Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Emerging

Emerging Threats, Before They Hit KEV.

Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.

Synced hourly · figures as of Oct 20, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
1,192 vulnerabilities · highest exploit probability first
  • CVE-2011-5171Critical 9.3
    Multiple stack-based buffer overflows in CyberLink Power2Go 7 (build 196) and 8 (build 1031) allow remote attackers to execute arbitrary code via the (1) src and (2) name parameters in a p2g project file.
    cyberlink · power2go
    EPSS46%
    4 exploits
    Published Sep 15, 2012
  • CVE-2011-5170Critical 9.3
    Stack-based buffer overflow in Castillo Bueno Systems CCMPlayer 1.5 allows remote attackers to execute arbitrary code via a long track name in an m3u playlist.
    castillobueno · ccmplayer
    EPSS32%
    5 exploits
    Published Sep 15, 2012
  • CVE-2011-5165Critical 9.3
    Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wav file.
    cleanersoft · free mp3 cd ripper
    EPSS37%
    16 exploits
    Published Sep 15, 2012
  • CVE-2011-5164Critical 9.3
    Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote FTP servers to execute arbitrary code via a crafted file name in a LIST command response.
    vandyke · absoluteftp
    EPSS29%
    3 exploits
    Published Sep 15, 2012
  • CVE-2012-4876Critical 10.0
    Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera allows remote attackers to execute arbitrary code via a long string to the OpenFileDlg method.
    trendnet · securview wireless internet camera activex control
    EPSS71%
    4 exploits
    Published Sep 6, 2012
  • CVE-2012-2288Critical 9.3
    Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via format string specifiers in a message.
    emc · networker
    EPSS33%
    2 exploits
    Published Sep 4, 2012
  • CVE-2010-5193Critical 9.3
    Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0 and Gold 6.0 allows remote attackers to execute arbitrary code via a long strDelimit parameter.
    viscomsoft · image viewer cp gold sdk
    EPSS32%
    4 exploits
    Published Aug 31, 2012
  • CVE-2011-5124Critical 10.0
    Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows remote attackers to execute arbitrary code via a large packet to the synchronization port (16102/tcp).
    bluecoat · proxyone
    EPSS55%
    2 exploits
    Published Aug 26, 2012
  • CVE-2012-4598Critical 9.3
    An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows remote attackers to execute arbitrary code or cause a denial of service (Internet Explorer crash) via a crafted web site.
    mcafee · mcafee virtual technician
    EPSS29%
    3 exploits
    Published Aug 22, 2012
  • CVE-2012-4333Critical 10.0
    Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0 ActiveX controls in Samsung NET-i viewer 1.37.120316 allow remote attackers to execute arbitrary code via a long string in the fname parameter.
    samsung · net-i viewer
    EPSS60%
    4 exploits
    Published Aug 14, 2012
  • CVE-2012-4177Critical 10.0
    The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbit_exe_path command line argument.
    ubi · uplay pc
    EPSS58%
    2 exploits
    Published Aug 7, 2012
  • CVE-2012-2953Critical 10.0
    The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to application scripts.
    symantec · web gateway
    EPSS67%
    3 exploits
    Published Jul 23, 2012
  • CVE-2012-0284Critical 9.3
    Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.ocx on the Cisco WVC200 Wireless-G PTZ Internet video camera allows remote attackers to execute arbitrary code via a long URL in the first argument (aka the…
    cisco · linksys playerpt activex control
    EPSS36%
    4 exploits
    Published Jul 19, 2012
  • CVE-2012-0911Critical 9.8
    TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the (1) cookieName to lib/banners/bannerlib.php; (2) printpages or (3) printstructures parameter to (a) tiki-print_multi_pages.php or (b)…
    tiki · tikiwiki cms\/groupware
    EPSS63%
    5 exploits
    Published Jul 12, 2012
  • CVE-2012-2020Critical 10.0
    Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1326.
    hp · operations agent
    EPSS65%
    2 exploits
    Published Jul 11, 2012
  • CVE-2012-2019Critical 10.0
    Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1325.
    hp · operations agent
    EPSS64%
    2 exploits
    Published Jul 11, 2012
  • CVE-2012-2516Critical 9.3
    An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; Proficy HMI/SCADA iFIX 5.0 and 5.1; Proficy Pulse 1.0; Proficy Batch Execution 5.6; SI7 I/O Driver 7.20…
    ge · intelligent platforms proficy historian
    EPSS40%
    2 exploits
    Published Jul 5, 2012
  • CVE-2012-2515Critical 9.3
    Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the HTML Help component), as used in EMC Documentum ApplicationXtender Desktop 5.4; EMC Captiva Quickscan Pro 4.6 SP1; GE Intelligent Platforms…
    emc · captiva quickscan pro
    EPSS28%
    1 exploit
    Published Jul 5, 2012
  • CVE-2012-3811Critical 10.0
    Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before 7.0.5.8 Q1 2012 Maintenance Release and 8.0 before 8.0.9.13 Q1 2012 Maintenance Release allows remote attackers to execute arbitrary code…
    avaya · ip office customer call reporter
    EPSS63%
    2 exploits
    Published Jul 3, 2012
  • CVE-2012-3815Critical 9.3
    Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 46824.
    sielcosistemi · winlog lite
    EPSS44%
    3 exploits
    Published Jun 27, 2012
  • CVE-2012-2175Critical 9.3
    Buffer overflow in the Attachment_Times method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a long argument.
    ibm · lotus inotes
    EPSS29%
    2 exploits
    Published Jun 20, 2012
  • CVE-2012-2174Critical 9.3
    The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted notes:// URL.
    ibm · lotus notes
    EPSS38%
    2 exploits
    Published Jun 20, 2012
  • CVE-2012-1876Critical 9.3
    Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting to access a nonexistent object, leading to a heap-based buffer overflow, aka "Col Element Remote…
    microsoft · internet explorer
    EPSS65%
    6 exploits
    Published Jun 12, 2012
  • CVE-2012-1875Critical 9.3
    Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Same ID Property Remote Code Execution Vulnerability."
    microsoft · internet explorer
    EPSS62%
    2 exploits
    Published Jun 12, 2012
  • CVE-2012-2176Critical 9.3
    Multiple stack-based buffer overflows in a certain ActiveX control in qp2.cab in IBM Lotus Quickr 8.2 before 8.2.0.27-002a for Domino allow remote attackers to execute arbitrary code via a long argument to the (1) Attachment_Times or (2) Import_Times method.
    ibm · lotus quickr
    EPSS32%
    2 exploits
    Published May 25, 2012
  • CVE-2012-2926Critical 9.1
    Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; FishEye and Crucible before 2.5.8, 2.6 before 2.6.8, and 2.7 before 2.7.12; Bamboo before 3.3.4 and 3.4.x before 3.4.5; and Crowd before 2.0.9, 2.1 before 2.1.2, 2.2 before 2.2.9, 2.3…
    atlassian · bamboo
    EPSS66%
    1 exploit
    Published May 22, 2012
  • CVE-2012-0299Critical 10.0
    The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code to a designated pathname, and possibly execute this code, via unspecified vectors.
    symantec · web gateway
    EPSS64%
    2 exploits
    Published May 21, 2012
  • CVE-2012-0297Critical 10.0
    The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by (1) injecting crafted data or (2) including crafted data.
    symantec · web gateway
    EPSS73%
    6 exploits
    Published May 21, 2012
  • CVE-2012-2915Critical 9.3
    Stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.2.1344 allows remote attackers to execute arbitrary code via a long string in a Value tag in a SymbolicSchematicData definition tag in PAC Design (.pac) file.
    lattice semiconductor · pac-designer
    EPSS29%
    3 exploits
    Published May 21, 2012
  • CVE-2012-0663Critical 9.3
    Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TeXML file.
    apple · quicktime
    EPSS28%
    2 exploits
    Published May 16, 2012
  • CVE-2012-2611Critical 9.3
    The DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2, when a certain Developer Trace configuration is enabled, allows remote attackers to execute arbitrary code via a…
    sap · netweaver
    EPSS44%
    4 exploits
    Published May 15, 2012
  • CVE-2012-0202Critical 10.0
    Multiple stack-based buffer overflows in tm1admsd.exe in the Admin Server in IBM Cognos TM1 9.4.x and 9.5.x before 9.5.2 FP2 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted data.
    ibm · cognos tm1
    EPSS54%
    2 exploits
    Published May 4, 2012
  • CVE-2012-0779Critical 9.3
    flash-plugin: arbitrary code execution via object confusion (APSB12-09)
    adobe · flash player
    EPSS87%
    2 exploits
    Published May 4, 2012
  • CVE-2012-0708Critical 9.3
    Heap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM Rational ClearQuest 7.1.1 before 7.1.1.9, 7.1.2 before 7.1.2.6, and 8.0.0 before 8.0.0.2 allows remote attackers to execute arbitrary code via a crafted web page that leverages a…
    ibm · rational clearquest
    EPSS31%
    2 exploits
    Published Apr 22, 2012
  • CVE-2012-1182Critical 10.0
    The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a…
    samba · samba
    EPSS74%
    2 exploits
    Published Apr 10, 2012
  • CVE-2011-3176Critical 10.0
    Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to execute arbitrary code via an opcode 0x4c request.
    novell · zenworks configuration management
    EPSS70%
    3 exploits
    Published Apr 9, 2012
  • CVE-2011-3175Critical 10.0
    Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to execute arbitrary code via an opcode 0x6c request.
    novell · zenworks configuration management
    EPSS66%
    3 exploits
    Published Apr 9, 2012
  • CVE-2012-1775Critical 9.3
    Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS:// stream.
    videolan · vlc media player
    EPSS44%
    2 exploits
    Published Mar 19, 2012
  • CVE-2012-0124Critical 10.0
    Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors.
    hp · data protector express
    EPSS62%
    2 exploits
    Published Mar 14, 2012
  • CVE-2012-0002Critical 9.3
    The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to…
    microsoft · windows 7
    EPSS74%
    1 exploit
    Published Mar 13, 2012
  • CVE-2012-0198Critical 9.3
    Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allows remote attackers to execute arbitrary code via vectors related to an Asset Information file.
    ibm · tivoli provisioning manager express for software distribution
    EPSS37%
    2 exploits
    Published Mar 6, 2012
  • CVE-2012-0201Critical 9.3
    Stack-based buffer overflow in pcspref.dll in pcsws.exe in IBM Personal Communications 5.9.x before 5.9.8 and 6.0.x before 6.0.4 might allow remote attackers to execute arbitrary code via a long profile string in a WorkStation (aka .ws) file.
    ibm · personal communications
    EPSS36%
    3 exploits
    Published Mar 2, 2012
  • CVE-2012-0500Critical 10.0
    JDK: unspecified vulnerability fixed in 6u31 and 7u3 (Deployment)
    oracle · javafx
    EPSS58%
    3 exploits
    Published Feb 14, 2012
  • CVE-2011-3659Critical 9.3
    Mozilla: child nodes from nsDOMAttribute still accessible after removal of nodes (MFSA 2012-04)
    mozilla · firefox
    EPSS37%
    2 exploits
    Published Jan 31, 2012
  • CVE-2011-4135Critical 10.0
    Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager) allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files.
    flexerasoftware · flexnet publisher
    EPSS30%
    1 exploit
    Published Jan 19, 2012
  • CVE-2012-0267Critical 9.3
    The StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to execute arbitrary code via a crafted lModule parameter that triggers use of an arbitrary memory address as a function pointer.
    ntrglobal · ntr activex control
    EPSS39%
    2 exploits
    Published Jan 15, 2012
  • CVE-2012-0266Critical 9.3
    Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitrary code via (1) a long bstrUrl parameter to the StartModule method, (2) a long bstrParams parameter to the Check method, a long bstrUrl parameter to the (3)…
    ntrglobal · ntr activex control
    EPSS42%
    2 exploits
    Published Jan 15, 2012
  • CVE-2011-4789Critical 10.0
    Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary code via a crafted size value in a packet.
    hp · diagnostics
    EPSS64%
    2 exploits
    Published Jan 13, 2012
  • CVE-2011-4786Critical 9.3
    A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and…
    hp · easy printer care software
    EPSS39%
    2 exploits
    Published Jan 12, 2012
  • CVE-2012-0013Critical 9.3
    Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a…
    microsoft · windows 7
    EPSS74%
    3 exploits
    Published Jan 10, 2012
Showing 701–750 of 1,192

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.

Figures as of Oct 20, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.