Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 19, 2026
2,494 vulnerabilities · highest exploit probability first
- CVE-2018-9958High 8.8This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049.foxitsoftware · foxit readerEPSS62%4 exploitsPublished May 17, 2018
- CVE-2018-9948Medium 6.5This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935.foxitsoftware · foxit readerEPSS63%3 exploitsPublished May 17, 2018
- CVE-2018-0953High 7.5A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore.microsoft · chakracoreEPSS66%2 exploitsPublished May 9, 2018
- CVE-2015-1503High 7.5Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote attackers to read arbitrary files via a (1) ..icewarp · mail serverEPSS57%3 exploitsPublished May 8, 2018
- CVE-2018-10583High 7.5An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content…apache · openofficeEPSS78%2 exploitsPublished May 1, 2018
- CVE-2018-1418High 8.8IBM Security QRadar SIEM 7.2 and 7.3 could allow a user to bypass authentication which could lead to code execution.ibm · qradar security information and event managerEPSS51%3 exploitsPublished Apr 26, 2018
- CVE-2018-9059Critical 9.8Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious login request to forum.ghp.sharing-file · easy file sharing web serverEPSS77%3 exploitsPublished Apr 20, 2018
- CVE-2018-8831Medium 6.1A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the context of the victim user's browser via a playlist.kodi · kodiEPSS52%2 exploitsPublished Apr 18, 2018
- CVE-2018-8736High 8.8A privilege escalation vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to leverage an RCE vulnerability escalating to root.nagios · nagios xiEPSS46%6 exploitsPublished Apr 17, 2018
- CVE-2018-8735High 8.8Remote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary commands on the target system, aka OS command injection.nagios · nagios xiEPSS64%6 exploitsPublished Apr 17, 2018
- CVE-2018-8734Critical 9.8SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary SQL commands via the selInfoKey1 parameter.nagios · nagios xiEPSS54%6 exploitsPublished Apr 17, 2018
- CVE-2018-8733Critical 9.8Authentication bypass vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an unauthenticated attacker to make configuration changes and leverage an authenticated SQL injection vulnerability.nagios · nagios xiEPSS27%6 exploitsPublished Apr 17, 2018
- CVE-2018-9995Critical 9.8TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a…tbkvision · tbk-dvr4104 firmwareEPSS82%2 exploitsPublished Apr 10, 2018
- CVE-2018-1217Critical 9.8Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection Appliance 2.0 and 2.1, is affected by a missing access control check vulnerability which could potentially allow a remote unauthenticated attacker to read or…dell · emc avamarEPSS51%2 exploitsPublished Apr 9, 2018
- CVE-2018-0986High 8.8A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." This affects Windows Defender,…microsoft · exchange serverEPSS63%2 exploitsPublished Apr 4, 2018
- CVE-2018-9205High 7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Avatar Uploaderdrupal · avatar uploaderEPSS55%2 exploitsPublished Apr 4, 2018
- CVE-2018-4162High 8.8iOS before 11.3 is affected.apple · icloudEPSS38%1 exploitPublished Apr 3, 2018
- CVE-2018-9161Critical 9.8Prisma Industriale Checkweigher PrismaWEB 1.21 allows remote attackers to discover the hardcoded prisma password for the prismaweb account by reading user/scripts/login_par.js.prismaindustriale · checkweigher prismawebEPSS57%1 exploitPublished Mar 31, 2018
- CVE-2018-1207Critical 9.8Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code.dell · emc idrac7EPSS90%1 exploitPublished Mar 23, 2018
- CVE-2017-17215High 8.8Huawei HG532 with some customized versions has a remote code execution vulnerability.huawei · hg532 firmwareEPSS78%1 exploitPublished Mar 20, 2018
- CVE-2018-7422Critical 9.8A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the ajax_path parameter to editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php, aka absolute path traversal.siteeditor · site editorEPSS62%2 exploitsPublished Mar 19, 2018
- CVE-2018-8770Medium 5.3Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php, controllers/getConfigTest.php, controllers/getUpdateTest.php, controllers/postclientdataTest.php, controllers/posterrorTest.php, controllers/posteventTest.php, controllers/posttagTest.php,…cobub · razorEPSS59%3 exploitsPublished Mar 18, 2018
- CVE-2018-7756Critical 9.8RunExeFile.exe in the installer for DEWESoft X3 SP1 (64-bit) devices does not require authentication for sessions on TCP port 1999, which allows remote attackers to execute arbitrary code or access internal commands, as demonstrated by a RUN command that launches a .EXE file…dewesoft · dewesoftEPSS61%2 exploitsPublished Mar 14, 2018
- CVE-2018-6329Critical 9.8It was discovered that the Unitrends Backup (UB) before 10.1.0 libbpext.so authentication could be bypassed with a SQL injection, allowing a remote attacker to place a privilege escalation exploit on the target system and subsequently execute arbitrary commands.unitrends · backupEPSS61%5 exploitsPublished Mar 14, 2018
- CVE-2018-6328Critical 9.8It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, which then could allow an unauthenticated user to inject arbitrary commands into its /api/hosts parameters using backquotes.kaseya · unitrends backupEPSS64%5 exploitsPublished Mar 14, 2018
- CVE-2018-0935High 7.5Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles…microsoft · internet explorerEPSS56%2 exploitsPublished Mar 14, 2018
- CVE-2018-0886High 7.0The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709 allows…microsoft · windows 10EPSS82%3 exploitsPublished Mar 14, 2018
- CVE-2018-1000094High 7.2CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server.cmsmadesimple · cms made simpleEPSS39%3 exploitsPublished Mar 12, 2018
- CVE-2018-8065High 7.5Improper Input Validation in web server in Flexense SyncBreeze Enterprise 10.6.24flexense · syncbreezeEPSS76%1 exploitPublished Mar 12, 2018
- CVE-2018-7890Critical 9.8A remote code execution issue was discovered in Zoho ManageEngine Applications Manager before 13.6 (build 13640).zohocorp · manageengine applications managerEPSS79%4 exploitsPublished Mar 8, 2018
- CVE-2018-7739Critical 9.8antsle antman before 0.9.1a allows remote attackers to bypass authentication via invalid characters in the username and password parameters, as demonstrated by a username=>&password=%0a string to the /login URI.antsle · antmanEPSS53%4 exploitsPublished Mar 6, 2018
- CVE-2018-1000115High 7.5Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UDP support of the memcached server that can result in denial of service via network flood (traffic amplification of 1:50,000 has been…memcached · memcachedEPSS88%4 exploitsPublished Mar 5, 2018
- CVE-2018-7584Critical 9.8In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the php_stream_url_wrap_http_ex function in ext/standard/http_fopen_wrapper.c.php · phpEPSS87%2 exploitsPublished Mar 1, 2018
- CVE-2018-7573Critical 9.8A remote FTP server can send 400 characters of 'F' in conjunction with the FTP 220 response code to crash the application; after this overflow, one can run arbitrary code on the victim machine.ftpshell · ftpshell clientEPSS69%5 exploitsPublished Mar 1, 2018
- CVE-2018-6481Critical 9.8A buffer overflow vulnerability in the control protocol of Disk Savvy Enterprise v10.4.18 allows remote attackers to execute arbitrary code by sending a crafted packet to TCP port 9124.flexense · disksavvyEPSS21%5 exploitsPublished Feb 27, 2018
- CVE-2014-3206Critical 9.8Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the auth_name parameter to localhost/backupmgmt/pre_connect_check.php.seagate · blackarmor nas 110 firmwareEPSS51%1 exploitPublished Feb 23, 2018
- CVE-2018-7314Critical 9.8SQL Injection exists in the PrayerCenter 3.0.2 component for Joomla!mlwebtechnologies · prayercenterEPSS58%2 exploitsPublished Feb 22, 2018
- CVE-2018-7297Critical 9.8Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to obtain read/write access and execute system commands on the device.eq-3 · homematic central control unit ccu2 firmwareEPSS64%1 exploitPublished Feb 22, 2018
- CVE-2018-7286Medium 6.5res_pjsip allows remote authenticated users to crash Asterisk (segmentation fault) by sending a number of SIP INVITE messages on a TCP or TLS connection and then suddenly closing the connection.digium · asteriskEPSS53%2 exploitsPublished Feb 21, 2018
- CVE-2018-7284High 7.5A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2.digium · asteriskEPSS66%2 exploitsPublished Feb 21, 2018
- CVE-2017-14535High 8.8trixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php.netfortris · trixboxEPSS50%3 exploitsPublished Feb 16, 2018
- CVE-2017-5817Critical 9.8A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.hp · intelligent management centerEPSS83%5 exploitsPublished Feb 15, 2018
- CVE-2017-5816Critical 9.8A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.hp · intelligent management centerEPSS86%5 exploitsPublished Feb 15, 2018
- CVE-2017-12557Critical 9.8A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and earlier was found.hp · intelligent management centerEPSS80%3 exploitsPublished Feb 15, 2018
- CVE-2017-12542Critical 10.0A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found.hp · integrated lights-out 4 firmwareEPSS99%2 exploitsPublished Feb 15, 2018
- CVE-2018-0840High 7.5Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to…microsoft · edgeEPSS53%2 exploitsPublished Feb 14, 2018
- CVE-2018-6892Critical 9.8An unauthenticated remote attacker that can connect to the "CloudMe Sync" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition.cloudme · syncEPSS93%9 exploitsPublished Feb 11, 2018
- CVE-2018-1000049High 7.5Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner API.nanopool · claymore dual minerEPSS77%3 exploitsPublished Feb 9, 2018
- CVE-2018-6389High 7.5In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registered .js files (from wp-includes/script-loader.php) to construct a series of requests to load every file many times.wordpress · wordpressEPSS73%3 exploitsPublished Feb 6, 2018
- CVE-2018-6605Critical 9.8SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla!zh baidumap project · zh baidumapEPSS58%2 exploitsPublished Feb 5, 2018
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-9958 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. foxitsoftware · foxit reader | High 8.8 | 62% | 4 exploits | |
| CVE-2018-9948 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. foxitsoftware · foxit reader | Medium 6.5 | 63% | 3 exploits | |
| CVE-2018-0953 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. microsoft · chakracore | High 7.5 | 66% | 2 exploits | |
| CVE-2015-1503 | Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote attackers to read arbitrary files via a (1) .. icewarp · mail server | High 7.5 | 57% | 3 exploits | |
| CVE-2018-10583 | An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content… apache · openoffice | High 7.5 | 78% | 2 exploits | |
| CVE-2018-1418 | IBM Security QRadar SIEM 7.2 and 7.3 could allow a user to bypass authentication which could lead to code execution. ibm · qradar security information and event manager | High 8.8 | 51% | 3 exploits | |
| CVE-2018-9059 | Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious login request to forum.ghp. sharing-file · easy file sharing web server | Critical 9.8 | 77% | 3 exploits | |
| CVE-2018-8831 | A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the context of the victim user's browser via a playlist. kodi · kodi | Medium 6.1 | 52% | 2 exploits | |
| CVE-2018-8736 | A privilege escalation vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to leverage an RCE vulnerability escalating to root. nagios · nagios xi | High 8.8 | 46% | 6 exploits | |
| CVE-2018-8735 | Remote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary commands on the target system, aka OS command injection. nagios · nagios xi | High 8.8 | 64% | 6 exploits | |
| CVE-2018-8734 | SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary SQL commands via the selInfoKey1 parameter. nagios · nagios xi | Critical 9.8 | 54% | 6 exploits | |
| CVE-2018-8733 | Authentication bypass vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an unauthenticated attacker to make configuration changes and leverage an authenticated SQL injection vulnerability. nagios · nagios xi | Critical 9.8 | 27% | 6 exploits | |
| CVE-2018-9995 | TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a… tbkvision · tbk-dvr4104 firmware | Critical 9.8 | 82% | 2 exploits | |
| CVE-2018-1217 | Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection Appliance 2.0 and 2.1, is affected by a missing access control check vulnerability which could potentially allow a remote unauthenticated attacker to read or… dell · emc avamar | Critical 9.8 | 51% | 2 exploits | |
| CVE-2018-0986 | A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." This affects Windows Defender,… microsoft · exchange server | High 8.8 | 63% | 2 exploits | |
| CVE-2018-9205 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Avatar Uploader drupal · avatar uploader | High 7.5 | 55% | 2 exploits | |
| CVE-2018-4162 | iOS before 11.3 is affected. apple · icloud | High 8.8 | 38% | 1 exploit | |
| CVE-2018-9161 | Prisma Industriale Checkweigher PrismaWEB 1.21 allows remote attackers to discover the hardcoded prisma password for the prismaweb account by reading user/scripts/login_par.js. prismaindustriale · checkweigher prismaweb | Critical 9.8 | 57% | 1 exploit | |
| CVE-2018-1207 | Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code. dell · emc idrac7 | Critical 9.8 | 90% | 1 exploit | |
| CVE-2017-17215 | Huawei HG532 with some customized versions has a remote code execution vulnerability. huawei · hg532 firmware | High 8.8 | 78% | 1 exploit | |
| CVE-2018-7422 | A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the ajax_path parameter to editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php, aka absolute path traversal. siteeditor · site editor | Critical 9.8 | 62% | 2 exploits | |
| CVE-2018-8770 | Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php, controllers/getConfigTest.php, controllers/getUpdateTest.php, controllers/postclientdataTest.php, controllers/posterrorTest.php, controllers/posteventTest.php, controllers/posttagTest.php,… cobub · razor | Medium 5.3 | 59% | 3 exploits | |
| CVE-2018-7756 | RunExeFile.exe in the installer for DEWESoft X3 SP1 (64-bit) devices does not require authentication for sessions on TCP port 1999, which allows remote attackers to execute arbitrary code or access internal commands, as demonstrated by a RUN command that launches a .EXE file… dewesoft · dewesoft | Critical 9.8 | 61% | 2 exploits | |
| CVE-2018-6329 | It was discovered that the Unitrends Backup (UB) before 10.1.0 libbpext.so authentication could be bypassed with a SQL injection, allowing a remote attacker to place a privilege escalation exploit on the target system and subsequently execute arbitrary commands. unitrends · backup | Critical 9.8 | 61% | 5 exploits | |
| CVE-2018-6328 | It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, which then could allow an unauthenticated user to inject arbitrary commands into its /api/hosts parameters using backquotes. kaseya · unitrends backup | Critical 9.8 | 64% | 5 exploits | |
| CVE-2018-0935 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles… microsoft · internet explorer | High 7.5 | 56% | 2 exploits | |
| CVE-2018-0886 | The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709 allows… microsoft · windows 10 | High 7.0 | 82% | 3 exploits | |
| CVE-2018-1000094 | CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server. cmsmadesimple · cms made simple | High 7.2 | 39% | 3 exploits | |
| CVE-2018-8065 | Improper Input Validation in web server in Flexense SyncBreeze Enterprise 10.6.24 flexense · syncbreeze | High 7.5 | 76% | 1 exploit | |
| CVE-2018-7890 | A remote code execution issue was discovered in Zoho ManageEngine Applications Manager before 13.6 (build 13640). zohocorp · manageengine applications manager | Critical 9.8 | 79% | 4 exploits | |
| CVE-2018-7739 | antsle antman before 0.9.1a allows remote attackers to bypass authentication via invalid characters in the username and password parameters, as demonstrated by a username=>&password=%0a string to the /login URI. antsle · antman | Critical 9.8 | 53% | 4 exploits | |
| CVE-2018-1000115 | Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UDP support of the memcached server that can result in denial of service via network flood (traffic amplification of 1:50,000 has been… memcached · memcached | High 7.5 | 88% | 4 exploits | |
| CVE-2018-7584 | In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the php_stream_url_wrap_http_ex function in ext/standard/http_fopen_wrapper.c. php · php | Critical 9.8 | 87% | 2 exploits | |
| CVE-2018-7573 | A remote FTP server can send 400 characters of 'F' in conjunction with the FTP 220 response code to crash the application; after this overflow, one can run arbitrary code on the victim machine. ftpshell · ftpshell client | Critical 9.8 | 69% | 5 exploits | |
| CVE-2018-6481 | A buffer overflow vulnerability in the control protocol of Disk Savvy Enterprise v10.4.18 allows remote attackers to execute arbitrary code by sending a crafted packet to TCP port 9124. flexense · disksavvy | Critical 9.8 | 21% | 5 exploits | |
| CVE-2014-3206 | Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the auth_name parameter to localhost/backupmgmt/pre_connect_check.php. seagate · blackarmor nas 110 firmware | Critical 9.8 | 51% | 1 exploit | |
| CVE-2018-7314 | SQL Injection exists in the PrayerCenter 3.0.2 component for Joomla! mlwebtechnologies · prayercenter | Critical 9.8 | 58% | 2 exploits | |
| CVE-2018-7297 | Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to obtain read/write access and execute system commands on the device. eq-3 · homematic central control unit ccu2 firmware | Critical 9.8 | 64% | 1 exploit | |
| CVE-2018-7286 | res_pjsip allows remote authenticated users to crash Asterisk (segmentation fault) by sending a number of SIP INVITE messages on a TCP or TLS connection and then suddenly closing the connection. digium · asterisk | Medium 6.5 | 53% | 2 exploits | |
| CVE-2018-7284 | A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2. digium · asterisk | High 7.5 | 66% | 2 exploits | |
| CVE-2017-14535 | trixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php. netfortris · trixbox | High 8.8 | 50% | 3 exploits | |
| CVE-2017-5817 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. hp · intelligent management center | Critical 9.8 | 83% | 5 exploits | |
| CVE-2017-5816 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. hp · intelligent management center | Critical 9.8 | 86% | 5 exploits | |
| CVE-2017-12557 | A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and earlier was found. hp · intelligent management center | Critical 9.8 | 80% | 3 exploits | |
| CVE-2017-12542 | A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found. hp · integrated lights-out 4 firmware | Critical 10.0 | 99% | 2 exploits | |
| CVE-2018-0840 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to… microsoft · edge | High 7.5 | 53% | 2 exploits | |
| CVE-2018-6892 | An unauthenticated remote attacker that can connect to the "CloudMe Sync" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition. cloudme · sync | Critical 9.8 | 93% | 9 exploits | |
| CVE-2018-1000049 | Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner API. nanopool · claymore dual miner | High 7.5 | 77% | 3 exploits | |
| CVE-2018-6389 | In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registered .js files (from wp-includes/script-loader.php) to construct a series of requests to load every file many times. wordpress · wordpress | High 7.5 | 73% | 3 exploits | |
| CVE-2018-6605 | SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! zh baidumap project · zh baidumap | Critical 9.8 | 58% | 2 exploits |
Showing 901–950 of 2,494
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.