Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
1,192 vulnerabilities · highest exploit probability first
- CVE-2014-7187Critical 10.0Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the…gnu · bashEPSS60%2 exploitsPublished Sep 28, 2014
- CVE-2014-7186Critical 10.0The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the "redir_stack"…gnu · bashEPSS64%2 exploitsPublished Sep 28, 2014
- CVE-2014-6277Critical 10.0GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access, and untrusted-pointer read and write…gnu · bashEPSS64%3 exploitsPublished Sep 27, 2014
- CVE-2014-2624Critical 10.0Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2264.hp · network node manager iEPSS65%2 exploitsPublished Sep 10, 2014
- CVE-2014-0556Critical 10.0flash-plugin: multiple code execution or security bypass flaws (APSB14-21)adobe · adobe airEPSS85%2 exploitsPublished Sep 9, 2014
- CVE-2014-3914Critical 10.0Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in Rocket ServerGraph 1.2 allows remote attackers to (1) create arbitrary files via a ..rocketsoftware · rocket servergraphEPSS73%3 exploitsPublished Aug 7, 2014
- CVE-2014-4725Critical 9.8MailPoet Newsletters <= 2.6.6 - Arbitrary File Uploadmailpoet · mailpoet newslettersEPSS61%2 exploitsPublished Jul 31, 2014
- CVE-2014-2623Critical 10.0Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors.hp · storage data protectorEPSS91%8 exploitsPublished Jul 17, 2014
- CVE-2013-6221Critical 10.0Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server is enabled, allows remote attackers to create arbitrary files and consequently execute arbitrary code via unspecified vectors, aka…hp · service virtualizationEPSS78%1 exploitPublished Jun 18, 2014
- CVE-2014-3804Critical 10.0The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) update_system_info_debian_package, (2) ossec_task, (3) set_ossim_setup admin_ip, (4) sync_rserver, or (5) set_ossim_setup framework_ip request, a…alienvault · open source security information managementEPSS72%3 exploitsPublished Jun 13, 2014
- CVE-2011-3625Critical 9.3Stack-based buffer overflow in the sub_read_line_sami function in subreader.c in MPlayer, as used in SMPlayer 0.6.9, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a SAMI subtitle file.ricardo villalba · smplayerEPSS24%2 exploitsPublished Jun 11, 2014
- CVE-2014-1773Critical 9.3Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1783,…microsoft · internet explorerEPSS63%1 exploitPublished Jun 11, 2014
- CVE-2014-0282Critical 9.3Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1775,…microsoft · internet explorerEPSS51%2 exploitsPublished Jun 11, 2014
- CVE-2014-3913Critical 10.0Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows remote attackers to execute arbitrary code via a request for a non-existent file.ericom · accessnow serverEPSS61%3 exploitsPublished Jun 4, 2014
- CVE-2014-3936Critical 10.0Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev.dlink · dsp-w215EPSS77%3 exploitsPublished Jun 2, 2014
- CVE-2014-3791Critical 10.0Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 6.8 allows remote attackers to execute arbitrary code via a long string in a cookie UserID parameter to vfolder.ghp.efssoft · easy file sharing web serverEPSS79%4 exploitsPublished May 20, 2014
- CVE-2014-0515Critical 10.0flash-plugin: buffer overflow vulnerability leads to arbitrary code execution (APSB14-13)adobe · flash playerEPSS94%2 exploitsPublished Apr 28, 2014
- CVE-2014-0514Critical 9.3The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of JavaScript, which allows remote attackers to execute arbitrary code via a crafted PDF document, a related issue to CVE-2012-6636.adobe · adobe readerEPSS72%3 exploitsPublished Apr 15, 2014
- CVE-2014-1511Critical 9.8Mozilla: Privilege escalation using WebIDL-implemented APIs (MFSA 2014-29)mozilla · firefoxEPSS84%2 exploitsPublished Mar 18, 2014
- CVE-2014-1510Critical 9.8Mozilla: Privilege escalation using WebIDL-implemented APIs (MFSA 2014-29)mozilla · firefoxEPSS82%2 exploitsPublished Mar 18, 2014
- CVE-2014-0783Critical 9.0Stack-based buffer overflow in BKHOdeq.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet.yokogawa · centum cs 3000EPSS68%2 exploitsPublished Mar 14, 2014
- CVE-2014-0307Critical 9.3Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a certain sequence of manipulations of a TextRange element, aka "Internet Explorer Memory Corruption…microsoft · internet explorerEPSS69%3 exploitsPublished Mar 12, 2014
- CVE-2013-3928Critical 9.3Stack-based buffer overflow in the ReadFile function in flt_BMP.dll in Chasys Draw IES before 4.11.02 allows remote attackers to execute arbitrary code via crafted biPlanes and biBitCount fields in a BMP file.jpchacha · chasys draw iesEPSS37%4 exploitsPublished Mar 11, 2014
- CVE-2014-2299Critical 9.3Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data.wireshark · wiresharkEPSS47%2 exploitsPublished Mar 11, 2014
- CVE-2014-2206Critical 10.0Stack-based buffer overflow in GetGo Download Manager 4.9.0.1982, 4.8.2.1346, 4.4.5.502, and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a long HTTP Response Header.getgosoft · getgo download managerEPSS61%2 exploitsPublished Mar 5, 2014
- CVE-2013-4710Critical 9.3Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly implement the WebView class, which allows remote attackers to execute arbitrary methods of Java objects or cause a denial of service (reboot) via a crafted web…google · androidEPSS43%3 exploitsPublished Mar 3, 2014
- CVE-2014-0257Critical 9.3Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly determine whether it is safe to execute a method, which allows remote attackers to execute arbitrary code via (1) a crafted web site or (2) a crafted .NET Framework application…microsoft · .net frameworkEPSS70%2 exploitsPublished Feb 12, 2014
- CVE-2014-0980Critical 9.3Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI file.poster software · publish itEPSS40%5 exploitsPublished Feb 11, 2014
- CVE-2013-3482Critical 9.3Stack-based buffer overflow in the rf_report_error function in ermapper_u.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long string in an ERS file.hexagon · erdas er viewerEPSS32%3 exploitsPublished Jan 19, 2014
- CVE-2014-0659Critical 10.0The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote attackers to read credential and configuration data, and execute arbitrary…cisco · rvs4000EPSS74%2 exploitsPublished Jan 12, 2014
- CVE-2013-6955Critical 10.0webman/imageSelector.cgi in Synology DiskStation Manager (DSM) 4.0 before 4.0-2259, 4.2 before 4.2-3243, and 4.3 before 4.3-3810 Update 1 allows remote attackers to append data to arbitrary files, and consequently execute arbitrary code, via a pathname in the SLICEUPLOAD…synology · diskstation managerEPSS85%2 exploitsPublished Jan 9, 2014
- CVE-2013-6194Critical 10.0Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1905.hp · storage data protectorEPSS66%3 exploitsPublished Jan 4, 2014
- CVE-2013-2347Critical 10.0The Backup Client Service (OmniInet.exe) in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary commands or cause a denial of service via a crafted EXEC_BAR packet to TCP port 5555, aka ZDI-CAN-1885.hp · storage data protectorEPSS66%3 exploitsPublished Jan 4, 2014
- CVE-2012-0262Critical 10.0op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter.op5 · monitorEPSS73%2 exploitsPublished Dec 31, 2013
- CVE-2012-0261Critical 10.0license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for an install action.op5 · monitorEPSS74%2 exploitsPublished Dec 31, 2013
- CVE-2013-4988Critical 9.3Stack-based buffer overflow in IcoFX 2.5 and earlier allows remote attackers to execute arbitrary code via a long idCount value in an ICONDIR structure in an ICO file.icofx · icofxEPSS67%6 exploitsPublished Dec 13, 2013
- CVE-2013-2751Critical 10.0Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to execute arbitrary Perl code via a crafted request, related to the "forgot password workflow."netgear · raidiatorEPSS72%3 exploitsPublished Dec 12, 2013
- CVE-2013-3623Critical 10.0Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro X9 generation motherboards allow remote attackers to execute arbitrary code via the (1)…supermicro · intelligent platform management firmwareEPSS72%3 exploitsPublished Dec 10, 2013
- CVE-2013-5331Critical 9.3flash-plugin: multiple code execution flaws (APSB13-28)adobe · airEPSS72%2 exploitsPublished Dec 10, 2013
- CVE-2013-6935Critical 9.3Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a long string in the SourcePath value in a .wcf file.videocharge · watermark masterEPSS32%3 exploitsPublished Dec 4, 2013
- CVE-2013-4837Critical 10.0Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1832.hp · loadrunnerEPSS63%2 exploitsPublished Nov 4, 2013
- CVE-2013-4822Critical 10.0Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent Management System Software Module (aka BIMS) allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1606.hp · imc branch intelligent management system software moduleEPSS63%2 exploitsPublished Oct 13, 2013
- CVE-2013-2578Critical 10.0cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the ServerName parameter and (2)…tp-link · tl-sc3130EPSS74%2 exploitsPublished Oct 11, 2013
- CVE-2013-5486Critical 10.0Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036.cisco · prime data center network managerEPSS76%3 exploitsPublished Sep 23, 2013
- CVE-2013-4811Critical 10.0UpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the adCert argument, which allows remote attackers to upload .jsp files and consequently…hp · identity driven managerEPSS71%2 exploitsPublished Sep 16, 2013
- CVE-2013-4812Critical 10.0UpdateCertificatesServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the fileName argument, which allows remote attackers to upload .jsp files and consequently…hp · identity driven managerEPSS52%2 exploitsPublished Sep 16, 2013
- CVE-2013-3205Critical 9.3Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."microsoft · internet explorerEPSS66%2 exploitsPublished Sep 11, 2013
- CVE-2013-4983Critical 10.0The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to end-user/index.php.sophos · web appliance firmwareEPSS90%3 exploitsPublished Sep 10, 2013
- CVE-2013-2068Critical 9.4cfme: CFME 2.0 multiple zip file upload path traversal vulnerabilitiesredhat · cloudforms management engineEPSS59%2 exploitsPublished Sep 4, 2013
- CVE-2013-3184Critical 9.3Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."microsoft · internet explorerEPSS58%2 exploitsPublished Aug 14, 2013
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2014-7187 | Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the… gnu · bash | Critical 10.0 | 60% | 2 exploits | |
| CVE-2014-7186 | The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the "redir_stack"… gnu · bash | Critical 10.0 | 64% | 2 exploits | |
| CVE-2014-6277 | GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access, and untrusted-pointer read and write… gnu · bash | Critical 10.0 | 64% | 3 exploits | |
| CVE-2014-2624 | Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2264. hp · network node manager i | Critical 10.0 | 65% | 2 exploits | |
| CVE-2014-0556 | flash-plugin: multiple code execution or security bypass flaws (APSB14-21) adobe · adobe air | Critical 10.0 | 85% | 2 exploits | |
| CVE-2014-3914 | Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in Rocket ServerGraph 1.2 allows remote attackers to (1) create arbitrary files via a .. rocketsoftware · rocket servergraph | Critical 10.0 | 73% | 3 exploits | |
| CVE-2014-4725 | MailPoet Newsletters <= 2.6.6 - Arbitrary File Upload mailpoet · mailpoet newsletters | Critical 9.8 | 61% | 2 exploits | |
| CVE-2014-2623 | Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors. hp · storage data protector | Critical 10.0 | 91% | 8 exploits | |
| CVE-2013-6221 | Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server is enabled, allows remote attackers to create arbitrary files and consequently execute arbitrary code via unspecified vectors, aka… hp · service virtualization | Critical 10.0 | 78% | 1 exploit | |
| CVE-2014-3804 | The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) update_system_info_debian_package, (2) ossec_task, (3) set_ossim_setup admin_ip, (4) sync_rserver, or (5) set_ossim_setup framework_ip request, a… alienvault · open source security information management | Critical 10.0 | 72% | 3 exploits | |
| CVE-2011-3625 | Stack-based buffer overflow in the sub_read_line_sami function in subreader.c in MPlayer, as used in SMPlayer 0.6.9, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a SAMI subtitle file. ricardo villalba · smplayer | Critical 9.3 | 24% | 2 exploits | |
| CVE-2014-1773 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1783,… microsoft · internet explorer | Critical 9.3 | 63% | 1 exploit | |
| CVE-2014-0282 | Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1775,… microsoft · internet explorer | Critical 9.3 | 51% | 2 exploits | |
| CVE-2014-3913 | Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows remote attackers to execute arbitrary code via a request for a non-existent file. ericom · accessnow server | Critical 10.0 | 61% | 3 exploits | |
| CVE-2014-3936 | Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. dlink · dsp-w215 | Critical 10.0 | 77% | 3 exploits | |
| CVE-2014-3791 | Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 6.8 allows remote attackers to execute arbitrary code via a long string in a cookie UserID parameter to vfolder.ghp. efssoft · easy file sharing web server | Critical 10.0 | 79% | 4 exploits | |
| CVE-2014-0515 | flash-plugin: buffer overflow vulnerability leads to arbitrary code execution (APSB14-13) adobe · flash player | Critical 10.0 | 94% | 2 exploits | |
| CVE-2014-0514 | The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of JavaScript, which allows remote attackers to execute arbitrary code via a crafted PDF document, a related issue to CVE-2012-6636. adobe · adobe reader | Critical 9.3 | 72% | 3 exploits | |
| CVE-2014-1511 | Mozilla: Privilege escalation using WebIDL-implemented APIs (MFSA 2014-29) mozilla · firefox | Critical 9.8 | 84% | 2 exploits | |
| CVE-2014-1510 | Mozilla: Privilege escalation using WebIDL-implemented APIs (MFSA 2014-29) mozilla · firefox | Critical 9.8 | 82% | 2 exploits | |
| CVE-2014-0783 | Stack-based buffer overflow in BKHOdeq.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet. yokogawa · centum cs 3000 | Critical 9.0 | 68% | 2 exploits | |
| CVE-2014-0307 | Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a certain sequence of manipulations of a TextRange element, aka "Internet Explorer Memory Corruption… microsoft · internet explorer | Critical 9.3 | 69% | 3 exploits | |
| CVE-2013-3928 | Stack-based buffer overflow in the ReadFile function in flt_BMP.dll in Chasys Draw IES before 4.11.02 allows remote attackers to execute arbitrary code via crafted biPlanes and biBitCount fields in a BMP file. jpchacha · chasys draw ies | Critical 9.3 | 37% | 4 exploits | |
| CVE-2014-2299 | Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data. wireshark · wireshark | Critical 9.3 | 47% | 2 exploits | |
| CVE-2014-2206 | Stack-based buffer overflow in GetGo Download Manager 4.9.0.1982, 4.8.2.1346, 4.4.5.502, and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a long HTTP Response Header. getgosoft · getgo download manager | Critical 10.0 | 61% | 2 exploits | |
| CVE-2013-4710 | Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly implement the WebView class, which allows remote attackers to execute arbitrary methods of Java objects or cause a denial of service (reboot) via a crafted web… google · android | Critical 9.3 | 43% | 3 exploits | |
| CVE-2014-0257 | Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly determine whether it is safe to execute a method, which allows remote attackers to execute arbitrary code via (1) a crafted web site or (2) a crafted .NET Framework application… microsoft · .net framework | Critical 9.3 | 70% | 2 exploits | |
| CVE-2014-0980 | Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI file. poster software · publish it | Critical 9.3 | 40% | 5 exploits | |
| CVE-2013-3482 | Stack-based buffer overflow in the rf_report_error function in ermapper_u.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long string in an ERS file. hexagon · erdas er viewer | Critical 9.3 | 32% | 3 exploits | |
| CVE-2014-0659 | The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote attackers to read credential and configuration data, and execute arbitrary… cisco · rvs4000 | Critical 10.0 | 74% | 2 exploits | |
| CVE-2013-6955 | webman/imageSelector.cgi in Synology DiskStation Manager (DSM) 4.0 before 4.0-2259, 4.2 before 4.2-3243, and 4.3 before 4.3-3810 Update 1 allows remote attackers to append data to arbitrary files, and consequently execute arbitrary code, via a pathname in the SLICEUPLOAD… synology · diskstation manager | Critical 10.0 | 85% | 2 exploits | |
| CVE-2013-6194 | Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1905. hp · storage data protector | Critical 10.0 | 66% | 3 exploits | |
| CVE-2013-2347 | The Backup Client Service (OmniInet.exe) in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary commands or cause a denial of service via a crafted EXEC_BAR packet to TCP port 5555, aka ZDI-CAN-1885. hp · storage data protector | Critical 10.0 | 66% | 3 exploits | |
| CVE-2012-0262 | op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter. op5 · monitor | Critical 10.0 | 73% | 2 exploits | |
| CVE-2012-0261 | license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for an install action. op5 · monitor | Critical 10.0 | 74% | 2 exploits | |
| CVE-2013-4988 | Stack-based buffer overflow in IcoFX 2.5 and earlier allows remote attackers to execute arbitrary code via a long idCount value in an ICONDIR structure in an ICO file. icofx · icofx | Critical 9.3 | 67% | 6 exploits | |
| CVE-2013-2751 | Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to execute arbitrary Perl code via a crafted request, related to the "forgot password workflow." netgear · raidiator | Critical 10.0 | 72% | 3 exploits | |
| CVE-2013-3623 | Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro X9 generation motherboards allow remote attackers to execute arbitrary code via the (1)… supermicro · intelligent platform management firmware | Critical 10.0 | 72% | 3 exploits | |
| CVE-2013-5331 | flash-plugin: multiple code execution flaws (APSB13-28) adobe · air | Critical 9.3 | 72% | 2 exploits | |
| CVE-2013-6935 | Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a long string in the SourcePath value in a .wcf file. videocharge · watermark master | Critical 9.3 | 32% | 3 exploits | |
| CVE-2013-4837 | Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1832. hp · loadrunner | Critical 10.0 | 63% | 2 exploits | |
| CVE-2013-4822 | Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent Management System Software Module (aka BIMS) allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1606. hp · imc branch intelligent management system software module | Critical 10.0 | 63% | 2 exploits | |
| CVE-2013-2578 | cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the ServerName parameter and (2)… tp-link · tl-sc3130 | Critical 10.0 | 74% | 2 exploits | |
| CVE-2013-5486 | Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. cisco · prime data center network manager | Critical 10.0 | 76% | 3 exploits | |
| CVE-2013-4811 | UpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the adCert argument, which allows remote attackers to upload .jsp files and consequently… hp · identity driven manager | Critical 10.0 | 71% | 2 exploits | |
| CVE-2013-4812 | UpdateCertificatesServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the fileName argument, which allows remote attackers to upload .jsp files and consequently… hp · identity driven manager | Critical 10.0 | 52% | 2 exploits | |
| CVE-2013-3205 | Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 66% | 2 exploits | |
| CVE-2013-4983 | The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to end-user/index.php. sophos · web appliance firmware | Critical 10.0 | 90% | 3 exploits | |
| CVE-2013-2068 | cfme: CFME 2.0 multiple zip file upload path traversal vulnerabilities redhat · cloudforms management engine | Critical 9.4 | 59% | 2 exploits | |
| CVE-2013-3184 | Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 58% | 2 exploits |
Showing 601–650 of 1,192
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.