Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
890 vulnerabilities · highest exploit probability first
- CVE-2006-1551High 7.5Eval injection vulnerability in pajax_call_dispatcher.php in PAJAX 0.5.1 and earlier allows remote attackers to execute arbitrary code via the (1) $method and (2) $args parameters.georges auberger · pajaxEPSS51%2 exploitsPublished Apr 13, 2006
- CVE-2006-1185High 7.5Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via certain invalid HTML that causes memory corruption.microsoft · internet explorerEPSS70%1 exploitPublished Apr 11, 2006
- CVE-2006-1188High 7.5Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via HTML elements with a certain crafted tag, which leads to memory corruption.microsoft · internet explorerEPSS58%1 exploitPublished Apr 11, 2006
- CVE-2006-1388High 7.5Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors.microsoft · internet explorerEPSS55%1 exploitPublished Mar 24, 2006
- CVE-2006-1364High 7.5Microsoft w3wp (aka w3wp.exe) does not properly handle when the AspCompat directive is not used when referencing COM components in ASP.NET, which allows remote attackers to cause a denial of service (resource consumption or crash) by repeatedly requesting each of several…microsoft · asp.netEPSS59%1 exploitPublished Mar 23, 2006
- CVE-2006-1245High 7.5Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute arbitrary code via an HTML tag with a large number of script action handlers such as onload and onmouseover, as demonstrated using onclick,…microsoft · ieEPSS62%2 exploitsPublished Mar 16, 2006
- CVE-2006-1148High 7.5Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to execute arbitrary code via an HTTP GET request with a long (1) parameter name or (2) value in a URL, which triggers the overflow in the…peercast · peercastEPSS73%5 exploitsPublished Mar 10, 2006
- CVE-2006-1016High 7.5Buffer overflow in the IsComponentInstalled method in Internet Explorer 6.0, when used on Windows 2000 before SP4 or Windows XP before SP1, allows remote attackers to execute arbitrary code via JavaScript that calls IsComponentInstalled with a long first argument.microsoft · internet explorerEPSS67%2 exploitsPublished Mar 6, 2006
- CVE-2006-0900High 7.8nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demonstrated by the ProtoVer NFS test suite.freebsd · freebsdEPSS65%1 exploitPublished Feb 27, 2006
- CVE-2006-0460High 7.5Multiple buffer overflows in BomberClone before 0.11.6.2 allow remote attackers to execute arbitrary code via long error messages.bomberclone · bombercloneEPSS68%3 exploitsPublished Feb 17, 2006
- CVE-2006-0021High 7.8Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang) via an IGMP packet with an invalid IP option, aka the "IGMP v3 DoS Vulnerability."microsoft · windows xpEPSS63%1 exploitPublished Feb 14, 2006
- CVE-2006-0564High 7.5Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included in the Microsoft HTML Help 1.4 SDK, allows context-dependent attackers to execute arbitrary code via a .hhp file with a long Contents file field.microsoft · html helpEPSS72%10 exploitsPublished Feb 6, 2006
- CVE-2006-0476High 7.6Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (File1 field).nullsoft · winampEPSS75%4 exploitsPublished Jan 31, 2006
- CVE-2006-0441High 7.5Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER command, which triggers the overflow when the log is viewed.karjasoft · sami ftp serverEPSS71%8 exploitsPublished Jan 26, 2006
- CVE-2005-4085High 7.5Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header.bluecoat · proxyavEPSS66%3 exploitsPublished Dec 31, 2005
- CVE-2005-4560High 7.5The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) format image with a crafted SETABORTPROC GDI Escape function call, related to the Windows Picture and Fax Viewer…microsoft · windows 2003 serverEPSS86%2 exploitsPublished Dec 28, 2005
- CVE-2005-4267High 7.5Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP command that ends with a "}" character, as demonstrated using long (1) LIST, (2) LSUB, (3) SEARCH TEXT, (4) STATUS INBOX, (5) AUTHENTICATE, (6) FETCH, (7)…qualcomm · worldmailEPSS67%3 exploitsPublished Dec 21, 2005
- CVE-2005-4411High 7.5Buffer overflow in Mercury Mail Transport System 4.01b allows remote attackers to execute arbitrary code via a long request to TCP port 105.david harris · mercury mail transport systemEPSS65%2 exploitsPublished Dec 20, 2005
- CVE-2005-4360High 7.8The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to ".dll" followed by arguments such as "~0" through "~9", which causes ntdll.dll to produce a return value…microsoft · internet information servicesEPSS87%2 exploitsPublished Dec 19, 2005
- CVE-2005-2123High 7.5Multiple integer overflows in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allow remote attackers to execute arbitrary code via crafted Windows Metafile (WMF) and Enhanced Metafile (EMF) format images that lead to heap-based…microsoft · windows 2000EPSS61%1 exploitPublished Nov 29, 2005
- CVE-2005-2124High 7.6Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1, related to "An unchecked buffer" and possibly buffer overflows, allows remote attackers to execute arbitrary code via a crafted Windows Metafile (WMF)…microsoft · windows 2000EPSS56%2 exploitsPublished Nov 29, 2005
- CVE-2005-3757High 7.5The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to obtain sensitive information and execute arbitrary code via dangerous Java class methods in select attribute of xsl:value-of tags in XSLT style sheets, such as…google · mini search applianceEPSS41%3 exploitsPublished Nov 22, 2005
- CVE-2005-3683High 7.5Stack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled, allows remote attackers to cause a denial of service (application crash), and possibly execute arbitrary code, via a long USER command.freeftpd · freeftpdEPSS72%3 exploitsPublished Nov 18, 2005
- CVE-2005-3314High 7.5Stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary code via "long verb arguments."novell · netmailEPSS66%2 exploitsPublished Nov 18, 2005
- CVE-2005-3589High 7.8Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service (terminal crash) via a long USER ftp command.filezilla · filezilla server terminalEPSS53%1 exploitPublished Nov 16, 2005
- CVE-2005-3390High 7.5The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a "GLOBALS"…php · phpEPSS66%1 exploitPublished Oct 31, 2005
- CVE-2005-3252High 7.5Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to execute arbitrary code via a crafted UDP packet.sourcefire · snortEPSS84%6 exploitsPublished Oct 18, 2005
- CVE-2005-3190High 7.5Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to execute arbitrary code via HTTP GET requests.broadcom · igatewayEPSS65%3 exploitsPublished Oct 13, 2005
- CVE-2005-1978High 7.5COM+ in Microsoft Windows does not properly "create and use memory structures," which allows local users or remote attackers to execute arbitrary code.microsoft · windows 2000EPSS53%1 exploitPublished Oct 12, 2005
- CVE-2005-3155High 7.5Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute arbitrary code.mailenable · mailenable enterpriseEPSS64%3 exploitsPublished Oct 5, 2005
- CVE-2005-2877High 7.5The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers.twiki · twikiEPSS71%4 exploitsPublished Sep 16, 2005
- CVE-2005-2799High 7.5Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remote attackers to execute arbitrary code via a long HTTP POST request.linksys · wrt54gEPSS71%4 exploitsPublished Sep 15, 2005
- CVE-2005-2847High 7.5img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter.barracuda networks · barracuda spam firewallEPSS53%3 exploitsPublished Sep 8, 2005
- CVE-2005-2733High 7.5upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which could allow remote attackers to execute arbitrary code.alexander palmo · simple php blogEPSS51%3 exploitsPublished Aug 30, 2005
- CVE-2005-2127High 7.5Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet…microsoft · .net frameworkEPSS64%1 exploitPublished Aug 19, 2005
- CVE-2005-2612High 8.8Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP code via the cache_lastpostdate[server] cookie.wordpress · wordpressEPSS39%2 exploitsPublished Aug 17, 2005
- CVE-2005-2551High 7.5Buffer overflow in dhost.exe in iMonitor for Novell eDirectory 8.7.3 on Windows allows attackers to cause a denial of service (crash) and obtain access to files via unknown vectors.novell · edirectoryEPSS55%3 exploitsPublished Aug 12, 2005
- CVE-2005-2535High 7.5Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packet to TCP port 41523, a different vulnerability than CVE-2005-0260.broadcom · brightstor arcserve backupEPSS81%3 exploitsPublished Aug 10, 2005
- CVE-2005-1272High 7.5Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code via a long string sent to port (1) 6070 or (2) 6050.ca · brightstor arcserve backupEPSS66%3 exploitsPublished Aug 5, 2005
- CVE-2005-2373High 7.2Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long directory name to (1) LIST, (2) DELE or (3) RNFR commands.whitsoft development · slimftpdEPSS46%2 exploitsPublished Jul 26, 2005
- CVE-2005-2278High 7.2Stack-based buffer overflow in the IMAP daemon (imapd) in MailEnable Professional 1.54 allows remote authenticated users to execute arbitrary code via the status command with a long mailbox name.mailenable · mailenable professionalEPSS85%2 exploitsPublished Jul 18, 2005
- CVE-2005-2086High 7.5PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute arbitrary PHP code.phpbb group · phpbbEPSS85%3 exploitsPublished Jul 5, 2005
- CVE-2005-1921High 7.5Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7)…drupal · drupalEPSS79%6 exploitsPublished Jun 29, 2005
- CVE-2005-0773High 7.5Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allows remote attackers to execute arbitrary code via a CONNECT_CLIENT_AUTH request with authentication method type 3 (Windows credentials) and…symantec veritas · backup execEPSS86%2 exploitsPublished Jun 18, 2005
- CVE-2005-1213High 7.5Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP servers to execute arbitrary code via a LIST response with a long second field.microsoft · outlook expressEPSS74%3 exploitsPublished Jun 14, 2005
- CVE-2005-1543High 7.5Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENworks 6.5 Desktop and Server Management, ZENworks for Desktops 4.x, ZENworks for Servers 3.x, and Remote Management allows remote attackers to execute arbitrary…novell · zenworksEPSS66%3 exploitsPublished May 25, 2005
- CVE-2005-1348High 7.5Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to execute arbitrary code via a long HTTP Authorization header.mailenable · mailenable enterpriseEPSS73%3 exploitsPublished May 2, 2005
- CVE-2005-0045High 7.5The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to execute arbitrary code via Transaction responses containing (1) Trans or (2) Trans2 commands, aka the…microsoft · windows ntEPSS70%1 exploitPublished May 2, 2005
- CVE-2005-0560High 7.5Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allows remote attackers to execute arbitrary code via a crafted X-LINK2STATE extended verb request to the SMTP port.microsoft · exchange serverEPSS69%1 exploitPublished May 2, 2005
- CVE-2005-0043High 7.5Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files.apple · itunesEPSS69%3 exploitsPublished May 2, 2005
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2006-1551 | Eval injection vulnerability in pajax_call_dispatcher.php in PAJAX 0.5.1 and earlier allows remote attackers to execute arbitrary code via the (1) $method and (2) $args parameters. georges auberger · pajax | High 7.5 | 51% | 2 exploits | |
| CVE-2006-1185 | Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via certain invalid HTML that causes memory corruption. microsoft · internet explorer | High 7.5 | 70% | 1 exploit | |
| CVE-2006-1188 | Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via HTML elements with a certain crafted tag, which leads to memory corruption. microsoft · internet explorer | High 7.5 | 58% | 1 exploit | |
| CVE-2006-1388 | Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors. microsoft · internet explorer | High 7.5 | 55% | 1 exploit | |
| CVE-2006-1364 | Microsoft w3wp (aka w3wp.exe) does not properly handle when the AspCompat directive is not used when referencing COM components in ASP.NET, which allows remote attackers to cause a denial of service (resource consumption or crash) by repeatedly requesting each of several… microsoft · asp.net | High 7.5 | 59% | 1 exploit | |
| CVE-2006-1245 | Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute arbitrary code via an HTML tag with a large number of script action handlers such as onload and onmouseover, as demonstrated using onclick,… microsoft · ie | High 7.5 | 62% | 2 exploits | |
| CVE-2006-1148 | Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to execute arbitrary code via an HTTP GET request with a long (1) parameter name or (2) value in a URL, which triggers the overflow in the… peercast · peercast | High 7.5 | 73% | 5 exploits | |
| CVE-2006-1016 | Buffer overflow in the IsComponentInstalled method in Internet Explorer 6.0, when used on Windows 2000 before SP4 or Windows XP before SP1, allows remote attackers to execute arbitrary code via JavaScript that calls IsComponentInstalled with a long first argument. microsoft · internet explorer | High 7.5 | 67% | 2 exploits | |
| CVE-2006-0900 | nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demonstrated by the ProtoVer NFS test suite. freebsd · freebsd | High 7.8 | 65% | 1 exploit | |
| CVE-2006-0460 | Multiple buffer overflows in BomberClone before 0.11.6.2 allow remote attackers to execute arbitrary code via long error messages. bomberclone · bomberclone | High 7.5 | 68% | 3 exploits | |
| CVE-2006-0021 | Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang) via an IGMP packet with an invalid IP option, aka the "IGMP v3 DoS Vulnerability." microsoft · windows xp | High 7.8 | 63% | 1 exploit | |
| CVE-2006-0564 | Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included in the Microsoft HTML Help 1.4 SDK, allows context-dependent attackers to execute arbitrary code via a .hhp file with a long Contents file field. microsoft · html help | High 7.5 | 72% | 10 exploits | |
| CVE-2006-0476 | Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (File1 field). nullsoft · winamp | High 7.6 | 75% | 4 exploits | |
| CVE-2006-0441 | Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER command, which triggers the overflow when the log is viewed. karjasoft · sami ftp server | High 7.5 | 71% | 8 exploits | |
| CVE-2005-4085 | Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header. bluecoat · proxyav | High 7.5 | 66% | 3 exploits | |
| CVE-2005-4560 | The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) format image with a crafted SETABORTPROC GDI Escape function call, related to the Windows Picture and Fax Viewer… microsoft · windows 2003 server | High 7.5 | 86% | 2 exploits | |
| CVE-2005-4267 | Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP command that ends with a "}" character, as demonstrated using long (1) LIST, (2) LSUB, (3) SEARCH TEXT, (4) STATUS INBOX, (5) AUTHENTICATE, (6) FETCH, (7)… qualcomm · worldmail | High 7.5 | 67% | 3 exploits | |
| CVE-2005-4411 | Buffer overflow in Mercury Mail Transport System 4.01b allows remote attackers to execute arbitrary code via a long request to TCP port 105. david harris · mercury mail transport system | High 7.5 | 65% | 2 exploits | |
| CVE-2005-4360 | The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to ".dll" followed by arguments such as "~0" through "~9", which causes ntdll.dll to produce a return value… microsoft · internet information services | High 7.8 | 87% | 2 exploits | |
| CVE-2005-2123 | Multiple integer overflows in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allow remote attackers to execute arbitrary code via crafted Windows Metafile (WMF) and Enhanced Metafile (EMF) format images that lead to heap-based… microsoft · windows 2000 | High 7.5 | 61% | 1 exploit | |
| CVE-2005-2124 | Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1, related to "An unchecked buffer" and possibly buffer overflows, allows remote attackers to execute arbitrary code via a crafted Windows Metafile (WMF)… microsoft · windows 2000 | High 7.6 | 56% | 2 exploits | |
| CVE-2005-3757 | The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to obtain sensitive information and execute arbitrary code via dangerous Java class methods in select attribute of xsl:value-of tags in XSLT style sheets, such as… google · mini search appliance | High 7.5 | 41% | 3 exploits | |
| CVE-2005-3683 | Stack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled, allows remote attackers to cause a denial of service (application crash), and possibly execute arbitrary code, via a long USER command. freeftpd · freeftpd | High 7.5 | 72% | 3 exploits | |
| CVE-2005-3314 | Stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary code via "long verb arguments." novell · netmail | High 7.5 | 66% | 2 exploits | |
| CVE-2005-3589 | Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service (terminal crash) via a long USER ftp command. filezilla · filezilla server terminal | High 7.8 | 53% | 1 exploit | |
| CVE-2005-3390 | The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a "GLOBALS"… php · php | High 7.5 | 66% | 1 exploit | |
| CVE-2005-3252 | Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to execute arbitrary code via a crafted UDP packet. sourcefire · snort | High 7.5 | 84% | 6 exploits | |
| CVE-2005-3190 | Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to execute arbitrary code via HTTP GET requests. broadcom · igateway | High 7.5 | 65% | 3 exploits | |
| CVE-2005-1978 | COM+ in Microsoft Windows does not properly "create and use memory structures," which allows local users or remote attackers to execute arbitrary code. microsoft · windows 2000 | High 7.5 | 53% | 1 exploit | |
| CVE-2005-3155 | Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute arbitrary code. mailenable · mailenable enterprise | High 7.5 | 64% | 3 exploits | |
| CVE-2005-2877 | The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers. twiki · twiki | High 7.5 | 71% | 4 exploits | |
| CVE-2005-2799 | Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remote attackers to execute arbitrary code via a long HTTP POST request. linksys · wrt54g | High 7.5 | 71% | 4 exploits | |
| CVE-2005-2847 | img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter. barracuda networks · barracuda spam firewall | High 7.5 | 53% | 3 exploits | |
| CVE-2005-2733 | upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which could allow remote attackers to execute arbitrary code. alexander palmo · simple php blog | High 7.5 | 51% | 3 exploits | |
| CVE-2005-2127 | Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet… microsoft · .net framework | High 7.5 | 64% | 1 exploit | |
| CVE-2005-2612 | Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP code via the cache_lastpostdate[server] cookie. wordpress · wordpress | High 8.8 | 39% | 2 exploits | |
| CVE-2005-2551 | Buffer overflow in dhost.exe in iMonitor for Novell eDirectory 8.7.3 on Windows allows attackers to cause a denial of service (crash) and obtain access to files via unknown vectors. novell · edirectory | High 7.5 | 55% | 3 exploits | |
| CVE-2005-2535 | Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packet to TCP port 41523, a different vulnerability than CVE-2005-0260. broadcom · brightstor arcserve backup | High 7.5 | 81% | 3 exploits | |
| CVE-2005-1272 | Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code via a long string sent to port (1) 6070 or (2) 6050. ca · brightstor arcserve backup | High 7.5 | 66% | 3 exploits | |
| CVE-2005-2373 | Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long directory name to (1) LIST, (2) DELE or (3) RNFR commands. whitsoft development · slimftpd | High 7.2 | 46% | 2 exploits | |
| CVE-2005-2278 | Stack-based buffer overflow in the IMAP daemon (imapd) in MailEnable Professional 1.54 allows remote authenticated users to execute arbitrary code via the status command with a long mailbox name. mailenable · mailenable professional | High 7.2 | 85% | 2 exploits | |
| CVE-2005-2086 | PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute arbitrary PHP code. phpbb group · phpbb | High 7.5 | 85% | 3 exploits | |
| CVE-2005-1921 | Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7)… drupal · drupal | High 7.5 | 79% | 6 exploits | |
| CVE-2005-0773 | Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allows remote attackers to execute arbitrary code via a CONNECT_CLIENT_AUTH request with authentication method type 3 (Windows credentials) and… symantec veritas · backup exec | High 7.5 | 86% | 2 exploits | |
| CVE-2005-1213 | Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP servers to execute arbitrary code via a LIST response with a long second field. microsoft · outlook express | High 7.5 | 74% | 3 exploits | |
| CVE-2005-1543 | Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENworks 6.5 Desktop and Server Management, ZENworks for Desktops 4.x, ZENworks for Servers 3.x, and Remote Management allows remote attackers to execute arbitrary… novell · zenworks | High 7.5 | 66% | 3 exploits | |
| CVE-2005-1348 | Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to execute arbitrary code via a long HTTP Authorization header. mailenable · mailenable enterprise | High 7.5 | 73% | 3 exploits | |
| CVE-2005-0045 | The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to execute arbitrary code via Transaction responses containing (1) Trans or (2) Trans2 commands, aka the… microsoft · windows nt | High 7.5 | 70% | 1 exploit | |
| CVE-2005-0560 | Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allows remote attackers to execute arbitrary code via a crafted X-LINK2STATE extended verb request to the SMTP port. microsoft · exchange server | High 7.5 | 69% | 1 exploit | |
| CVE-2005-0043 | Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files. apple · itunes | High 7.5 | 69% | 3 exploits |
Showing 751–800 of 890
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.