Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 19, 2026
2,494 vulnerabilities · highest exploit probability first
- CVE-2021-33553High 7.2Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.geutebrueck · g-cam ebc-2110 firmwareEPSS51%1 exploitPublished Sep 13, 2021
- CVE-2021-33552High 7.2Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.geutebrueck · g-cam ebc-2110 firmwareEPSS51%1 exploitPublished Sep 13, 2021
- CVE-2021-33551High 7.2Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.geutebrueck · g-cam ebc-2110 firmwareEPSS51%1 exploitPublished Sep 13, 2021
- CVE-2021-33550High 7.2Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.geutebrueck · g-cam ebc-2110 firmwareEPSS59%1 exploitPublished Sep 13, 2021
- CVE-2021-33549High 7.2Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code.geutebrueck · g-cam ebc-2110 firmwareEPSS69%2 exploitsPublished Sep 13, 2021
- CVE-2021-33548High 7.2Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.geutebrueck · g-cam ebc-2110 firmwareEPSS59%1 exploitPublished Sep 13, 2021
- CVE-2021-33544High 7.2Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.geutebrueck · g-cam ebc-2110 firmwareEPSS96%1 exploitPublished Sep 13, 2021
- CVE-2021-33543Critical 9.8Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings.geutebrueck · g-cam ebc-2110 firmwareEPSS81%1 exploitPublished Sep 13, 2021
- CVE-2019-14931Critical 9.8An issue was discovered on Mitsubishi Electric Europe B.V.inea · me-rtu firmwareEPSS57%1 exploitPublished Sep 10, 2021
- CVE-2021-34646Critical 9.8Booster for WooCommerce <= 5.4.3 - Authentication Bypassbooster · booster for woocommerceEPSS51%1 exploitPublished Aug 31, 2021
- CVE-2021-36356Critical 9.8KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts arbitrary executable pathnames (even though browseSystemFiles.php is no longer reachable via the GUI).kramerav · viawareEPSS54%2 exploitsPublished Aug 31, 2021
- CVE-2021-37343High 8.8A path traversal vulnerability exists in Nagios XI below version 5.8.5 AutoDiscovery component and could lead to post authenticated RCE under security context of the user running Nagios.nagios · nagios xiEPSS24%2 exploitsPublished Aug 13, 2021
- CVE-2021-37425Critical 9.1Altova MobileTogether Server before 7.3 SP1 allows XXE attacks, such as an InfoSetChanges/Changes attack against /workflowmanagement, or reading mobiletogetherserver.cfg and then reading the certificate and private key.altova · mobiletogether serverEPSS66%1 exploitPublished Aug 10, 2021
- CVE-2021-24499Critical 9.8The Workreap WordPress theme before 2.2.2 AJAX actions workreap_award_temp_file_uploader and workreap_temp_file_uploader did not perform nonce checks, or validate that the request is from a valid user in any other way.amentotech · workreapEPSS60%1 exploitPublished Aug 9, 2021
- CVE-2021-32706High 8.8Pi-hole's Web interface provides a central location to manage a Pi-hole instance and review performance statistics.pi-hole · pi-holeEPSS60%1 exploitPublished Aug 4, 2021
- CVE-2020-35476Critical 9.8OS Command Injection in OpenTSDBopentsdb · opentsdbEPSS85%3 exploitsPublished Aug 2, 2021
- CVE-2020-7388Critical 9.8Sage X3 Unauthenticated Remote Command Execution (RCE) as SYSTEM in AdxDSrv.exe component.sage · adxadminEPSS69%1 exploitPublished Jul 22, 2021
- CVE-2020-7387Medium 5.3Sage X3 Installation Pathname Disclosure.sage · adxadminEPSS34%1 exploitPublished Jul 22, 2021
- CVE-2018-11784Medium 4.3tomcat7 - security updateapache · tomcatEPSS98%1 exploitPublished Jul 14, 2021
- CVE-2021-35064Critical 9.8KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo.kramerav · viawareEPSS71%2 exploitsPublished Jul 12, 2021
- CVE-2021-34621Critical 9.8.properfraction · profilepressEPSS69%2 exploitsPublished Jul 7, 2021
- CVE-2018-11218Critical 9.8redis - security updateredislabs · redisEPSS59%1 exploitPublished Jul 7, 2021
- CVE-2021-24145High 7.2Modern Events Calendar Lite <= 5.16.4 - Authenticated Arbitrary File Upload leading to Remote Code Executionwebnus · modern events calendar liteEPSS87%4 exploitsPublished Jul 5, 2021
- CVE-2021-28164Medium 5.3In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory.eclipse · jettyEPSS82%2 exploitsPublished Jun 30, 2021
- CVE-2021-34427Critical 9.8In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessible from remote (current BIRT viewer dir) to inject JSP code into the running instance.eclipse · business intelligence and reporting toolsEPSS58%1 exploitPublished Jun 25, 2021
- CVE-2021-1499Medium 5.3A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to upload files to an affected device.cisco · hyperflex hx data platformEPSS80%2 exploitsPublished Jun 24, 2021
- CVE-2021-32682Critical 9.8elFinder before 2.1.59 contains multiple vulnerabilities leading to RCEstd42 · elfinderEPSS70%2 exploitsPublished Jun 16, 2021
- CVE-2021-24347High 8.8SP Project & Document Manager <= 4.21 - Authenticated Shell Uploadsmartypantsplugins · sp project \& document managerEPSS54%3 exploitsPublished Jun 15, 2021
- CVE-2021-33393High 8.8lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/backup.pl is owned by the root account.ipfire · ipfireEPSS59%4 exploitsPublished Jun 9, 2021
- CVE-2021-3007Critical 9.8Remote code execution in zendframework and laminas-httpgetlaminas · laminas-httpEPSS75%1 exploitPublished Jun 8, 2021
- CVE-2021-3490High 7.8The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution.linux · linux kernelEPSS27%2 exploitsPublished Jun 4, 2021
- CVE-2021-31643Medium 5.4An XSS vulnerability exists in several IoT devices from CHIYU Technology, including SEMAC, Biosense, BF-630, BF-631, and Webpass due to a lack of sanitization on the component if.cgi - username parameter.chiyu-tech · bf-630 firmwareEPSS88%1 exploitPublished Jun 1, 2021
- CVE-2021-22911Critical 9.8A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenticated NoSQL injection, resulting potentially in RCE.rocket.chat · rocket.chatEPSS95%4 exploitsPublished May 27, 2021
- CVE-2021-32305Critical 9.8WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter.websvn · websvnEPSS87%2 exploitsPublished May 18, 2021
- CVE-2021-31181High 8.8Microsoft SharePoint Remote Code Execution Vulnerabilitymicrosoft · sharepoint enterprise serverEPSS29%2 exploitsPublished May 11, 2021
- CVE-2015-0235Critical 10.0Heap-based buffer overflow in the nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."gnu · glibcEPSS95%8 exploitsPublished May 5, 2021
- CVE-2017-16944High 7.5The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to cause a denial of service (infinite loop and stack exhaustion) via vectors involving BDAT commands and an improper check for a '.' character signifying the end of the…exim · eximEPSS63%1 exploitPublished May 5, 2021
- CVE-2021-21983Medium 6.5Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating…vmware · vrealize operations managerEPSS69%2 exploitsPublished May 4, 2021
- CVE-2021-29442High 7.5Authentication bypass for specific endpointalibaba · nacosEPSS66%2 exploitsPublished Apr 27, 2021
- CVE-2021-3287Critical 9.8Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class.zohocorp · manageengine opmanagerEPSS51%2 exploitsPublished Apr 26, 2021
- CVE-2020-5791High 7.2Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admin user to execute operating system commands with the privileges of the apache user.nagios · nagios xiEPSS79%4 exploitsPublished Apr 21, 2021
- CVE-2019-0232High 8.1tomcat: Remote Code Execution on Windowsapache · tomcatEPSS100%2 exploitsPublished Apr 21, 2021
- CVE-2019-0230Critical 9.8struts2: possible RCE due to forced double OGNL evaluation when evaluated on raw user input in tag attributesapache · strutsEPSS97%4 exploitsPublished Apr 21, 2021
- CVE-2019-10098Medium 6.1In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL.apache · http serverEPSS74%1 exploitPublished Apr 21, 2021
- CVE-2021-29447Medium 6.5A user with the ability to upload files (like an Author) can exploit an XML parsing issue in the Media Library leading to XXE attacks.wordpress · wordpressEPSS86%2 exploitsPublished Apr 15, 2021
- CVE-2021-26812Medium 6.1Cross Site Scripting (XSS) in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module.jitsi · meetEPSS97%1 exploitPublished Apr 14, 2021
- CVE-2011-2523Critical 9.8vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.vsftpd project · vsftpdEPSS96%3 exploitsPublished Apr 13, 2021
- CVE-2021-21425Critical 9.8In versions 1.10.7 and earlier, an unauthenticated user can execute some methods of administrator controller without needing any credentials.getgrav · grav-plugin-adminEPSS81%2 exploitsPublished Apr 7, 2021
- CVE-2021-24155High 7.2The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the imported files are of the SGBP format and extension, allowing high privilege users (admin+) to upload arbitrary files, including PHP ones, leading to RCE.backup-guard · backup guardEPSS84%4 exploitsPublished Apr 5, 2021
- CVE-2021-29156High 7.5ForgeRock OpenAM before 13.5.1 allows LDAP injection via the Webfinger protocol.forgerock · openamEPSS77%1 exploitPublished Mar 25, 2021
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-33553 | Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code. geutebrueck · g-cam ebc-2110 firmware | High 7.2 | 51% | 1 exploit | |
| CVE-2021-33552 | Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code. geutebrueck · g-cam ebc-2110 firmware | High 7.2 | 51% | 1 exploit | |
| CVE-2021-33551 | Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code. geutebrueck · g-cam ebc-2110 firmware | High 7.2 | 51% | 1 exploit | |
| CVE-2021-33550 | Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code. geutebrueck · g-cam ebc-2110 firmware | High 7.2 | 59% | 1 exploit | |
| CVE-2021-33549 | Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code. geutebrueck · g-cam ebc-2110 firmware | High 7.2 | 69% | 2 exploits | |
| CVE-2021-33548 | Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code. geutebrueck · g-cam ebc-2110 firmware | High 7.2 | 59% | 1 exploit | |
| CVE-2021-33544 | Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code. geutebrueck · g-cam ebc-2110 firmware | High 7.2 | 96% | 1 exploit | |
| CVE-2021-33543 | Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. geutebrueck · g-cam ebc-2110 firmware | Critical 9.8 | 81% | 1 exploit | |
| CVE-2019-14931 | An issue was discovered on Mitsubishi Electric Europe B.V. inea · me-rtu firmware | Critical 9.8 | 57% | 1 exploit | |
| CVE-2021-34646 | Booster for WooCommerce <= 5.4.3 - Authentication Bypass booster · booster for woocommerce | Critical 9.8 | 51% | 1 exploit | |
| CVE-2021-36356 | KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts arbitrary executable pathnames (even though browseSystemFiles.php is no longer reachable via the GUI). kramerav · viaware | Critical 9.8 | 54% | 2 exploits | |
| CVE-2021-37343 | A path traversal vulnerability exists in Nagios XI below version 5.8.5 AutoDiscovery component and could lead to post authenticated RCE under security context of the user running Nagios. nagios · nagios xi | High 8.8 | 24% | 2 exploits | |
| CVE-2021-37425 | Altova MobileTogether Server before 7.3 SP1 allows XXE attacks, such as an InfoSetChanges/Changes attack against /workflowmanagement, or reading mobiletogetherserver.cfg and then reading the certificate and private key. altova · mobiletogether server | Critical 9.1 | 66% | 1 exploit | |
| CVE-2021-24499 | The Workreap WordPress theme before 2.2.2 AJAX actions workreap_award_temp_file_uploader and workreap_temp_file_uploader did not perform nonce checks, or validate that the request is from a valid user in any other way. amentotech · workreap | Critical 9.8 | 60% | 1 exploit | |
| CVE-2021-32706 | Pi-hole's Web interface provides a central location to manage a Pi-hole instance and review performance statistics. pi-hole · pi-hole | High 8.8 | 60% | 1 exploit | |
| CVE-2020-35476 | OS Command Injection in OpenTSDB opentsdb · opentsdb | Critical 9.8 | 85% | 3 exploits | |
| CVE-2020-7388 | Sage X3 Unauthenticated Remote Command Execution (RCE) as SYSTEM in AdxDSrv.exe component. sage · adxadmin | Critical 9.8 | 69% | 1 exploit | |
| CVE-2020-7387 | Sage X3 Installation Pathname Disclosure. sage · adxadmin | Medium 5.3 | 34% | 1 exploit | |
| CVE-2018-11784 | tomcat7 - security update apache · tomcat | Medium 4.3 | 98% | 1 exploit | |
| CVE-2021-35064 | KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. kramerav · viaware | Critical 9.8 | 71% | 2 exploits | |
| CVE-2021-34621 | . properfraction · profilepress | Critical 9.8 | 69% | 2 exploits | |
| CVE-2018-11218 | redis - security update redislabs · redis | Critical 9.8 | 59% | 1 exploit | |
| CVE-2021-24145 | Modern Events Calendar Lite <= 5.16.4 - Authenticated Arbitrary File Upload leading to Remote Code Execution webnus · modern events calendar lite | High 7.2 | 87% | 4 exploits | |
| CVE-2021-28164 | In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. eclipse · jetty | Medium 5.3 | 82% | 2 exploits | |
| CVE-2021-34427 | In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessible from remote (current BIRT viewer dir) to inject JSP code into the running instance. eclipse · business intelligence and reporting tools | Critical 9.8 | 58% | 1 exploit | |
| CVE-2021-1499 | A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to upload files to an affected device. cisco · hyperflex hx data platform | Medium 5.3 | 80% | 2 exploits | |
| CVE-2021-32682 | elFinder before 2.1.59 contains multiple vulnerabilities leading to RCE std42 · elfinder | Critical 9.8 | 70% | 2 exploits | |
| CVE-2021-24347 | SP Project & Document Manager <= 4.21 - Authenticated Shell Upload smartypantsplugins · sp project \& document manager | High 8.8 | 54% | 3 exploits | |
| CVE-2021-33393 | lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/backup.pl is owned by the root account. ipfire · ipfire | High 8.8 | 59% | 4 exploits | |
| CVE-2021-3007 | Remote code execution in zendframework and laminas-http getlaminas · laminas-http | Critical 9.8 | 75% | 1 exploit | |
| CVE-2021-3490 | The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. linux · linux kernel | High 7.8 | 27% | 2 exploits | |
| CVE-2021-31643 | An XSS vulnerability exists in several IoT devices from CHIYU Technology, including SEMAC, Biosense, BF-630, BF-631, and Webpass due to a lack of sanitization on the component if.cgi - username parameter. chiyu-tech · bf-630 firmware | Medium 5.4 | 88% | 1 exploit | |
| CVE-2021-22911 | A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenticated NoSQL injection, resulting potentially in RCE. rocket.chat · rocket.chat | Critical 9.8 | 95% | 4 exploits | |
| CVE-2021-32305 | WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter. websvn · websvn | Critical 9.8 | 87% | 2 exploits | |
| CVE-2021-31181 | Microsoft SharePoint Remote Code Execution Vulnerability microsoft · sharepoint enterprise server | High 8.8 | 29% | 2 exploits | |
| CVE-2015-0235 | Heap-based buffer overflow in the nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST." gnu · glibc | Critical 10.0 | 95% | 8 exploits | |
| CVE-2017-16944 | The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to cause a denial of service (infinite loop and stack exhaustion) via vectors involving BDAT commands and an improper check for a '.' character signifying the end of the… exim · exim | High 7.5 | 63% | 1 exploit | |
| CVE-2021-21983 | Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating… vmware · vrealize operations manager | Medium 6.5 | 69% | 2 exploits | |
| CVE-2021-29442 | Authentication bypass for specific endpoint alibaba · nacos | High 7.5 | 66% | 2 exploits | |
| CVE-2021-3287 | Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class. zohocorp · manageengine opmanager | Critical 9.8 | 51% | 2 exploits | |
| CVE-2020-5791 | Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admin user to execute operating system commands with the privileges of the apache user. nagios · nagios xi | High 7.2 | 79% | 4 exploits | |
| CVE-2019-0232 | tomcat: Remote Code Execution on Windows apache · tomcat | High 8.1 | 100% | 2 exploits | |
| CVE-2019-0230 | struts2: possible RCE due to forced double OGNL evaluation when evaluated on raw user input in tag attributes apache · struts | Critical 9.8 | 97% | 4 exploits | |
| CVE-2019-10098 | In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL. apache · http server | Medium 6.1 | 74% | 1 exploit | |
| CVE-2021-29447 | A user with the ability to upload files (like an Author) can exploit an XML parsing issue in the Media Library leading to XXE attacks. wordpress · wordpress | Medium 6.5 | 86% | 2 exploits | |
| CVE-2021-26812 | Cross Site Scripting (XSS) in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module. jitsi · meet | Medium 6.1 | 97% | 1 exploit | |
| CVE-2011-2523 | vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp. vsftpd project · vsftpd | Critical 9.8 | 96% | 3 exploits | |
| CVE-2021-21425 | In versions 1.10.7 and earlier, an unauthenticated user can execute some methods of administrator controller without needing any credentials. getgrav · grav-plugin-admin | Critical 9.8 | 81% | 2 exploits | |
| CVE-2021-24155 | The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the imported files are of the SGBP format and extension, allowing high privilege users (admin+) to upload arbitrary files, including PHP ones, leading to RCE. backup-guard · backup guard | High 7.2 | 84% | 4 exploits | |
| CVE-2021-29156 | ForgeRock OpenAM before 13.5.1 allows LDAP injection via the Webfinger protocol. forgerock · openam | High 7.5 | 77% | 1 exploit |
Showing 501–550 of 2,494
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.