Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Emerging

Emerging Threats, Before They Hit KEV.

Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.

Synced hourly · figures as of Oct 19, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
2,494 vulnerabilities · highest exploit probability first
  • CVE-2020-10915Critical 9.8
    This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.4587.
    veeam · one
    EPSS87%
    1 exploit
    Published Apr 22, 2020
  • CVE-2020-10914Critical 9.8
    This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.4587.
    veeam · one
    EPSS48%
    1 exploit
    Published Apr 22, 2020
  • CVE-2020-3250Critical 9.8
    Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device.
    cisco · ucs director
    EPSS61%
    1 exploit
    Published Apr 15, 2020
  • CVE-2020-3243Critical 9.8
    Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device.
    cisco · ucs director
    EPSS88%
    1 exploit
    Published Apr 15, 2020
  • CVE-2020-10977Medium 5.5
    GitLab EE/CE 8.5 to 12.9 is vulnerable to a an path traversal when moving an issue between projects.
    gitlab · gitlab
    EPSS43%
    2 exploits
    Published Apr 8, 2020
  • CVE-2019-19699High 7.2
    There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at…
    centreon · centreon
    EPSS28%
    2 exploits
    Published Apr 6, 2020
  • CVE-2020-11456Medium 5.4
    LimeSurvey before 4.1.12+200324 has stored XSS in application/views/admin/surveysgroups/surveySettings.php and application/models/SurveysGroups.php (aka survey groups).
    limesurvey · limesurvey
    EPSS71%
    2 exploits
    Published Apr 1, 2020
  • CVE-2020-11455Critical 9.8
    LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php.
    limesurvey · limesurvey
    EPSS97%
    2 exploits
    Published Apr 1, 2020
  • CVE-2020-10884High 8.8
    This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers.
    tp-link · ac1750 firmware
    EPSS22%
    3 exploits
    Published Mar 25, 2020
  • CVE-2020-10882High 8.8
    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers.
    tp-link · ac1750 firmware
    EPSS41%
    3 exploits
    Published Mar 25, 2020
  • CVE-2020-10879Critical 9.8
    rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nodeId parameter is passed directly to the exec function without being escaped.
    rconfig · rconfig
    EPSS84%
    1 exploit
    Published Mar 23, 2020
  • CVE-2020-10808High 8.8
    Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup Backup Listing Endpoint.
    vestacp · vesta control panel
    EPSS78%
    3 exploits
    Published Mar 22, 2020
  • CVE-2020-10220Critical 9.8
    The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter.
    rconfig · rconfig
    EPSS100%
    4 exploits
    Published Mar 7, 2020
  • CVE-2016-10045Critical 9.8
    Remote code execution in PHPMailer
    phpmailer project · phpmailer
    EPSS98%
    5 exploits
    Published Mar 5, 2020
  • CVE-2020-10173High 8.8
    Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi.
    comtrend · vr-3033 firmware
    EPSS77%
    1 exploit
    Published Mar 5, 2020
  • CVE-2019-20501High 7.8
    D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in the Web interface, using shell metacharacters in the admin.cgi?action=upgrade firmwareRestore or firmwareServerip parameter.
    dlink · dwl-2600ap firmware
    EPSS90%
    1 exploit
    Published Mar 5, 2020
  • CVE-2019-20499High 7.8
    D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_restore configRestore or configServerip parameter.
    dlink · dwl-2600ap firmware
    EPSS95%
    3 exploits
    Published Mar 5, 2020
  • CVE-2020-9465Critical 9.8
    The eonweb web interface is prone to a SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the user_id field in a cookie.
    eyesofnetwork · eyesofnetwork
    EPSS82%
    2 exploits
    Published Feb 28, 2020
  • CVE-2020-8794Critical 9.8
    OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies.
    opensmtpd · opensmtpd
    EPSS89%
    4 exploits
    Published Feb 25, 2020
  • CVE-2020-8813High 8.8
    graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege.
    cacti · cacti
    EPSS74%
    3 exploits
    Published Feb 22, 2020
  • CVE-2020-8012Critical 9.8
    CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (controller) component.
    broadcom · unified infrastructure management
    EPSS77%
    4 exploits
    Published Feb 18, 2020
  • CVE-2020-8010Critical 9.8
    CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot (controller) component.
    broadcom · unified infrastructure management
    EPSS51%
    2 exploits
    Published Feb 18, 2020
  • CVE-2014-7236Critical 9.1
    Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do/view/Main/WebHome.
    twiki · twiki
    EPSS56%
    3 exploits
    Published Feb 17, 2020
  • CVE-2015-6922Critical 9.8
    Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before 9.1.0.9 does not properly require authentication, which allows remote attackers to bypass authentication and (1) add an administrative account via crafted…
    kaseya · virtual system administrator
    EPSS82%
    5 exploits
    Published Feb 17, 2020
  • CVE-2020-8518Critical 9.8
    Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code execution.
    horde · groupware
    EPSS72%
    3 exploits
    Published Feb 17, 2020
  • CVE-2013-4211Critical 9.8
    A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, which could let a remote malicious user execute arbitrary PHP code
    openx · openx
    EPSS71%
    4 exploits
    Published Feb 14, 2020
  • CVE-2020-7209Critical 9.8
    LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2.
    hp · linuxki
    EPSS99%
    4 exploits
    Published Feb 12, 2020
  • CVE-2011-4908Critical 9.8
    TinyBrowser plugin for Joomla!
    tiny · tinybrowser
    EPSS56%
    3 exploits
    Published Feb 12, 2020
  • CVE-2013-2097High 7.8
    ZPanel through 10.1.0 has Remote Command Execution
    zpanel project · zpanel
    EPSS26%
    5 exploits
    Published Feb 12, 2020
  • CVE-2013-2010Critical 9.8
    WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability
    boldgrid · w3 total cache
    EPSS74%
    4 exploits
    Published Feb 12, 2020
  • CVE-2020-0668High 7.8
    An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'.
    microsoft · windows 10
    EPSS26%
    3 exploits
    Published Feb 11, 2020
  • CVE-2013-1359Critical 9.8
    An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0 via the skipSessionCheck parameter to the UMA…
    sonicwall · analyzer
    EPSS89%
    6 exploits
    Published Feb 11, 2020
  • CVE-2013-0803Critical 9.8
    A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arbitrary code.
    polarbear cms project · polarbear cms
    EPSS75%
    4 exploits
    Published Feb 11, 2020
  • CVE-2014-7863High 7.5
    The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager before 11.9 build 11912, OpManager 8 through 11.5 build 11400, and IT360 10.5 and earlier does not properly restrict access, which allows remote attackers and remote authenticated users…
    zohocorp · manageengine applications manager
    EPSS83%
    2 exploits
    Published Feb 8, 2020
  • CVE-2014-5468High 8.8
    A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cfm to specify a malicious PNG file, which could let a remote malicious user obtain sensitive information or execute arbitrary code.
    getrailo · railo
    EPSS53%
    4 exploits
    Published Feb 7, 2020
  • CVE-2013-3629High 8.8
    ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution
    ispconfig · ispconfig
    EPSS43%
    3 exploits
    Published Feb 7, 2020
  • CVE-2013-3628High 8.8
    Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerability
    zabbix · zabbix
    EPSS67%
    2 exploits
    Published Feb 7, 2020
  • CVE-2013-3591High 8.8
    vTiger CRM 5.3 and 5.4: 'files' Upload Folder Arbitrary PHP Code Execution Vulnerability
    vtiger · vtiger crm
    EPSS43%
    3 exploits
    Published Feb 7, 2020
  • CVE-2020-8656Critical 9.8
    The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the username field to getApiKey in include/api_functions.php.
    eyesofnetwork · eyesofnetwork
    EPSS85%
    5 exploits
    Published Feb 6, 2020
  • CVE-2020-8654High 8.8
    An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the /module/module_frame/index.php autodiscovery.php target field.
    eyesofnetwork · eyesofnetwork
    EPSS92%
    6 exploits
    Published Feb 6, 2020
  • CVE-2013-3568High 8.8
    Cross-site request forgery (CSRF) vulnerability in Cisco Linksys WRT110 allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors.
    cisco · linksys wrt110 firmware
    EPSS25%
    3 exploits
    Published Feb 6, 2020
  • CVE-2020-8772Critical 9.8
    The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in iwp_mmb_set_request in init.php.
    revmakx · infinitewp client
    EPSS88%
    1 exploit
    Published Feb 6, 2020
  • CVE-2015-6000High 8.8
    Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger/actions/CompanyDetailsSave.php in Vtiger CRM 6.3.0 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an…
    vtiger · vtiger crm
    EPSS40%
    3 exploits
    Published Feb 6, 2020
  • CVE-2020-6754Critical 9.8
    dotCMS before 5.2.4 is vulnerable to directory traversal, leading to incorrect access control.
    dotcms · dotcms
    EPSS95%
    1 exploit
    Published Feb 5, 2020
  • CVE-2013-3215Critical 9.8
    vtiger CRM 5.4.0 and earlier contain an Authentication Bypass Vulnerability due to improper authentication validation in the validateSession function.
    vtiger · vtiger crm
    EPSS69%
    2 exploits
    Published Jan 29, 2020
  • CVE-2019-20215Critical 9.8
    D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via a urn: to the M-SEARCH method in ssdpcgi() in /htdocs/cgibin, because HTTP_ST is mishandled.
    dlink · dir-859 firmware
    EPSS75%
    3 exploits
    Published Jan 29, 2020
  • CVE-2013-3214Critical 9.8
    vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'.
    vtiger · vtiger crm
    EPSS85%
    4 exploits
    Published Jan 28, 2020
  • CVE-2014-8741Critical 9.8
    Directory traversal vulnerability in the GfdFileUploadServerlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to write to arbitrary files via unspecified vectors.
    lexmark · markvision enterprise
    EPSS77%
    2 exploits
    Published Jan 27, 2020
  • CVE-2013-7390Critical 9.8
    Unrestricted file upload vulnerability in AgentLogUploadServlet in ManageEngine DesktopCentral 7.x and 8.0.0 before build 80293 allows remote attackers to execute arbitrary code by uploading a file with a jsp extension, then accessing it via a direct request to the file in the…
    zohocorp · manageengine desktop central
    EPSS75%
    4 exploits
    Published Jan 27, 2020
  • CVE-2012-1495Critical 9.8
    install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter.
    webcalendar project · webcalendar
    EPSS80%
    5 exploits
    Published Jan 27, 2020
Showing 651–700 of 2,494

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.

Figures as of Oct 19, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.