remote attackers to execute arbitrary code.nftp project · nftpEPSS60%7 exploitsPublished Oct 24, 2017
- CVE-2017-14980Critical 9.8Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login.flexense · syncbreezeEPSS22%2 exploitsPublished Oct 9, 2017
- CVE-2017-14491Critical 9.8Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.thekelleys · dnsmasqEPSS85%3 exploitsPublished Oct 4, 2017
- CVE-2017-14493Critical 9.8Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request.thekelleys · dnsmasqEPSS84%2 exploitsPublished Oct 3, 2017
- CVE-2017-14492Critical 9.8Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.thekelleys · dnsmasqEPSS93%1 exploitPublished Oct 3, 2017
- CVE-2017-14942Critical 9.8Intelbras WRN 150 devices allow remote attackers to read the configuration file, and consequently bypass authentication, via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg containing an admin:language=pt cookie.intelbras · wrn 150 firmwareEPSS61%1 exploitPublished Sep 29, 2017
- CVE-2015-8249Critical 9.8The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows remote attackers to upload and execute arbitrary files via the ConnectionId parameter.manageengine · desktop centralEPSS74%4 exploitsPublished Sep 27, 2017
- CVE-2017-14706Critical 9.8DenyAll WAF before 6.4.1 allows unauthenticated remote attackers to obtain authentication information by making a typeOf=debug request to /webservices/download/index.php, and then reading the iToken field in the reply.denyall · i-suiteEPSS28%2 exploitsPublished Sep 22, 2017
- CVE-2014-8686Critical 9.8CodeIgniter before 2.2.0 makes it easier for attackers to decode session cookies by leveraging fallback to a custom XOR-based encryption scheme when the Mcrypt extension for PHP is not available.codeigniter · codeigniterEPSS37%2 exploitsPublished Sep 19, 2017
- CVE-2017-14143Critical 9.8The getUserzoneCookie function in Kaltura before 13.2.0 uses a hardcoded cookie secret to validate cookie signatures, which allows remote attackers to bypass an intended protection mechanism and consequently conduct PHP object injection attacks and execute arbitrary PHP code via…kaltura · kaltura serverEPSS77%3 exploitsPublished Sep 19, 2017
- CVE-2014-9618Critical 9.8The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL.netsweeper · netsweeperEPSS73%1 exploitPublished Sep 19, 2017
- CVE-2017-14147Critical 9.8An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which could allow an attacker to easily restore a router to its factory settings by simply browsing to the link http://[Default-Router-IP]/restoreinfo.cgi & execute it.fiberhome · adsl an1020-25 firmwareEPSS66%3 exploitsPublished Sep 7, 2017
- CVE-2015-2857Critical 9.8Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metacharacters in the oauth_token parameter.accellion · file transfer applianceEPSS84%3 exploitsPublished Aug 22, 2017
- CVE-2017-12478Critical 9.8It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of its input parameters was not validated.kaseya · unitrends backupEPSS78%6 exploitsPublished Aug 7, 2017
- CVE-2017-12477Critical 9.8It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in which its authentication can be bypassed.kaseya · unitrends backupEPSS68%4 exploitsPublished Aug 7, 2017
- CVE-2017-11394Critical 9.8Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations.trendmicro · officescanEPSS67%2 exploitsPublished Aug 3, 2017
- CVE-2017-9769Critical 9.8A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a handle to be opened to an arbitrary process.razer · synapseEPSS86%2 exploitsPublished Aug 2, 2017
- CVE-2017-11517Critical 9.8Stack-based buffer overflow in GCoreServer.exe in the server in Geutebrueck Gcore 1.3.8.42 and 1.4.2.37 allows remote attackers to execute arbitrary code via a long URI in a GET request.geutebrueck · gcoreEPSS29%3 exploitsPublished Jul 21, 2017
- CVE-2017-1000002Critical 9.8ATutor versions 2.2.1 and earlier are vulnerable to a directory traversal and file extension check bypass in the Course component resulting in code execution.atutor · atutorEPSS31%1 exploitPublished Jul 17, 2017
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-7573 | A remote FTP server can send 400 characters of 'F' in conjunction with the FTP 220 response code to crash the application; after this overflow, one can run arbitrary code on the victim machine. ftpshell · ftpshell client | Critical 9.8 | 69% | 5 exploits | |
| CVE-2018-6481 | A buffer overflow vulnerability in the control protocol of Disk Savvy Enterprise v10.4.18 allows remote attackers to execute arbitrary code by sending a crafted packet to TCP port 9124. flexense · disksavvy | Critical 9.8 | 21% | 5 exploits | |
| CVE-2014-3206 | Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the auth_name parameter to localhost/backupmgmt/pre_connect_check.php. seagate · blackarmor nas 110 firmware | Critical 9.8 | 51% | 1 exploit | |
| CVE-2018-7314 | SQL Injection exists in the PrayerCenter 3.0.2 component for Joomla! mlwebtechnologies · prayercenter | Critical 9.8 | 58% | 2 exploits | |
| CVE-2018-7297 | Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to obtain read/write access and execute system commands on the device. eq-3 · homematic central control unit ccu2 firmware | Critical 9.8 | 64% | 1 exploit | |
| CVE-2017-5817 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. hp · intelligent management center | Critical 9.8 | 83% | 5 exploits | |
| CVE-2017-5816 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. hp · intelligent management center | Critical 9.8 | 86% | 5 exploits | |
| CVE-2017-12557 | A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and earlier was found. hp · intelligent management center | Critical 9.8 | 80% | 3 exploits | |
| CVE-2017-12542 | A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found. hp · integrated lights-out 4 firmware | Critical 10.0 | 99% | 2 exploits | |
| CVE-2018-6892 | An unauthenticated remote attacker that can connect to the "CloudMe Sync" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition. cloudme · sync | Critical 9.8 | 93% | 9 exploits | |
| CVE-2018-6605 | SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! zh baidumap project · zh baidumap | Critical 9.8 | 58% | 2 exploits | |
| CVE-2018-0101 | A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. cisco · firepower threat defense | Critical 10.0 | 87% | 2 exploits | |
| CVE-2017-13696 | A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze Enterprise 9.9.16, and Disk Pulse Enterprise 9.9.16 where an attacker can craft a malicious GET request and exploit the web server component. flexense · diskpulse | Critical 9.8 | 79% | 7 exploits | |
| CVE-2017-2741 | A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. hp · d3q15a firmware | Critical 9.8 | 85% | 3 exploits | |
| CVE-2018-6000 | The do_vpnupload_post function in router/httpd/web.c in vpnupload.cgi provides functionality for setting NVRAM configuration values, which allows attackers to set the admin password and launch an SSH daemon (or enable infosvr command mode), and consequently obtain remote… asus · asuswrt | Critical 9.8 | 85% | 5 exploits | |
| CVE-2018-5999 | In the handle_request function in router/httpd/httpd.c, processing of POST requests continues even if authentication fails. asus · asuswrt | Critical 9.8 | 88% | 5 exploits | |
| CVE-2018-5955 | User controlled input is not sufficiently filtered, allowing an unauthenticated attacker to add a user to the server via the username and password fields to the rest/user/ URI. smartmobilesoftware · gitstack | Critical 9.8 | 81% | 4 exploits | |
| CVE-2017-12635 | couchdb - security update apache · couchdb | Critical 9.8 | 100% | 3 exploits | |
| CVE-2017-18044 | A Command Injection issue was discovered in ContentStore/Base/CVDataPipe.dll in Commvault before v11 SP6. commvault · commvault | Critical 9.8 | 70% | 2 exploits | |
| CVE-2018-5347 | Seagate Media Server in Seagate Personal Cloud has unauthenticated command injection in the uploadTelemetry and getLogs functions in views.py because .psp URLs are handled by the fastcgi.server component and shell metacharacters are mishandled. seagate · personal cloud firmware | Critical 9.8 | 54% | 2 exploits | |
| CVE-2017-16720 | A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. advantech · webaccess | Critical 9.8 | 50% | 2 exploits | |
| CVE-2014-7862 | The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action. zohocorp · desktop central | Critical 9.8 | 81% | 1 exploit | |
| CVE-2017-17968 | A buffer overflow vulnerability in NetTransport.exe in NetTransport Download Manager 2.96L and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long HTTP response. xi-soft · nettransport download manager | Critical 9.8 | 39% | 3 exploits | |
| CVE-2017-17932 | A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow remote attackers to execute arbitrary code and/or cause denial of service on the victim machine/computer via a long string to TCP port 888. allmediaserver · allmediaserver | Critical 9.8 | 54% | 7 exploits | |
| CVE-2014-8389 | cgi-bin/mft/wireless_mft.cgi in AirLive BU-2015 with firmware 1.03.18 16.06.2014, AirLive BU-3026 with firmware 1.43 21.08.2014, AirLive MD-3025 with firmware 1.81 21.08.2014, AirLive WL-2000CAM with firmware LM.1.6.18 14.10.2011, and AirLive POE-200CAM v2 with firmware… airlive · bu-2015 firmware | Critical 9.8 | 51% | 1 exploit | |
| CVE-2017-17411 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0. linksys · wvbr0 firmware | Critical 9.8 | 88% | 6 exploits | |
| CVE-2012-2576 | SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, and SolarWinds Backup Profiler before 5.1.2 allows remote attackers to execute arbitrary SQL commands via the loginName field. solarwinds · backup profiler | Critical 9.8 | 59% | 4 exploits | |
| CVE-2017-17105 | Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 (and possibly in-between versions) web cameras are vulnerable to unauthenticated, blind remote command injection via CGI scripts used as part of the web interface, as demonstrated by a… zivif · pr115-204-p-rs firmware | Critical 9.8 | 85% | 2 exploits | |
| CVE-2017-17560 | An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices. westerndigital · my cloud pr4100 firmware | Critical 9.8 | 73% | 3 exploits | |
| CVE-2012-5357 | Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true, which allows remote attackers to execute arbitrary code with NETWORK SERVICE privileges via crafted XSL data. ektron · ektron content management system | Critical 9.8 | 68% | 2 exploits | |
| CVE-2014-7205 | Arbitrary JavaScript Execution in bassmaster bassmaster project · bassmaster | Critical 10.0 | 79% | 1 exploit | |
| CVE-2017-15222 | Buffer Overflow vulnerability in Ayukov NFTPD 2.0 and earlier allows remote attackers to execute arbitrary code. nftp project · nftp | Critical 9.8 | 60% | 7 exploits | |
| CVE-2017-14980 | Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login. flexense · syncbreeze | Critical 9.8 | 22% | 2 exploits | |
| CVE-2017-14491 | Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response. thekelleys · dnsmasq | Critical 9.8 | 85% | 3 exploits | |
| CVE-2017-14493 | Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request. thekelleys · dnsmasq | Critical 9.8 | 84% | 2 exploits | |
| CVE-2017-14492 | Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request. thekelleys · dnsmasq | Critical 9.8 | 93% | 1 exploit | |
| CVE-2017-14942 | Intelbras WRN 150 devices allow remote attackers to read the configuration file, and consequently bypass authentication, via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg containing an admin:language=pt cookie. intelbras · wrn 150 firmware | Critical 9.8 | 61% | 1 exploit | |
| CVE-2015-8249 | The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows remote attackers to upload and execute arbitrary files via the ConnectionId parameter. manageengine · desktop central | Critical 9.8 | 74% | 4 exploits | |
| CVE-2017-14706 | DenyAll WAF before 6.4.1 allows unauthenticated remote attackers to obtain authentication information by making a typeOf=debug request to /webservices/download/index.php, and then reading the iToken field in the reply. denyall · i-suite | Critical 9.8 | 28% | 2 exploits | |
| CVE-2014-8686 | CodeIgniter before 2.2.0 makes it easier for attackers to decode session cookies by leveraging fallback to a custom XOR-based encryption scheme when the Mcrypt extension for PHP is not available. codeigniter · codeigniter | Critical 9.8 | 37% | 2 exploits | |
| CVE-2017-14143 | The getUserzoneCookie function in Kaltura before 13.2.0 uses a hardcoded cookie secret to validate cookie signatures, which allows remote attackers to bypass an intended protection mechanism and consequently conduct PHP object injection attacks and execute arbitrary PHP code via… kaltura · kaltura server | Critical 9.8 | 77% | 3 exploits | |
| CVE-2014-9618 | The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL. netsweeper · netsweeper | Critical 9.8 | 73% | 1 exploit | |
| CVE-2017-14147 | An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which could allow an attacker to easily restore a router to its factory settings by simply browsing to the link http://[Default-Router-IP]/restoreinfo.cgi & execute it. fiberhome · adsl an1020-25 firmware | Critical 9.8 | 66% | 3 exploits | |
| CVE-2015-2857 | Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metacharacters in the oauth_token parameter. accellion · file transfer appliance | Critical 9.8 | 84% | 3 exploits | |
| CVE-2017-12478 | It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of its input parameters was not validated. kaseya · unitrends backup | Critical 9.8 | 78% | 6 exploits | |
| CVE-2017-12477 | It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in which its authentication can be bypassed. kaseya · unitrends backup | Critical 9.8 | 68% | 4 exploits | |
| CVE-2017-11394 | Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. trendmicro · officescan | Critical 9.8 | 67% | 2 exploits | |
| CVE-2017-9769 | A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a handle to be opened to an arbitrary process. razer · synapse | Critical 9.8 | 86% | 2 exploits | |
| CVE-2017-11517 | Stack-based buffer overflow in GCoreServer.exe in the server in Geutebrueck Gcore 1.3.8.42 and 1.4.2.37 allows remote attackers to execute arbitrary code via a long URI in a GET request. geutebrueck · gcore | Critical 9.8 | 29% | 3 exploits | |
| CVE-2017-1000002 | ATutor versions 2.2.1 and earlier are vulnerable to a directory traversal and file extension check bypass in the Course component resulting in code execution. atutor · atutor | Critical 9.8 | 31% | 1 exploit |
Showing 451–500 of 1,192
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.