Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Emerging

Emerging Threats, Before They Hit KEV.

Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.

Synced hourly · figures as of Oct 19, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
2,494 vulnerabilities · highest exploit probability first
  • CVE-2020-7980Critical 9.8
    Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI.
    intelliantech · aptus web
    EPSS83%
    3 exploits
    Published Jan 25, 2020
  • CVE-2020-7246High 8.8
    A remote code execution (RCE) vulnerability exists in qdPM 9.1 and earlier.
    qdpm · qdpm
    EPSS83%
    9 exploits
    Published Jan 21, 2020
  • CVE-2019-19844Critical 9.3
    Django Potential account hijack via password reset form
    djangoproject · django
    EPSS54%
    1 exploit
    Published Jan 16, 2020
  • CVE-2020-0610Critical 9.8
    A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution…
    microsoft · windows server 2012
    EPSS68%
    Ransomware2 exploits1 actor
    Published Jan 14, 2020
  • CVE-2020-0609Critical 9.8
    A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution…
    microsoft · windows server 2012
    EPSS78%
    Ransomware2 exploits1 actor
    Published Jan 14, 2020
  • CVE-2014-6039High 7.5
    ManageEngine EventLog Analyzer version 7 through 9.9 build 9002 has a Credentials Disclosure Vulnerability.
    zohocorp · manageengine eventlog analyzer
    EPSS69%
    2 exploits
    Published Jan 13, 2020
  • CVE-2014-6038High 7.5
    Zoho ManageEngine EventLog Analyzer versions 7 through 9.9 build 9002 have a database Information Disclosure Vulnerability.
    zohocorp · manageengine eventlog analyzer
    EPSS73%
    2 exploits
    Published Jan 13, 2020
  • CVE-2012-4284Critical 9.8
    A Privilege Escalation vulnerability exists in Viscosity 1.4.1 on Mac OS X due to a path name validation issue in the setuid-set ViscosityHelper binary, which could let a remote malicious user execute arbitrary code
    sparklabs · viscosity
    EPSS70%
    5 exploits
    Published Jan 10, 2020
  • CVE-2019-20361Critical 9.8
    There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to be passed to the database in the hash parameter (a blind SQL injection vulnerability).
    icegram · email subscribers \& newsletters
    EPSS85%
    2 exploits
    Published Jan 8, 2020
  • CVE-2015-4553High 8.8
    A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell.
    dedecms · dedecms
    EPSS57%
    2 exploits
    Published Jan 6, 2020
  • CVE-2019-19509High 8.8
    A remote authenticated user can directly execute system commands by sending a GET request to ajaxArchiveFiles.php because the path parameter is passed to the exec function without filtering, which can lead to command execution.
    rconfig · rconfig
    EPSS72%
    8 exploits
    Published Jan 6, 2020
  • CVE-2019-15976Critical 9.8
    Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device.
    cisco · data center network manager
    EPSS93%
    2 exploits
    Published Jan 6, 2020
  • CVE-2019-15975Critical 9.8
    Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device.
    cisco · data center network manager
    EPSS96%
    2 exploits
    Published Jan 6, 2020
  • CVE-2014-8516Critical 9.8
    Unrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors.
    cloudfastpath · netcharts server
    EPSS82%
    3 exploits
    Published Jan 3, 2020
  • CVE-2019-19985Medium 5.3
    The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclosure.
    icegram · email subscribers \& newsletters
    EPSS71%
    1 exploit
    Published Dec 26, 2019
  • CVE-2013-5743Critical 9.8
    Multiple SQL injection vulnerabilities in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.9rc1, and 2.1.x before 2.1.7.
    zabbix · zabbix
    EPSS80%
    2 exploits
    Published Dec 11, 2019
  • CVE-2019-17270Critical 9.8
    Yachtcontrol through 2019-10-06: It's possible to perform direct Operating System commands as an unauthenticated user via the "/pages/systemcall.php?command={COMMAND}" page and parameter, where {COMMAND} will be executed and returning the results to the client.
    yachtcontrol · yachtcontrol
    EPSS59%
    2 exploits
    Published Dec 10, 2019
  • CVE-2019-18818Critical 9.8
    Strapi allows unauthenticated attacker to reset admin password without valid reset token
    strapi · strapi
    EPSS98%
    2 exploits
    Published Dec 2, 2019
  • CVE-2019-12518Critical 9.8
    Anviz CrossChex access control management software 4.3.8.0 and 4.3.12 is vulnerable to a buffer overflow vulnerability.
    anviz · crosschex
    EPSS51%
    2 exploits
    Published Dec 2, 2019
  • CVE-2019-19492Critical 9.8
    FreeSWITCH 1.6.10 through 1.10.1 has a default password in event_socket.conf.xml.
    freeswitch · freeswitch
    EPSS29%
    2 exploits
    Published Dec 1, 2019
  • CVE-2011-2921Critical 9.8
    ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges.
    ktsuss project · ktsuss
    EPSS83%
    3 exploits
    Published Nov 19, 2019
  • CVE-2019-5029Critical 9.8
    An exploitable command injection vulnerability exists in the Config editor of the Exhibitor Web UI versions 1.0.9 to 1.7.1.
    exhibitor project · exhibitor
    EPSS57%
    1 exploit
    Published Nov 13, 2019
  • CVE-2013-1391High 7.5
    Authentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV, Hachi CCTV, NoVus CCTV, and Well-Vision Inc DVR systems allows a remote attacker to retrieve the device configuration.
    hachi · hv-04rd pro firmware
    EPSS76%
    1 exploit
    Published Oct 30, 2019
  • CVE-2012-0694Critical 9.8
    SugarCRM CE <= 6.3.1 contains scripts that use "unserialize()" with user controlled input which allows remote attackers to execute arbitrary PHP code.
    sugarcrm · sugarcrm
    EPSS67%
    3 exploits
    Published Oct 29, 2019
  • CVE-2019-17181Critical 9.8
    A remote SEH buffer overflow has been discovered in IntraSrv 1.0 (2007-06-03).
    intrasrv project · intrasrv
    EPSS48%
    1 exploit
    Published Oct 28, 2019
  • CVE-2019-16663High 8.8
    An attacker can directly execute system commands by sending a GET request to search.crud.php because the catCommand parameter is passed to the exec function without filtering, which can lead to command execution.
    rconfig · rconfig
    EPSS85%
    2 exploits
    Published Oct 28, 2019
  • CVE-2019-16662Critical 9.8
    An attacker can directly execute system commands by sending a GET request to ajaxServerSettingsChk.php because the rootUname parameter is passed to the exec function without filtering, which can lead to command execution.
    rconfig · rconfig
    EPSS98%
    4 exploits
    Published Oct 28, 2019
  • CVE-2019-18371High 7.5
    An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable.
    mi · millet router 3g firmware
    EPSS56%
    1 exploit
    Published Oct 23, 2019
  • CVE-2019-14287High 8.8
    In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID.
    sudo project · sudo
    EPSS64%
    1 exploit
    Published Oct 17, 2019
  • CVE-2019-17662Critical 9.8
    ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server.
    cybelsoft · thinvnc
    EPSS97%
    2 exploits
    Published Oct 16, 2019
  • CVE-2019-17506Critical 9.8
    There are some web interfaces without authentication requirements on D-Link DIR-868L B1-2.03 and DIR-817LW A1-1.04 routers.
    dlink · dir-817lw a1 firmware
    EPSS56%
    1 exploit
    Published Oct 11, 2019
  • CVE-2019-17382Critical 9.1
    An attacker can bypass the login page and access the dashboard page, and then create a Dashboard, Report, Screen, or Map without any Username/Password (i.e., anonymously).
    zabbix · zabbix
    EPSS54%
    1 exploit
    Published Oct 9, 2019
  • CVE-2019-16667High 8.8
    diag_command.php in pfSense 2.4.4-p3 allows CSRF via the txtCommand or txtRecallBuffer field, as demonstrated by executing OS commands.
    netgate · pfsense
    EPSS55%
    1 exploit
    Published Sep 26, 2019
  • CVE-2019-10092Medium 6.1
    In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page.
    apache · http server
    EPSS81%
    2 exploits
    Published Sep 26, 2019
  • CVE-2019-16724Critical 9.8
    File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler (SEH) based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331.
    upredsun · file sharing wizard
    EPSS72%
    2 exploits
    Published Sep 24, 2019
  • CVE-2015-9406High 7.5
    Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an attacker to read arbitrary files via a ..
    mtheme-unus project · mtheme-unus
    EPSS55%
    1 exploit
    Published Sep 20, 2019
  • CVE-2019-5485Critical 10.0
    Command Injection in gitlabhook
    gitlabhook project · gitlabhook
    EPSS59%
    1 exploit
    Published Sep 16, 2019
  • CVE-2019-8449Medium 5.3
    The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure vulnerability.
    atlassian · jira
    EPSS85%
    2 exploits
    Published Sep 11, 2019
  • CVE-2019-10669High 7.2
    There is a command injection vulnerability in html/includes/graphs/device/collectd.inc.php where user supplied parameters are filtered with the mysqli_escape_real_string function.
    librenms · librenms
    EPSS81%
    3 exploits
    Published Sep 9, 2019
  • CVE-2019-16113High 8.8
    Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg file name, and then this PHP code can write other PHP code to a ../ pathname.
    bludit · bludit
    EPSS78%
    8 exploits
    Published Sep 8, 2019
  • CVE-2019-1937Critical 9.8
    A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to acquire a valid session token with administrator…
    cisco · ucs director
    EPSS76%
    3 exploits
    Published Aug 21, 2019
  • CVE-2019-1936High 7.2
    A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an authenticated, remote attacker to execute arbitrary commands on the underlying Linux…
    cisco · ucs director
    EPSS39%
    3 exploits
    Published Aug 21, 2019
  • CVE-2019-1935Critical 9.8
    A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to log in to the CLI of an affected system by using the SCP User account (scpuser), which…
    cisco · ucs director
    EPSS83%
    3 exploits
    Published Aug 21, 2019
  • CVE-2019-9851Critical 9.8
    LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from.
    libreoffice · libreoffice
    EPSS78%
    2 exploits
    Published Aug 15, 2019
  • CVE-2019-1184Medium 6.7
    An elevation of privilege vulnerability exists when Windows Core Shell COM Server Registrar improperly handles COM calls.
    microsoft · windows 10
    EPSS70%
    1 exploit
    Published Aug 14, 2019
  • CVE-2019-14530High 8.8
    An attacker can download any file (that is readable by the user www-data) from server storage.
    open-emr · openemr
    EPSS66%
    5 exploits
    Published Aug 13, 2019
  • CVE-2019-12255Critical 9.8
    Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4).
    windriver · vxworks
    EPSS75%
    2 exploits
    Published Aug 9, 2019
  • CVE-2019-13101Critical 9.8
    An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices.
    dlink · dir-600m firmware
    EPSS67%
    1 exploit
    Published Aug 8, 2019
  • CVE-2019-10267High 8.8
    An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50.
    ahsay · cloud backup suite
    EPSS75%
    5 exploits
    Published Jul 26, 2019
  • CVE-2019-14241High 7.5
    HAProxy through 2.0.2 allows attackers to cause a denial of service (ha_panic) via vectors related to htx_manage_client_side_cookies in proto_htx.c.
    haproxy · haproxy
    EPSS70%
    1 exploit
    Published Jul 22, 2019
Showing 701–750 of 2,494

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.

Figures as of Oct 19, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.