Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
1,192 vulnerabilities · highest exploit probability first
- CVE-2011-4862Critical 10.0Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long…gnu · inetutilsEPSS95%6 exploitsPublished Dec 25, 2011
- CVE-2011-5010Critical 10.0apps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via shell metacharacters in the PINGADDRESS parameter for a "u" action.ctekproducts · skyrouterEPSS66%3 exploitsPublished Dec 24, 2011
- CVE-2011-5007Critical 10.0Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB AC500 PLC and possibly other products, allows remote attackers to execute arbitrary code via a long URI to TCP port 8080.3ssoftware · codesysEPSS73%4 exploitsPublished Dec 24, 2011
- CVE-2011-5003Critical 10.0Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port 4659.avid · media composerEPSS62%2 exploitsPublished Dec 24, 2011
- CVE-2011-5001Critical 10.0Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in CmdProcessor.exe in Trend Micro Control Manager 5.5 before Build 1613 allows remote attackers to execute arbitrary code via a crafted IPC packet to TCP port 20101.trend micro · control managerEPSS64%2 exploitsPublished Dec 24, 2011
- CVE-2010-5081Critical 9.3Stack-based buffer overflow in Mini-Stream RM-MP3 Converter 3.1.2.1 allows remote attackers to execute arbitrary code via a long URL in a .pls file.mini-stream · rm-mp3 converterEPSS31%5 exploitsPublished Dec 24, 2011
- CVE-2009-5109Critical 9.3Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long entry in a .pls file.mini-stream · ripperEPSS32%9 exploitsPublished Dec 24, 2011
- CVE-2011-3400Critical 9.3Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 do not properly handle OLE objects in memory, which allows remote attackers to execute arbitrary code via a crafted object in a file, aka "OLE Property Vulnerability."microsoft · windows xpEPSS71%2 exploitsPublished Dec 13, 2011
- CVE-2011-2653Critical 10.0Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management (ZAM) 7.5 allows remote attackers to execute arbitrary code by uploading an executable file.novell · zenworks asset managementEPSS72%2 exploitsPublished Dec 8, 2011
- CVE-2011-4051Critical 10.0CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows remote attackers to execute arbitrary code via vectors related to creation of a file, loading a DLL, and process control.indusoft · web studioEPSS69%2 exploitsPublished Dec 5, 2011
- CVE-2011-4040Critical 10.0Buffer overflow in MiniSmtp 3.0.11818 in NJStar Communicator allows remote attackers to execute arbitrary code via a crafted packet.njstar · njstar communicatorEPSS65%3 exploitsPublished Nov 21, 2011
- CVE-2011-3167Critical 10.0Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1210.hp · openview network node managerEPSS65%2 exploitsPublished Nov 2, 2011
- CVE-2011-1996Critical 9.3Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Option Element Remote Code Execution Vulnerability."microsoft · internet explorerEPSS59%2 exploitsPublished Oct 11, 2011
- CVE-2011-3360Critical 9.3Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.wireshark · wiresharkEPSS35%2 exploitsPublished Sep 20, 2011
- CVE-2011-3497Critical 10.0service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method.measuresoft · scadaproEPSS57%2 exploitsPublished Sep 16, 2011
- CVE-2011-3494Critical 10.0WinSig.exe in eSignal 10.6.2425 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a long StyleTemplate element in a QUO, SUM or POR file, which triggers a stack-based buffer overflow, or (2) a long Font->FaceName…interactivedata · esignalEPSS56%3 exploitsPublished Sep 16, 2011
- CVE-2011-3492Critical 10.0Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted NETB packet to UDP port 20034.azeotech · daqfactoryEPSS71%4 exploitsPublished Sep 16, 2011
- CVE-2011-3322Critical 10.0Core Server HMI Service (Coreservice.exe) in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password to the Telnet (TCP/23) port, which triggers an…scadatec · procyon scadaEPSS65%3 exploitsPublished Sep 15, 2011
- CVE-2011-2595Critical 10.0Multiple stack-based buffer overflows in ACDSee FotoSlate 4.0 Build 146 allow remote attackers to execute arbitrary code via a long id parameter in a (1) String or (2) Int tag in a FotoSlate Project (aka PLP) file.acdsee · fotoslateEPSS60%2 exploitsPublished Sep 14, 2011
- CVE-2011-2950Critical 9.3Heap-based buffer overflow in qcpfformat.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted QCP file.realnetworks · realplayerEPSS29%2 exploitsPublished Aug 18, 2011
- CVE-2011-0257Critical 9.3Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PnSize opcode in a PICT file that triggers a stack-based buffer overflow.apple · quicktimeEPSS60%2 exploitsPublished Aug 15, 2011
- CVE-2011-2140Critical 10.0flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)adobe · adobe airEPSS82%4 exploitsPublished Aug 9, 2011
- CVE-2011-2882Critical 9.3Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 allows remote attackers to execute arbitrary code via crafted HTTP header data.citrix · access gatewayEPSS56%2 exploitsPublished Jul 21, 2011
- CVE-2011-1865Critical 10.0Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request containing crafted parameters.hp · openview storage data protectorEPSS89%6 exploitsPublished Jul 1, 2011
- CVE-2011-2371Critical 10.0Mozilla Integer overflow and arbitrary code execution (MFSA 2011-22)mozilla · firefoxEPSS76%4 exploitsPublished Jun 21, 2011
- CVE-2011-1260Critical 9.3Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Layout Memory Corruption Vulnerability."microsoft · internet explorerEPSS61%2 exploitsPublished Jun 16, 2011
- CVE-2011-2110Critical 10.0flash-plugin: memory corruption can lead to arbitrary code execution (APSB11-18)adobe · flash playerEPSS86%2 exploitsPublished Jun 14, 2011
- CVE-2011-2386Critical 9.3VisiWaveReport.exe in AZO Technologies, Inc.visiwave · site surveyEPSS45%3 exploitsPublished Jun 8, 2011
- CVE-2011-2217Critical 9.3Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.237, as used in VI Client (aka VMware Infrastructure Client) 2.0.2 before Build 230598 and 2.5 before Build 204931 in VMware Infrastructure 3, do not properly…tomsawyer · get extension factoryEPSS42%2 exploitsPublished Jun 6, 2011
- CVE-2011-1220Critical 9.0Stack-based buffer overflow in lcfd.exe in Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 allows remote authenticated users to execute arbitrary code via a long opts field.ibm · tivoli management frameworkEPSS63%2 exploitsPublished Jun 2, 2011
- CVE-2011-1213Critical 9.3Integer underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted header in a .lzh attachment that triggers a stack-based buffer overflow, aka SPR PRAD88MJ2W.ibm · lotus notesEPSS33%3 exploitsPublished May 31, 2011
- CVE-2011-2089Critical 9.3Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22 and GENESIS32 9.x before 9.22 allows remote attackers to execute arbitrary code via a long string in…iconics · bizvizEPSS38%5 exploitsPublished May 13, 2011
- CVE-2011-0340Critical 9.3Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as distributed in Advantech Studio 6.1 SP6 61.6.01.05, InduSoft Web Studio before 7.0+SP1, and InduSoft Thin Client 7.0, allow remote attackers…advantech · advantech studioEPSS32%2 exploitsPublished May 4, 2011
- CVE-2011-1591Critical 9.3Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers to execute arbitrary code via a crafted .pcap file.wireshark · wiresharkEPSS42%7 exploitsPublished Apr 29, 2011
- CVE-2011-0065Critical 10.0Mozilla mChannel use after free (MFSA 2011-13)mozilla · firefoxEPSS74%6 exploitsPublished Apr 28, 2011
- CVE-2011-0073Critical 10.0Mozilla dangling pointer flaw (MFSA 2011-13)mozilla · firefoxEPSS70%3 exploitsPublished Apr 28, 2011
- CVE-2011-0807Critical 10.0Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration.sun · java system application serverEPSS61%2 exploitsPublished Apr 20, 2011
- CVE-2011-1653Critical 10.0Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote attackers to execute arbitrary SQL commands via vectors involving the (1) UnAssignFunctionalRoles, (2) UnassignAdminRoles, (3) DeleteFilter,…broadcom · total defenseEPSS89%2 exploitsPublished Apr 18, 2011
- CVE-2011-0105Critical 9.3Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file,…microsoft · excelEPSS70%2 exploitsPublished Apr 13, 2011
- CVE-2011-0104Critical 9.3Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HLink record in an Excel file, aka "Excel Buffer…microsoft · excelEPSS53%1 exploitPublished Apr 13, 2011
- CVE-2011-1567Critical 10.0Multiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted (1) ListAll, (2) Write…7t · igssEPSS70%6 exploitsPublished Apr 5, 2011
- CVE-2011-1566Critical 10.0Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to execute arbitrary programs via ..\ (dot dot backslash) sequences in opcodes (1) 0xa and (2) 0x17 to TCP port 12397.7t · igssEPSS67%5 exploitsPublished Apr 5, 2011
- CVE-2011-1565Critical 10.0Directory traversal vulnerability in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to (1) read (opcode 0x3) or (2) create or write (opcode 0x2) arbitrary files via ..\ (dot dot backslash)…7t · igssEPSS64%3 exploitsPublished Apr 5, 2011
- CVE-2011-1563Critical 10.0Multiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via (1) a long username in an On_FC_CONNECT_FCS_LOGIN packet, and crafted (2) On_FC_CTAGLIST_FCS_CADDTAG, (3)…realflex · realwinEPSS75%4 exploitsPublished Apr 5, 2011
- CVE-2010-3275Critical 9.3libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an AMV file, related to a "dangling pointer vulnerability."videolan · vlc media playerEPSS76%3 exploitsPublished Mar 28, 2011
- CVE-2010-4742Critical 10.0Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to execute arbitrary code via a long PlayFileName property value.moxa · activex sdkEPSS56%2 exploitsPublished Feb 18, 2011
- CVE-2010-4741Critical 9.3Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MDM Gateways to execute arbitrary code via crafted data in a session on TCP port 54321.moxa · device managerEPSS28%2 exploitsPublished Feb 18, 2011
- CVE-2010-4740Critical 9.3Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote attackers to execute arbitrary code via a crafted .csv file, related to a status log message.scadaengine · bacnet opc clientEPSS42%2 exploitsPublished Feb 16, 2011
- CVE-2011-0654Critical 10.0Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System (CIFS) browser service in Mrxsmb.sys or bowser.sys in Active Directory in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold,…microsoft · windows server 2003EPSS68%2 exploitsPublished Feb 15, 2011
- CVE-2010-4452Critical 10.0JDK unspecified vulnerability in Deployment componentsun · jdkEPSS83%2 exploitsPublished Feb 15, 2011
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2011-4862 | Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long… gnu · inetutils | Critical 10.0 | 95% | 6 exploits | |
| CVE-2011-5010 | apps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via shell metacharacters in the PINGADDRESS parameter for a "u" action. ctekproducts · skyrouter | Critical 10.0 | 66% | 3 exploits | |
| CVE-2011-5007 | Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB AC500 PLC and possibly other products, allows remote attackers to execute arbitrary code via a long URI to TCP port 8080. 3ssoftware · codesys | Critical 10.0 | 73% | 4 exploits | |
| CVE-2011-5003 | Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port 4659. avid · media composer | Critical 10.0 | 62% | 2 exploits | |
| CVE-2011-5001 | Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in CmdProcessor.exe in Trend Micro Control Manager 5.5 before Build 1613 allows remote attackers to execute arbitrary code via a crafted IPC packet to TCP port 20101. trend micro · control manager | Critical 10.0 | 64% | 2 exploits | |
| CVE-2010-5081 | Stack-based buffer overflow in Mini-Stream RM-MP3 Converter 3.1.2.1 allows remote attackers to execute arbitrary code via a long URL in a .pls file. mini-stream · rm-mp3 converter | Critical 9.3 | 31% | 5 exploits | |
| CVE-2009-5109 | Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long entry in a .pls file. mini-stream · ripper | Critical 9.3 | 32% | 9 exploits | |
| CVE-2011-3400 | Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 do not properly handle OLE objects in memory, which allows remote attackers to execute arbitrary code via a crafted object in a file, aka "OLE Property Vulnerability." microsoft · windows xp | Critical 9.3 | 71% | 2 exploits | |
| CVE-2011-2653 | Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management (ZAM) 7.5 allows remote attackers to execute arbitrary code by uploading an executable file. novell · zenworks asset management | Critical 10.0 | 72% | 2 exploits | |
| CVE-2011-4051 | CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows remote attackers to execute arbitrary code via vectors related to creation of a file, loading a DLL, and process control. indusoft · web studio | Critical 10.0 | 69% | 2 exploits | |
| CVE-2011-4040 | Buffer overflow in MiniSmtp 3.0.11818 in NJStar Communicator allows remote attackers to execute arbitrary code via a crafted packet. njstar · njstar communicator | Critical 10.0 | 65% | 3 exploits | |
| CVE-2011-3167 | Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1210. hp · openview network node manager | Critical 10.0 | 65% | 2 exploits | |
| CVE-2011-1996 | Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Option Element Remote Code Execution Vulnerability." microsoft · internet explorer | Critical 9.3 | 59% | 2 exploits | |
| CVE-2011-3360 | Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory. wireshark · wireshark | Critical 9.3 | 35% | 2 exploits | |
| CVE-2011-3497 | service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method. measuresoft · scadapro | Critical 10.0 | 57% | 2 exploits | |
| CVE-2011-3494 | WinSig.exe in eSignal 10.6.2425 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a long StyleTemplate element in a QUO, SUM or POR file, which triggers a stack-based buffer overflow, or (2) a long Font->FaceName… interactivedata · esignal | Critical 10.0 | 56% | 3 exploits | |
| CVE-2011-3492 | Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted NETB packet to UDP port 20034. azeotech · daqfactory | Critical 10.0 | 71% | 4 exploits | |
| CVE-2011-3322 | Core Server HMI Service (Coreservice.exe) in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password to the Telnet (TCP/23) port, which triggers an… scadatec · procyon scada | Critical 10.0 | 65% | 3 exploits | |
| CVE-2011-2595 | Multiple stack-based buffer overflows in ACDSee FotoSlate 4.0 Build 146 allow remote attackers to execute arbitrary code via a long id parameter in a (1) String or (2) Int tag in a FotoSlate Project (aka PLP) file. acdsee · fotoslate | Critical 10.0 | 60% | 2 exploits | |
| CVE-2011-2950 | Heap-based buffer overflow in qcpfformat.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted QCP file. realnetworks · realplayer | Critical 9.3 | 29% | 2 exploits | |
| CVE-2011-0257 | Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PnSize opcode in a PICT file that triggers a stack-based buffer overflow. apple · quicktime | Critical 9.3 | 60% | 2 exploits | |
| CVE-2011-2140 | flash-plugin: multiple arbitrary code execution flaws (APSB-11-21) adobe · adobe air | Critical 10.0 | 82% | 4 exploits | |
| CVE-2011-2882 | Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 allows remote attackers to execute arbitrary code via crafted HTTP header data. citrix · access gateway | Critical 9.3 | 56% | 2 exploits | |
| CVE-2011-1865 | Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request containing crafted parameters. hp · openview storage data protector | Critical 10.0 | 89% | 6 exploits | |
| CVE-2011-2371 | Mozilla Integer overflow and arbitrary code execution (MFSA 2011-22) mozilla · firefox | Critical 10.0 | 76% | 4 exploits | |
| CVE-2011-1260 | Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Layout Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 61% | 2 exploits | |
| CVE-2011-2110 | flash-plugin: memory corruption can lead to arbitrary code execution (APSB11-18) adobe · flash player | Critical 10.0 | 86% | 2 exploits | |
| CVE-2011-2386 | VisiWaveReport.exe in AZO Technologies, Inc. visiwave · site survey | Critical 9.3 | 45% | 3 exploits | |
| CVE-2011-2217 | Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.237, as used in VI Client (aka VMware Infrastructure Client) 2.0.2 before Build 230598 and 2.5 before Build 204931 in VMware Infrastructure 3, do not properly… tomsawyer · get extension factory | Critical 9.3 | 42% | 2 exploits | |
| CVE-2011-1220 | Stack-based buffer overflow in lcfd.exe in Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 allows remote authenticated users to execute arbitrary code via a long opts field. ibm · tivoli management framework | Critical 9.0 | 63% | 2 exploits | |
| CVE-2011-1213 | Integer underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted header in a .lzh attachment that triggers a stack-based buffer overflow, aka SPR PRAD88MJ2W. ibm · lotus notes | Critical 9.3 | 33% | 3 exploits | |
| CVE-2011-2089 | Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22 and GENESIS32 9.x before 9.22 allows remote attackers to execute arbitrary code via a long string in… iconics · bizviz | Critical 9.3 | 38% | 5 exploits | |
| CVE-2011-0340 | Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as distributed in Advantech Studio 6.1 SP6 61.6.01.05, InduSoft Web Studio before 7.0+SP1, and InduSoft Thin Client 7.0, allow remote attackers… advantech · advantech studio | Critical 9.3 | 32% | 2 exploits | |
| CVE-2011-1591 | Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers to execute arbitrary code via a crafted .pcap file. wireshark · wireshark | Critical 9.3 | 42% | 7 exploits | |
| CVE-2011-0065 | Mozilla mChannel use after free (MFSA 2011-13) mozilla · firefox | Critical 10.0 | 74% | 6 exploits | |
| CVE-2011-0073 | Mozilla dangling pointer flaw (MFSA 2011-13) mozilla · firefox | Critical 10.0 | 70% | 3 exploits | |
| CVE-2011-0807 | Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration. sun · java system application server | Critical 10.0 | 61% | 2 exploits | |
| CVE-2011-1653 | Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote attackers to execute arbitrary SQL commands via vectors involving the (1) UnAssignFunctionalRoles, (2) UnassignAdminRoles, (3) DeleteFilter,… broadcom · total defense | Critical 10.0 | 89% | 2 exploits | |
| CVE-2011-0105 | Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file,… microsoft · excel | Critical 9.3 | 70% | 2 exploits | |
| CVE-2011-0104 | Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HLink record in an Excel file, aka "Excel Buffer… microsoft · excel | Critical 9.3 | 53% | 1 exploit | |
| CVE-2011-1567 | Multiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted (1) ListAll, (2) Write… 7t · igss | Critical 10.0 | 70% | 6 exploits | |
| CVE-2011-1566 | Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to execute arbitrary programs via ..\ (dot dot backslash) sequences in opcodes (1) 0xa and (2) 0x17 to TCP port 12397. 7t · igss | Critical 10.0 | 67% | 5 exploits | |
| CVE-2011-1565 | Directory traversal vulnerability in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to (1) read (opcode 0x3) or (2) create or write (opcode 0x2) arbitrary files via ..\ (dot dot backslash)… 7t · igss | Critical 10.0 | 64% | 3 exploits | |
| CVE-2011-1563 | Multiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via (1) a long username in an On_FC_CONNECT_FCS_LOGIN packet, and crafted (2) On_FC_CTAGLIST_FCS_CADDTAG, (3)… realflex · realwin | Critical 10.0 | 75% | 4 exploits | |
| CVE-2010-3275 | libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an AMV file, related to a "dangling pointer vulnerability." videolan · vlc media player | Critical 9.3 | 76% | 3 exploits | |
| CVE-2010-4742 | Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to execute arbitrary code via a long PlayFileName property value. moxa · activex sdk | Critical 10.0 | 56% | 2 exploits | |
| CVE-2010-4741 | Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MDM Gateways to execute arbitrary code via crafted data in a session on TCP port 54321. moxa · device manager | Critical 9.3 | 28% | 2 exploits | |
| CVE-2010-4740 | Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote attackers to execute arbitrary code via a crafted .csv file, related to a status log message. scadaengine · bacnet opc client | Critical 9.3 | 42% | 2 exploits | |
| CVE-2011-0654 | Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System (CIFS) browser service in Mrxsmb.sys or bowser.sys in Active Directory in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold,… microsoft · windows server 2003 | Critical 10.0 | 68% | 2 exploits | |
| CVE-2010-4452 | JDK unspecified vulnerability in Deployment component sun · jdk | Critical 10.0 | 83% | 2 exploits |
Showing 751–800 of 1,192
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.