Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 19, 2026
2,494 vulnerabilities · highest exploit probability first
- CVE-2019-10662High 8.8Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the backupUCMConfig file-backup parameter to the /cgi?grandstream · ucm6204 firmwareEPSS44%1 exploitPublished Mar 30, 2019
- CVE-2017-18365Critical 9.8The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated remote attackers to execute arbitrary code.github · githubEPSS21%1 exploitPublished Mar 28, 2019
- CVE-2019-9053High 8.1It is possible with the News module, through a crafted URL, to achieve unauthenticated blind time-based SQL injection via the m1_idlist parameter.cmsmadesimple · cms made simpleEPSS69%3 exploitsPublished Mar 26, 2019
- CVE-2018-16858High 7.8It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document.EPSS67%5 exploitsPublished Mar 25, 2019
- CVE-2019-6441Critical 9.8An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices.coship · rt3050 firmwareEPSS54%4 exploitsPublished Mar 21, 2019
- CVE-2018-20526Critical 9.8Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php.roxyfileman · roxy filemanEPSS73%1 exploitPublished Mar 21, 2019
- CVE-2018-20323High 8.8www/soap/application/MCSoap/Logs.php in MailCleaner Community Edition 2018.08 allows remote attackers to execute arbitrary OS commands.mailcleaner · mailcleanerEPSS54%2 exploitsPublished Mar 21, 2019
- CVE-2018-19524Critical 9.8An issue was discovered on Shenzhen Skyworth DT741 Converged Intelligent Terminal (G/EPON+IPTV) SDOTBGN1, DT721-cb SDOTBGN1, and DT741-cb SDOTBGN1 devices.skyworthdigital · dt721-cb firmwareEPSS51%3 exploitsPublished Mar 21, 2019
- CVE-2018-19276Critical 9.8OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body.openmrs · openmrsEPSS99%5 exploitsPublished Mar 21, 2019
- CVE-2018-10093High 8.8AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution.audiocodes · 420hd ip phone firmwareEPSS68%3 exploitsPublished Mar 21, 2019
- CVE-2019-9760Critical 9.8FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-controlled machine that sends crafted responses.ftpgetter · ftpgetterEPSS53%4 exploitsPublished Mar 13, 2019
- CVE-2019-5420Critical 9.8Use of Insufficiently Random Values in Railties Allows Remote Code Executionrubyonrails · railsEPSS89%2 exploitsPublished Mar 13, 2019
- CVE-2019-9692Medium 6.5class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a watermark file has a standard image file extension (GIF, JPG, JPEG, or PNG).cmsmadesimple · cms made simpleEPSS46%6 exploitsPublished Mar 11, 2019
- CVE-2019-9624High 7.8Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI.webmin · webminEPSS24%2 exploitsPublished Mar 7, 2019
- CVE-2019-1663Critical 9.8A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected…cisco · rv110w firmwareEPSS96%5 exploitsPublished Feb 28, 2019
- CVE-2019-8953Medium 6.1The HAProxy package before 0.59_16 for pfSense has XSS via the desc (aka Description) or table_actionsaclN parameter, related to haproxy_listeners.php and haproxy_listeners_edit.php.netgate · haproxyEPSS52%2 exploitsPublished Feb 20, 2019
- CVE-2019-8943Medium 6.5WordPress through 5.0.3 allows Path Traversal in wp_crop_image().wordpress · wordpressEPSS92%7 exploitsPublished Feb 20, 2019
- CVE-2019-8942High 8.8WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry can be changed to an arbitrary string, such as one ending with a .jpg?file.php substring.wordpress · wordpressEPSS83%6 exploitsPublished Feb 20, 2019
- CVE-2019-6453High 8.1mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers.mirc · mircEPSS54%3 exploitsPublished Feb 18, 2019
- CVE-2019-5736High 8.6runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new…docker · dockerEPSS98%8 exploitsPublished Feb 11, 2019
- CVE-2019-6111Medium 5.9Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client.openbsd · opensshEPSS58%3 exploitsPublished Jan 31, 2019
- CVE-2018-17431Critical 9.8Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL.comodo · unified threat management firewallEPSS84%3 exploitsPublished Jan 30, 2019
- CVE-2019-6977High 8.8gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow.libgd · libgdEPSS71%1 exploitPublished Jan 27, 2019
- CVE-2019-6447High 8.1The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute applications via TCP port 59777 requests on the local Wi-Fi network.estrongs · es file explorer file managerEPSS64%3 exploitsPublished Jan 16, 2019
- CVE-2019-6443Critical 9.1Because of a bug in ctl_getitem, there is a stack-based buffer over-read in read_sysvars in ntp_control.c in ntpd.ntpsec · ntpsecEPSS67%2 exploitsPublished Jan 16, 2019
- CVE-2018-16167Critical 9.8LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.jpcert · logontracerEPSS75%1 exploitPublished Jan 9, 2019
- CVE-2013-7108Medium 5.5nagios3 - security updateicinga · icingaEPSS62%1 exploitPublished Dec 24, 2018
- CVE-2018-8631High 7.5A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.microsoft · internet explorerEPSS68%2 exploitsPublished Dec 11, 2018
- CVE-2018-18982High 8.8NUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL characters, which can be used to inject SQL into an executing statement and allow arbitrary code execution.nuuo · nuuo cmsEPSS61%3 exploitsPublished Nov 27, 2018
- CVE-2018-19518High 7.5University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection,…php · phpEPSS96%4 exploitsPublished Nov 25, 2018
- CVE-2018-15710High 7.8Nagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via Autodiscover_new.php.nagios · nagios xiEPSS44%4 exploitsPublished Nov 14, 2018
- CVE-2018-15708Critical 9.8Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request.nagios · nagios xiEPSS89%4 exploitsPublished Nov 14, 2018
- CVE-2018-7358High 8.8ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper change control vulnerability, which may allow an unauthorized user to perform unauthorized operations.zte · zxhn h168n firmwareEPSS90%2 exploitsPublished Nov 14, 2018
- CVE-2018-7357High 8.8ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper access control vulnerability, which may allow an unauthorized user to gain unauthorized access.zte · zxhn h168n firmwareEPSS88%2 exploitsPublished Nov 14, 2018
- CVE-2018-8552High 7.5An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data, aka "Windows Scripting Engine Memory Corruption Vulnerability." This…microsoft · internet explorerEPSS51%2 exploitsPublished Nov 13, 2018
- CVE-2015-2080High 7.5Jetty vulnerable to exposure of sensitive information to unauthenticated remote userseclipse · jettyEPSS75%1 exploitPublished Nov 9, 2018
- CVE-2018-11770Medium 4.2org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 Improper Authentication vulnerabilityapache · sparkEPSS66%1 exploitPublished Nov 9, 2018
- CVE-2018-15439Critical 9.8A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device.cisco · sf200-24 firmwareEPSS50%1 exploitPublished Nov 8, 2018
- CVE-2018-14665Medium 6.6An incorrect permission check for -modulepath and -logfile options when starting Xorg.x.org · x serverEPSS27%18 exploitsPublished Oct 25, 2018
- CVE-2018-9206Critical 9.8Unrestricted Upload of File with Dangerous Type in blueimp-file-uploadjquery file upload project · jquery file uploadEPSS97%4 exploitsPublished Oct 22, 2018
- CVE-2015-4632High 7.5Multiple directory traversal vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the template_path parameter to (1)…koha · kohaEPSS52%3 exploitsPublished Oct 18, 2018
- CVE-2017-11467Critical 9.8OrientDB vulnerable to Improper Privilage Management leading to arbitrary command injectionorientdb · orientdbEPSS73%2 exploitsPublished Oct 18, 2018
- CVE-2017-12629Critical 9.8Remote code execution occurs in Apache Solrapache · solrEPSS92%2 exploitsPublished Oct 17, 2018
- CVE-2018-1335High 8.1Command injection in org.apache.tika:tika-coreapache · tikaEPSS94%4 exploitsPublished Oct 17, 2018
- CVE-2018-10823High 8.8An issue was discovered on D-Link DWR-116 through 1.06, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices.dlink · dwr-111 firmwareEPSS78%1 exploitPublished Oct 17, 2018
- CVE-2018-3245Critical 9.8Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server.oracle · weblogic serverEPSS94%2 exploitsPublished Oct 16, 2018
- CVE-2017-12611Critical 9.8Apache Struts 2.0.1 uses an unintentional expression in a Freemarker tag instead of string literalapache · strutsEPSS87%1 exploitPublished Oct 16, 2018
- CVE-2018-17532Critical 9.8Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and hotspotlogin.cgi due to insufficient user input sanitization.teltonika · rut900 firmwareEPSS71%2 exploitsPublished Oct 15, 2018
- CVE-2018-18323High 7.5CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=file_editor&file=/../ URI.control-webpanel · webpanelEPSS71%2 exploitsPublished Oct 15, 2018
- CVE-2012-6710Critical 9.8ext_find_user in eXtplorer through 2.1.2 allows remote attackers to bypass authentication via a password[]= (aka an empty array) in an action=login request to index.php.extplorer · extplorerEPSS25%1 exploitPublished Oct 7, 2018
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-10662 | Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the backupUCMConfig file-backup parameter to the /cgi? grandstream · ucm6204 firmware | High 8.8 | 44% | 1 exploit | |
| CVE-2017-18365 | The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated remote attackers to execute arbitrary code. github · github | Critical 9.8 | 21% | 1 exploit | |
| CVE-2019-9053 | It is possible with the News module, through a crafted URL, to achieve unauthenticated blind time-based SQL injection via the m1_idlist parameter. cmsmadesimple · cms made simple | High 8.1 | 69% | 3 exploits | |
| CVE-2018-16858 | It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. | High 7.8 | 67% | 5 exploits | |
| CVE-2019-6441 | An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices. coship · rt3050 firmware | Critical 9.8 | 54% | 4 exploits | |
| CVE-2018-20526 | Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php. roxyfileman · roxy fileman | Critical 9.8 | 73% | 1 exploit | |
| CVE-2018-20323 | www/soap/application/MCSoap/Logs.php in MailCleaner Community Edition 2018.08 allows remote attackers to execute arbitrary OS commands. mailcleaner · mailcleaner | High 8.8 | 54% | 2 exploits | |
| CVE-2018-19524 | An issue was discovered on Shenzhen Skyworth DT741 Converged Intelligent Terminal (G/EPON+IPTV) SDOTBGN1, DT721-cb SDOTBGN1, and DT741-cb SDOTBGN1 devices. skyworthdigital · dt721-cb firmware | Critical 9.8 | 51% | 3 exploits | |
| CVE-2018-19276 | OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body. openmrs · openmrs | Critical 9.8 | 99% | 5 exploits | |
| CVE-2018-10093 | AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution. audiocodes · 420hd ip phone firmware | High 8.8 | 68% | 3 exploits | |
| CVE-2019-9760 | FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-controlled machine that sends crafted responses. ftpgetter · ftpgetter | Critical 9.8 | 53% | 4 exploits | |
| CVE-2019-5420 | Use of Insufficiently Random Values in Railties Allows Remote Code Execution rubyonrails · rails | Critical 9.8 | 89% | 2 exploits | |
| CVE-2019-9692 | class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a watermark file has a standard image file extension (GIF, JPG, JPEG, or PNG). cmsmadesimple · cms made simple | Medium 6.5 | 46% | 6 exploits | |
| CVE-2019-9624 | Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI. webmin · webmin | High 7.8 | 24% | 2 exploits | |
| CVE-2019-1663 | A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected… cisco · rv110w firmware | Critical 9.8 | 96% | 5 exploits | |
| CVE-2019-8953 | The HAProxy package before 0.59_16 for pfSense has XSS via the desc (aka Description) or table_actionsaclN parameter, related to haproxy_listeners.php and haproxy_listeners_edit.php. netgate · haproxy | Medium 6.1 | 52% | 2 exploits | |
| CVE-2019-8943 | WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). wordpress · wordpress | Medium 6.5 | 92% | 7 exploits | |
| CVE-2019-8942 | WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry can be changed to an arbitrary string, such as one ending with a .jpg?file.php substring. wordpress · wordpress | High 8.8 | 83% | 6 exploits | |
| CVE-2019-6453 | mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. mirc · mirc | High 8.1 | 54% | 3 exploits | |
| CVE-2019-5736 | runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new… docker · docker | High 8.6 | 98% | 8 exploits | |
| CVE-2019-6111 | Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. openbsd · openssh | Medium 5.9 | 58% | 3 exploits | |
| CVE-2018-17431 | Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL. comodo · unified threat management firewall | Critical 9.8 | 84% | 3 exploits | |
| CVE-2019-6977 | gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. libgd · libgd | High 8.8 | 71% | 1 exploit | |
| CVE-2019-6447 | The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute applications via TCP port 59777 requests on the local Wi-Fi network. estrongs · es file explorer file manager | High 8.1 | 64% | 3 exploits | |
| CVE-2019-6443 | Because of a bug in ctl_getitem, there is a stack-based buffer over-read in read_sysvars in ntp_control.c in ntpd. ntpsec · ntpsec | Critical 9.1 | 67% | 2 exploits | |
| CVE-2018-16167 | LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors. jpcert · logontracer | Critical 9.8 | 75% | 1 exploit | |
| CVE-2013-7108 | nagios3 - security update icinga · icinga | Medium 5.5 | 62% | 1 exploit | |
| CVE-2018-8631 | A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. microsoft · internet explorer | High 7.5 | 68% | 2 exploits | |
| CVE-2018-18982 | NUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL characters, which can be used to inject SQL into an executing statement and allow arbitrary code execution. nuuo · nuuo cms | High 8.8 | 61% | 3 exploits | |
| CVE-2018-19518 | University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection,… php · php | High 7.5 | 96% | 4 exploits | |
| CVE-2018-15710 | Nagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via Autodiscover_new.php. nagios · nagios xi | High 7.8 | 44% | 4 exploits | |
| CVE-2018-15708 | Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request. nagios · nagios xi | Critical 9.8 | 89% | 4 exploits | |
| CVE-2018-7358 | ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper change control vulnerability, which may allow an unauthorized user to perform unauthorized operations. zte · zxhn h168n firmware | High 8.8 | 90% | 2 exploits | |
| CVE-2018-7357 | ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper access control vulnerability, which may allow an unauthorized user to gain unauthorized access. zte · zxhn h168n firmware | High 8.8 | 88% | 2 exploits | |
| CVE-2018-8552 | An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data, aka "Windows Scripting Engine Memory Corruption Vulnerability." This… microsoft · internet explorer | High 7.5 | 51% | 2 exploits | |
| CVE-2015-2080 | Jetty vulnerable to exposure of sensitive information to unauthenticated remote users eclipse · jetty | High 7.5 | 75% | 1 exploit | |
| CVE-2018-11770 | org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 Improper Authentication vulnerability apache · spark | Medium 4.2 | 66% | 1 exploit | |
| CVE-2018-15439 | A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device. cisco · sf200-24 firmware | Critical 9.8 | 50% | 1 exploit | |
| CVE-2018-14665 | An incorrect permission check for -modulepath and -logfile options when starting Xorg. x.org · x server | Medium 6.6 | 27% | 18 exploits | |
| CVE-2018-9206 | Unrestricted Upload of File with Dangerous Type in blueimp-file-upload jquery file upload project · jquery file upload | Critical 9.8 | 97% | 4 exploits | |
| CVE-2015-4632 | Multiple directory traversal vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the template_path parameter to (1)… koha · koha | High 7.5 | 52% | 3 exploits | |
| CVE-2017-11467 | OrientDB vulnerable to Improper Privilage Management leading to arbitrary command injection orientdb · orientdb | Critical 9.8 | 73% | 2 exploits | |
| CVE-2017-12629 | Remote code execution occurs in Apache Solr apache · solr | Critical 9.8 | 92% | 2 exploits | |
| CVE-2018-1335 | Command injection in org.apache.tika:tika-core apache · tika | High 8.1 | 94% | 4 exploits | |
| CVE-2018-10823 | An issue was discovered on D-Link DWR-116 through 1.06, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices. dlink · dwr-111 firmware | High 8.8 | 78% | 1 exploit | |
| CVE-2018-3245 | Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. oracle · weblogic server | Critical 9.8 | 94% | 2 exploits | |
| CVE-2017-12611 | Apache Struts 2.0.1 uses an unintentional expression in a Freemarker tag instead of string literal apache · struts | Critical 9.8 | 87% | 1 exploit | |
| CVE-2018-17532 | Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and hotspotlogin.cgi due to insufficient user input sanitization. teltonika · rut900 firmware | Critical 9.8 | 71% | 2 exploits | |
| CVE-2018-18323 | CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=file_editor&file=/../ URI. control-webpanel · webpanel | High 7.5 | 71% | 2 exploits | |
| CVE-2012-6710 | ext_find_user in eXtplorer through 2.1.2 allows remote attackers to bypass authentication via a password[]= (aka an empty array) in an action=login request to index.php. extplorer · extplorer | Critical 9.8 | 25% | 1 exploit |
Showing 801–850 of 2,494
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.