Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Emerging

Emerging Threats, Before They Hit KEV.

Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.

Synced hourly · figures as of Oct 20, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
890 vulnerabilities · highest exploit probability first
  • CVE-2016-1543High 7.5
    The RPC API in the RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and reset arbitrary user passwords by sending an action packet to xmlrpc after an authorization failure.
    bmc · bladelogic server automation console
    EPSS72%
    3 exploits
    Published Jun 13, 2016
  • CVE-2016-1542High 7.5
    The RPC API in RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and enumerate users by sending an action packet to xmlrpc after an authorization failure.
    bmc · bladelogic server automation console
    EPSS75%
    3 exploits
    Published Jun 13, 2016
  • CVE-2016-1209High 8.1
    Ninja Forms Contact Form 2.9.36 - 2.9.42 - Unauthenticated Arbitrary File Upload
    ninjaforms · ninja forms
    EPSS62%
    3 exploits
    Published May 4, 2016
  • CVE-2016-1593High 7.2
    Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to upload and execute arbitrary JSP files via a ..
    novell · service desk
    EPSS64%
    3 exploits
    Published Apr 22, 2016
  • CVE-2016-2056High 8.8
    xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the adduser_name argument in (1) web/useradm.c or (2) web/chpasswd.c.
    xymon · xymon
    EPSS55%
    2 exploits
    Published Apr 13, 2016
  • CVE-2016-0100High 8.4
    Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Library Loading Input Validation Remote Code Execution Vulnerability."
    microsoft · windows vista
    EPSS57%
    2 exploits
    Published Mar 9, 2016
  • CVE-2015-7547High 8.1
    Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS…
    gnu · glibc
    EPSS91%
    2 exploits
    Published Feb 18, 2016
  • CVE-2016-1525High 8.6
    Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allows remote authenticated users to read arbitrary files via a ..
    netgear · prosafe network management software 300
    EPSS75%
    3 exploits
    Published Feb 13, 2016
  • CVE-2016-0051High 7.8
    The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "WebDAV Elevation…
    microsoft · windows 10
    EPSS23%
    4 exploits
    Published Feb 10, 2016
  • CVE-2016-0041High 7.8
    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet Explorer 10 and 11 mishandle DLL loading, which allows local users to gain privileges via a…
    microsoft · internet explorer
    EPSS83%
    2 exploits
    Published Feb 10, 2016
  • CVE-2015-8279High 8.6
    Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to read arbitrary files via a request to an unspecified PHP script.
    samsung · web viewer
    EPSS51%
    1 exploit
    Published Jan 15, 2016
  • CVE-2015-8562High 7.5
    Joomla!
    joomla · joomla\!
    EPSS98%
    6 exploits
    Published Dec 16, 2015
  • CVE-2015-6133High 7.2
    Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Windows Library Loading Remote Code Execution…
    microsoft · windows 10
    EPSS67%
    2 exploits
    Published Dec 9, 2015
  • CVE-2015-6132High 7.2
    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle library loading, which allows local users to gain privileges via a crafted…
    microsoft · windows 10
    EPSS85%
    4 exploits
    Published Dec 9, 2015
  • CVE-2015-6128High 7.2
    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Windows Library Loading Remote Code Execution Vulnerability."
    microsoft · windows 7
    EPSS82%
    3 exploits
    Published Dec 9, 2015
  • CVE-2015-7808High 7.5
    The vB_Api_Hook::decodeArguments method in vBulletin 5 Connect 5.1.2 through 5.1.9 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object in the arguments parameter to ajax/api/hook/decodeArguments.
    vbulletin · vbulletin
    EPSS81%
    6 exploits
    Published Nov 24, 2015
  • CVE-2015-7858High 7.5
    SQL injection vulnerability in Joomla!
    joomla · joomla\!
    EPSS86%
    2 exploits
    Published Oct 29, 2015
  • CVE-2015-7857High 7.5
    SQL injection vulnerability in the getListQuery function in administrator/components/com_contenthistory/models/history.php in Joomla!
    joomla · joomla\!
    EPSS94%
    2 exploits
    Published Oct 29, 2015
  • CVE-2015-7297High 7.5
    SQL injection vulnerability in Joomla!
    joomla · joomla\!
    EPSS100%
    2 exploits
    Published Oct 29, 2015
  • CVE-2015-7007High 7.5
    Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement for AppleScript execution via unspecified vectors.
    apple · mac os x
    EPSS53%
    2 exploits
    Published Oct 23, 2015
  • CVE-2015-7768High 7.5
    Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD command.
    konicaminolta · ftp utility
    EPSS63%
    6 exploits
    Published Oct 9, 2015
  • CVE-2015-7603High 7.8
    Directory traversal vulnerability in Konica Minolta FTP Utility 1.0 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in a RETR command.
    konicaminolta · ftp utility
    EPSS61%
    2 exploits
    Published Sep 29, 2015
  • CVE-2015-7602High 7.8
    Directory traversal vulnerability in BisonWare BisonFTP 3.5 allows remote attackers to read arbitrary files via a ../ (dot dot slash) in a RETR command.
    bisonware · bisonftp
    EPSS62%
    3 exploits
    Published Sep 29, 2015
  • CVE-2015-7601High 7.8
    Directory traversal vulnerability in PCMan's FTP Server 2.0.7 allows remote attackers to read arbitrary files via a ..// (dot dot double slash) in a RETR command.
    pcman · ftp server
    EPSS59%
    2 exploits
    Published Sep 29, 2015
  • CVE-2015-7387High 7.5
    ZOHO ManageEngine EventLog Analyzer 10.6 build 10060 and earlier allows remote attackers to bypass intended restrictions and execute arbitrary SQL commands via an allowed query followed by a disallowed one in the query parameter to event/runQuery.do, as demonstrated by "SELECT…
    zohocorp · manageengine eventlog analyzer
    EPSS80%
    7 exploits
    Published Sep 28, 2015
  • CVE-2015-7243High 7.5
    Buffer overflow in Boxoft WAV to MP3 Converter allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted WAV file.
    boxoft · boxoft wav to mp3 converter
    EPSS58%
    6 exploits
    Published Sep 18, 2015
  • CVE-2015-1489High 8.5
    The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to gain privileges via unspecified vectors.
    symantec · endpoint protection manager
    EPSS25%
    2 exploits
    Published Jul 31, 2015
  • CVE-2015-1486High 7.5
    The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers to bypass authentication via a crafted password-reset action that triggers a new administrative session.
    symantec · endpoint protection manager
    EPSS68%
    2 exploits
    Published Jul 31, 2015
  • CVE-2015-5374High 7.8
    Specially crafted packets sent to port 50000/UDP could cause a denial-of-service of the affected device.
    siemens · siprotec firmware
    EPSS74%
    1 exploit
    Published Jul 18, 2015
  • CVE-2015-2996High 8.5
    Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitrary files via a ..
    sysaid · sysaid
    EPSS87%
    2 exploits
    Published Jun 8, 2015
  • CVE-2015-2993High 7.5
    SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers to (1) create administrator accounts via a crafted request to /createnewaccount or (2) write to arbitrary files via the fileName parameter to /userentry.
    sysaid · sysaid
    EPSS55%
    2 exploits
    Published Jun 8, 2015
  • CVE-2015-2843High 7.5
    Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute arbitrary SQL commands via the (1) user_name or (2) user_pass parameter in go_login.php or the PATH_INFO to (3) go_login/validate_credentials/admin/ or (4)…
    goautodial · goadmin ce
    EPSS38%
    4 exploits
    Published May 12, 2015
  • CVE-2015-2208High 7.5
    The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the object parameter.
    avinu · phpmoadmin
    EPSS62%
    4 exploits
    Published Mar 12, 2015
  • CVE-2015-1592High 7.5
    Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::thaw function, which allows remote attackers to include and execute arbitrary local Perl files and possibly execute arbitrary code via…
    sixapart · movable type
    EPSS75%
    2 exploits
    Published Feb 19, 2015
  • CVE-2015-1587High 7.5
    Unrestricted file upload vulnerability in file_to_index.php in Maarch LetterBox 2.8 and earlier and GEC/GED 1.4 and earlier allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a request to a predictable filename…
    maarch · gec\/ged
    EPSS43%
    4 exploits
    Published Feb 19, 2015
  • CVE-2014-9312High 8.8
    Photo Gallery by 10Web <= 1.2.5 - Unrestricted File Upload
    10web · photo gallery
    EPSS45%
    4 exploits
    Published Feb 11, 2015
  • CVE-2015-1376High 8.8
    Pixabay Images <= 2.3 - Arbitrary File Upload
    pixabay images project · pixabay images
    EPSS33%
    3 exploits
    Published Jan 18, 2015
  • CVE-2014-9195High 7.5
    Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic.
    phoenixcontact-software · multiprog
    EPSS81%
    1 exploit
    Published Jan 17, 2015
  • CVE-2014-9308High 8.8
    Shopping Cart & eCommerce Store < 3.0.16 - Arbitrary File Upload
    wpeasycart · wp easycart
    EPSS51%
    5 exploits
    Published Jan 8, 2015
  • CVE-2014-9567High 7.5
    Unrestricted file upload vulnerability in process-upload.php in ProjectSend (formerly cFTP) r100 through r561 allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in the upload/files/…
    projectsend · projectsend
    EPSS43%
    6 exploits
    Published Jan 7, 2015
  • CVE-2011-4722High 7.8
    Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a ..
    ipswitch · tftp server
    EPSS58%
    2 exploits
    Published Dec 28, 2014
  • CVE-2014-7866High 7.5
    Multiple directory traversal vulnerabilities in ZOHO ManageEngine OpManager 8 (build 88xx) through 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to write and execute arbitrary files via a ..
    zohocorp · manageengine opmanager
    EPSS80%
    2 exploits
    Published Dec 10, 2014
  • CVE-2014-4880High 7.5
    Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote attackers to execute arbitrary code via an RTSP PLAY request with a long Authorization header.
    hikvision · dvr ds-7204 firmware
    EPSS71%
    4 exploits
    Published Dec 8, 2014
  • CVE-2014-3996High 7.5
    SQL injection vulnerability in the LinkViewFetchServlet servlet in ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90043, Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition…
    manageengine · desktop central
    EPSS38%
    3 exploits
    Published Dec 5, 2014
  • CVE-2014-7868High 7.5
    Multiple SQL injection vulnerabilities in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the (1) OPM_BVNAME parameter in a Delete operation to the…
    zohocorp · manageengine opmanager
    EPSS73%
    3 exploits
    Published Dec 4, 2014
  • CVE-2014-8424High 7.8
    ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication.
    arris · vap2500 firmware
    EPSS60%
    2 exploits
    Published Nov 28, 2014
  • CVE-2014-7146High 7.5
    The XmlImportExport plugin in MantisBT 1.2.17 and earlier allows remote attackers to execute arbitrary PHP code via a crafted (1) description field or (2) issuelink attribute in an XML file, which is not properly handled when executing the preg_replace function with the e…
    mantisbt · mantisbt
    EPSS51%
    3 exploits
    Published Nov 18, 2014
  • CVE-2014-8517High 7.5
    The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 through 6.0.6, and 6.1 through 6.1.5 allows remote attackers to execute arbitrary commands via a | (pipe) character at the end of an HTTP redirect.
    netbsd · netbsd
    EPSS69%
    3 exploits
    Published Nov 17, 2014
  • CVE-2014-8799High 7.5
    DukaPress < 2.5.4 - Directory Traversal
    dukapress · dukapress
    EPSS68%
    2 exploits
    Published Nov 12, 2014
  • CVE-2014-4076High 7.2
    Microsoft Windows Server 2003 SP2 allows local users to gain privileges via a crafted IOCTL call to (1) tcpip.sys or (2) tcpip6.sys, aka "TCP/IP Elevation of Privilege Vulnerability."
    microsoft · windows server 2003
    EPSS23%
    4 exploits
    Published Nov 11, 2014
Showing 501–550 of 890

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.

Figures as of Oct 20, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.