Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Emerging

Emerging Threats, Before They Hit KEV.

Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.

Synced hourly · figures as of Oct 20, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
1,192 vulnerabilities · highest exploit probability first
  • CVE-2013-1710Critical 10.0
    Mozilla: CRMF requests allow for code execution and XSS attacks (MFSA 2013-69)
    mozilla · firefox
    EPSS40%
    3 exploits
    Published Aug 7, 2013
  • CVE-2013-5019Critical 10.0
    Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resource name in an HTTP request.
    vector · ultra mini httpd
    EPSS64%
    8 exploits
    Published Jul 31, 2013
  • CVE-2013-2367Critical 10.0
    Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1678.
    hp · sitescope
    EPSS69%
    2 exploits
    Published Jul 31, 2013
  • CVE-2013-4800Critical 9.3
    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1735.
    hp · loadrunner
    EPSS39%
    2 exploits
    Published Jul 29, 2013
  • CVE-2013-4798Critical 10.0
    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1705.
    hp · loadrunner
    EPSS67%
    2 exploits
    Published Jul 29, 2013
  • CVE-2013-2343Critical 10.0
    Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1510.
    hp · lefthand virtual san appliance hydra
    EPSS62%
    2 exploits
    Published Jul 2, 2013
  • CVE-2013-2460Critical 9.3
    OpenJDK: tracing insufficient access checks (Serviceability, 8010209)
    oracle · jre
    EPSS70%
    2 exploits
    Published Jun 18, 2013
  • CVE-2013-3576Critical 9.0
    ginkgosnmp.inc in HP System Management Homepage (SMH) allows remote authenticated users to execute arbitrary commands via shell metacharacters in the PATH_INFO to smhutil/snmpchp.php.en.
    hp · system management homepage
    EPSS67%
    2 exploits
    Published Jun 14, 2013
  • CVE-2013-2333Critical 10.0
    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1680.
    hp · storage data protector
    EPSS90%
    2 exploits
    Published Jun 6, 2013
  • CVE-2013-1017Critical 9.3
    Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted dref atoms in a movie file.
    apple · quicktime
    EPSS33%
    3 exploits
    Published May 24, 2013
  • CVE-2013-2730Critical 10.0
    acroread: multiple code execution flaws (APSB13-15)
    adobe · acrobat
    EPSS79%
    2 exploits
    Published May 14, 2013
  • CVE-2013-0726Critical 9.3
    Stack-based buffer overflow in the ERM_convert_to_correct_webpath function in ermapper_u.dll in ERDAS ER Viewer before 13.00.0001 allows remote attackers to execute arbitrary code via a crafted pathname in an ERS file.
    hexagon · erdas er viewer
    EPSS28%
    2 exploits
    Published May 5, 2013
  • CVE-2012-5946Critical 9.3
    Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via a long TabCaption string.
    ibm · spss samplepower
    EPSS34%
    2 exploits
    Published Apr 30, 2013
  • CVE-2013-1488Critical 10.0
    OpenJDK: JDBC driver manager improper toString calls (CanSecWest 2013, Libraries, 8009814)
    oracle · jre
    EPSS87%
    2 exploits
    Published Apr 16, 2013
  • CVE-2013-1080Critical 10.0
    The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform authentication for zenworks/jsp/index.jsp, which allows remote attackers to conduct directory traversal attacks, and consequently upload and execute arbitrary…
    novell · zenworks configuration management
    EPSS77%
    2 exploits
    Published Mar 29, 2013
  • CVE-2012-5201Critical 10.0
    Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1611.
    hp · intelligent management center
    EPSS64%
    2 exploits
    Published Mar 9, 2013
  • CVE-2013-1493Critical 10.0
    OpenJDK: CMM malformed raster memory corruption (2D, 8007675)
    oracle · jdk
    EPSS86%
    2 exploits
    Published Mar 4, 2013
  • CVE-2012-6275Critical 10.0
    Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impact via (1) the filename header in an SCH request or (2) the userid component in a DUPF request.
    bigantsoft · bigant im message server
    EPSS46%
    2 exploits
    Published Feb 24, 2013
  • CVE-2012-4705Critical 10.0
    Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving a crafted pathname.
    3s-software · codesys gateway-server
    EPSS65%
    2 exploits
    Published Feb 24, 2013
  • CVE-2012-0439Critical 9.3
    An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code via (1) a pointer argument to the SetEngine method or (2) an XPItem pointer argument to an unspecified method.
    novell · groupwise
    EPSS39%
    2 exploits
    Published Feb 24, 2013
  • CVE-2012-4711Critical 10.0
    Buffer overflow in kingMess.exe 65.20.2003.10300 in WellinTech KingView 6.52, kingMess.exe 65.20.2003.10400 in KingView 6.53, and kingMess.exe 65.50.2011.18049 in KingView 6.55 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…
    wellintech · kingview
    EPSS61%
    2 exploits
    Published Feb 15, 2013
  • CVE-2013-0025Critical 9.3
    Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer SLayoutRun Use After Free Vulnerability."
    microsoft · internet explorer
    EPSS56%
    3 exploits
    Published Feb 13, 2013
  • CVE-2013-0634Critical 9.3
    flash-plugin: multiple code execution flaws (APSB13-04)
    adobe · flash player
    EPSS78%
    2 exploits
    Published Feb 7, 2013
  • CVE-2013-0230Critical 10.0
    Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method.
    miniupnp project · miniupnpd
    EPSS69%
    5 exploits
    Published Jan 31, 2013
  • CVE-2012-5958Critical 10.0
    libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)
    libupnp project · libupnp
    EPSS83%
    3 exploits
    Published Jan 29, 2013
  • CVE-2012-5959Critical 10.0
    libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)
    portable sdk for upnp project · portable sdk for upnp
    EPSS76%
    1 exploit
    Published Jan 29, 2013
  • CVE-2012-4914Critical 9.3
    Stack-based buffer overflow in the reader in CoolPDF 3.0.2.256 allows remote attackers to execute arbitrary code via a PDF document with a crafted stream.
    coolpdf · coolpdf
    EPSS28%
    3 exploits
    Published Jan 26, 2013
  • CVE-2013-0928Critical 9.3
    The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary commands via a DCP "run command" operation.
    emc · alphastor
    EPSS34%
    2 exploits
    Published Jan 21, 2013
  • CVE-2013-0758Critical 9.3
    Mozilla: Chrome Object Wrapper (COW) bypass through plugin objects (MFSA 2013-15)
    mozilla · firefox
    EPSS73%
    3 exploits
    Published Jan 8, 2013
  • CVE-2013-0757Critical 9.3
    Mozilla: Chrome Object Wrapper (COW) bypass through changing prototype (MFSA 2013-14)
    mozilla · firefox
    EPSS61%
    3 exploits
    Published Jan 8, 2013
  • CVE-2013-0753Critical 9.3
    Mozilla: Use-after-free in serializeToStream (MFSA 2013-16)
    mozilla · firefox
    EPSS51%
    2 exploits
    Published Jan 8, 2013
  • CVE-2012-0432Critical 10.0
    Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an unspecified impact via unknown vectors.
    microfocus · edirectory
    EPSS59%
    3 exploits
    Published Dec 25, 2012
  • CVE-2012-5932Critical 10.0
    Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote attackers to execute arbitrary Perl code via a crafted application/x-amf request.
    microfocus · privileged user manager
    EPSS63%
    2 exploits
    Published Dec 24, 2012
  • CVE-2012-5691Critical 9.3
    Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted RealMedia file.
    realnetworks · realplayer
    EPSS53%
    2 exploits
    Published Dec 19, 2012
  • CVE-2012-3274Critical 10.0
    Stack-based buffer overflow in uam.exe in the User Access Manager (UAM) component in HP Intelligent Management Center (IMC) before 5.1 E0101P01 allows remote attackers to execute arbitrary code via vectors related to log data.
    hp · intelligent management center
    EPSS64%
    2 exploits
    Published Dec 6, 2012
  • CVE-2012-6066Critical 9.3
    freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demonstrated by an OpenSSH client with modified versions of ssh.c and sshconnect2.c.
    freesshd · freesshd
    EPSS40%
    4 exploits
    Published Dec 4, 2012
  • CVE-2012-5975Critical 9.3
    The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6.2.5, and 6.3.0 through 6.3.2 on UNIX and Linux, when old-style password authentication is enabled, allows remote attackers to bypass authentication via a…
    ssh · tectia server
    EPSS36%
    3 exploits
    Published Dec 4, 2012
  • CVE-2012-4959Critical 10.0
    Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD request with a ..
    novell · file reporter
    EPSS71%
    3 exploits
    Published Nov 18, 2012
  • CVE-2012-5896Critical 10.0
    The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers to execute arbitrary code via a memory address in the first argument, related to an "uninitialized…
    quest · intrust
    EPSS69%
    4 exploits
    Published Nov 17, 2012
  • CVE-2012-3569Critical 9.3
    Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file.
    vmware · ovf tool
    EPSS48%
    4 exploits
    Published Nov 14, 2012
  • CVE-2012-3753Critical 9.3
    Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MIME type.
    apple · quicktime
    EPSS35%
    2 exploits
    Published Nov 9, 2012
  • CVE-2012-3752Critical 9.3
    Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted style element in a QuickTime TeXML file.
    apple · quicktime
    EPSS36%
    2 exploits
    Published Nov 9, 2012
  • CVE-2012-5692Critical 10.0
    Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x through 3.3.x has unknown impact and remote attack vectors.
    invisioncommunity · invision power board
    EPSS26%
    4 exploits
    Published Oct 31, 2012
  • CVE-2011-5227Critical 10.0
    Stack-based buffer overflow in the Syslog service (nssyslogd.exe) in Enterasys Network Management Suite (NMS) before 4.1.0.80 allows remote attackers to execute arbitrary code via a long PRIO field in a message to UDP port 514.
    enterasys · netsight
    EPSS77%
    2 exploits
    Published Oct 25, 2012
  • CVE-2012-5088Critical 10.0
    OpenJDK: MethodHandle insufficient access control checks (Libraries, 7196190)
    oracle · jre
    EPSS79%
    2 exploits
    Published Oct 16, 2012
  • CVE-2012-1533Critical 10.0
    JDK: unspecified vulnerability (Deployment)
    oracle · jdk
    EPSS69%
    2 exploits
    Published Oct 16, 2012
  • CVE-2012-3993Critical 9.3
    Mozilla: Chrome Object Wrapper (COW) does not disallow acces to privileged functions or properties (MFSA 2012-83)
    mozilla · firefox
    EPSS43%
    2 exploits
    Published Oct 9, 2012
  • CVE-2012-3261Critical 10.0
    Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1463.
    hp · sitescope
    EPSS40%
    1 exploit
    Published Sep 25, 2012
  • CVE-2012-3260Critical 10.0
    Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1462.
    hp · sitescope
    EPSS40%
    1 exploit
    Published Sep 25, 2012
  • CVE-2012-4924Critical 9.3
    Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execute arbitrary code via a long parameter to the Alert method.
    asus · net4switch
    EPSS36%
    3 exploits
    Published Sep 15, 2012
Showing 651–700 of 1,192

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.

Figures as of Oct 20, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.