Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Emerging

Emerging Threats, Before They Hit KEV.

Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.

Synced hourly · figures as of Oct 20, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
1,192 vulnerabilities · highest exploit probability first
  • CVE-2009-3867Critical 9.3
    java-1.6.0-sun: Stack-based buffer overflow via a long file: URL argument (6854303)
    sun · jdk
    EPSS73%
    4 exploits
    Published Nov 3, 2009
  • CVE-2009-3869Critical 9.3
    OpenJDK JRE AWT setDifflCM stack overflow (6872357)
    sun · jdk
    EPSS65%
    2 exploits
    Published Nov 3, 2009
  • CVE-2009-3837Critical 9.3
    Stack-based buffer overflow in Eureka Email 2.2q allows remote POP3 servers to execute arbitrary code via a long error message.
    eureka-email · eureka email
    EPSS32%
    4 exploits
    Published Nov 2, 2009
  • CVE-2009-1979Critical 10.0
    Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
    oracle · database server
    EPSS76%
    3 exploits
    Published Oct 22, 2009
  • CVE-2009-3711Critical 10.0
    Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.
    jasper · httpdx
    EPSS64%
    3 exploits
    Published Oct 16, 2009
  • CVE-2009-3699Critical 10.0
    Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR string in the first argument to procedure 21 of rpc.cmsd.
    ibm · vios
    EPSS62%
    2 exploits
    Published Oct 15, 2009
  • CVE-2009-2532Critical 10.0
    Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process the command value in an SMB Multi-Protocol Negotiate Request packet, which allows remote attackers to execute arbitrary code via a crafted SMBv2 packet to the…
    microsoft · windows server 2008
    EPSS62%
    2 exploits
    Published Oct 14, 2009
  • CVE-2009-3693Critical 9.3
    Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows remote attackers to create arbitrary files via \..
    hp · loadrunner
    EPSS42%
    3 exploits
    Published Oct 13, 2009
  • CVE-2009-2990Critical 9.3
    acroread: Multiple arbitrary code execution fixes in 8.1.7 (APSB09-15)
    adobe · acrobat
    EPSS69%
    3 exploits
    Published Oct 13, 2009
  • CVE-2009-3429Critical 9.3
    Stack-based buffer overflow in Pirate Radio Destiny Media Player 1.61 allows remote attackers to execute arbitrary code via a long string in a .pls playlist file.
    pirateradio · destiny media player
    EPSS35%
    7 exploits
    Published Sep 25, 2009
  • CVE-2009-3214Critical 9.3
    Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code via a crafted Slideshow project (.psh) file, related to the (1) cell[n].images[m].image and (2) cell[n].sound.file fields.
    photodex · proshow gold
    EPSS31%
    4 exploits
    Published Sep 16, 2009
  • CVE-2008-7232Critical 10.0
    Buffer overflow in the report function in xtacacsd 4.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted CONNECT TACACS command.
    netplex-tech · xtacacsd
    EPSS25%
    2 exploits
    Published Sep 14, 2009
  • CVE-2009-3103Critical 10.0
    Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an & (ampersand)…
    microsoft · windows server 2008
    EPSS92%
    7 exploits
    Published Sep 8, 2009
  • CVE-2009-3068Critical 9.3
    Unrestricted file upload vulnerability in the RoboHelpServer Servlet (robohelp/server) in Adobe RoboHelp Server 8 allows remote attackers to execute arbitrary code by uploading a Java Archive (.jsp) file during a PUBLISH action, then accessing it via a direct request to the file…
    adobe · robohelp server
    EPSS78%
    3 exploits
    Published Sep 4, 2009
  • CVE-2009-3023Critical 9.0
    Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbitrary code via a crafted NLST (NAME LIST) command that uses wildcards, leading to memory corruption, aka "IIS FTP Service RCE and…
    microsoft · internet information server
    EPSS91%
    6 exploits
    Published Aug 31, 2009
  • CVE-2009-1534Critical 9.3
    Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and Visual Studio .NET 2003 SP1 allows remote attackers to execute arbitrary code via crafted property…
    microsoft · office
    EPSS52%
    2 exploits
    Published Aug 12, 2009
  • CVE-2009-2727Critical 9.3
    Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0 through 6.1.3, when the rpc.ttdbserver daemon is enabled in /etc/inetd.conf, allows remote attackers to execute arbitrary…
    ibm · aix
    EPSS27%
    2 exploits
    Published Aug 10, 2009
  • CVE-2008-6898Critical 9.3
    Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long argument to the Get method and other unspecified methods.
    saschart · sascam webcam server
    EPSS32%
    3 exploits
    Published Aug 5, 2009
  • CVE-2009-2650Critical 9.3
    Heap-based buffer overflow in Sorcerer Software MultiMedia Jukebox 4.0 Build 020124 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted (1) .m3u or possibly (2) .pst file.
    sorcerersoftware · multimedia jukebox
    EPSS31%
    4 exploits
    Published Jul 30, 2009
  • CVE-2009-2566Critical 9.3
    Stack-based buffer overflow in TFM MMPlayer 2.0, and possibly 2.0.0.30, allows remote attackers to execute arbitrary code via a long string in a playlist (.m3u) file.
    tfm · mmplayer
    EPSS31%
    2 exploits
    Published Jul 21, 2009
  • CVE-2009-2484Critical 9.3
    Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long…
    videolan · vlc media player
    EPSS35%
    3 exploits
    Published Jul 16, 2009
  • CVE-2009-2485Critical 9.3
    Stack-based buffer overflow in HT-MP3Player 1.0 allows remote attackers to execute arbitrary code via a long string in a .ht3 file.
    tingan · ht-mp3player
    EPSS58%
    4 exploits
    Published Jul 16, 2009
  • CVE-2009-1136Critical 9.3
    The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet…
    microsoft · isa server
    EPSS62%
    3 exploits
    Published Jul 15, 2009
  • CVE-2009-1978Critical 9.0
    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
    oracle · secure backup
    EPSS65%
    1 exploit
    Published Jul 14, 2009
  • CVE-2009-1977Critical 10.0
    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
    oracle · secure backup
    EPSS73%
    1 exploit
    Published Jul 14, 2009
  • CVE-2009-2477Critical 9.3
    firefox 3.5 various flaws
    mozilla · firefox
    EPSS43%
    5 exploits
    Published Jul 14, 2009
  • CVE-2009-2261Critical 9.3
    PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .zip archive with a .txt file whose name contains | (pipe) characters and a command.
    giorgio tani · peazip
    EPSS41%
    3 exploits
    Published Jun 30, 2009
  • CVE-2009-2227Critical 10.0
    Stack-based buffer overflow in B Labs Bopup Communication Server 3.2.26.5460 allows remote attackers to execute arbitrary code via a crafted request to TCP port 19810.
    blabsoft · bopup communication server
    EPSS69%
    4 exploits
    Published Jun 26, 2009
  • CVE-2009-1394Critical 9.3
    Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote attackers to execute arbitrary code by sending a long malformed string over the PlughNTCommand named pipe.
    motorola · timbuktu pro
    EPSS33%
    2 exploits
    Published Jun 26, 2009
  • CVE-2009-2011Critical 9.3
    Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a plug-in for Firefox, does not restrict access to the shell.execute JavaScript API method, which allows remote attackers to execute arbitrary commands via a…
    dxstudio · dx studio player
    EPSS40%
    2 exploits
    Published Jun 16, 2009
  • CVE-2009-1943Critical 10.0
    Stack-based buffer overflow in the IKE service (ireIke.exe) in SafeNet SoftRemote before 10.8.6 allows remote attackers to execute arbitrary code via a long request to UDP port 62514.
    safenet-inc · softremote
    EPSS72%
    2 exploits
    Published Jun 5, 2009
  • CVE-2009-0950Critical 9.3
    Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an itms: URL with a long URL component after a colon.
    apple · itunes
    EPSS29%
    3 exploits
    Published Jun 2, 2009
  • CVE-2009-1831Critical 9.3
    The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow.
    nullsoft · winamp
    EPSS36%
    2 exploits
    Published May 29, 2009
  • CVE-2009-1730Critical 10.0
    Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read or modify arbitrary files via directory traversal sequences in the (1) GET or (2) PUT command.
    netmechanica · netdecision tftp server
    EPSS55%
    2 exploits
    Published May 20, 2009
  • CVE-2009-1641Critical 9.3
    Multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file.
    mini-stream · ripper
    EPSS31%
    1 exploit
    Published May 15, 2009
  • CVE-2009-1612Critical 9.3
    Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009.
    baofeng · storm
    EPSS33%
    2 exploits
    Published May 11, 2009
  • CVE-2008-4828Critical 10.0
    Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, and 5.4.0.0 through 5.4.1.96, and the TSM Express client 5.3.3.0 through…
    ibm · tivoli storage manager client
    EPSS71%
    2 exploits
    Published May 5, 2009
  • CVE-2009-1430Critical 9.3
    Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV)…
    symantec · antivirus
    EPSS55%
    2 exploits
    Published Apr 29, 2009
  • CVE-2009-1429Critical 10.0
    The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1…
    symantec · antivirus
    EPSS88%
    3 exploits
    Published Apr 29, 2009
  • CVE-2009-1350Critical 10.0
    Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute arbitrary code by establishing an IPC$ connection to the XTIERRPCPIPE named pipe, and sending RPC messages that trigger a dereference of an arbitrary pointer.
    novell · netidentity client1.2.3
    EPSS66%
    2 exploits
    Published Apr 21, 2009
  • CVE-2008-4830Critical 9.3
    Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 Patch 5 (KWEDIT.DLL 7100.1.1.43) allows remote attackers to (1) overwrite arbitrary files via the SaveDocumentAs method or (2) read or execute arbitrary files…
    sap · sap gui
    EPSS28%
    2 exploits
    Published Apr 16, 2009
  • CVE-2007-2238Critical 9.3
    Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft Intelligent Application Gateway (IAG) before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the (1) CheckForUpdates or (2)…
    microsoft · intelligent application gateway 2007
    EPSS46%
    2 exploits
    Published Apr 16, 2009
  • CVE-2009-1260Critical 9.3
    Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted (1) CCD or (2) IMG file.
    ezbsystems · ultraiso
    EPSS43%
    2 exploits
    Published Apr 7, 2009
  • CVE-2007-4475Critical 9.3
    Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute arbitrary code via a long argument to the SaveViewToSessionFile method.
    sap · sapgui
    EPSS40%
    3 exploits
    Published Apr 1, 2009
  • CVE-2009-0215Critical 9.3
    Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors.
    ibm · access support activex control
    EPSS36%
    2 exploits
    Published Mar 25, 2009
  • CVE-2009-1029Critical 9.3
    Stack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to execute arbitrary code via a long Date header, related to Imap.dll.
    poppeeper · pop peeper
    EPSS32%
    4 exploits
    Published Mar 19, 2009
  • CVE-2009-1028Critical 9.3
    Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file.
    edisys · ezip wizard
    EPSS33%
    3 exploits
    Published Mar 19, 2009
  • CVE-2009-0837Critical 10.0
    Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary code via a long (1) relative path or (2) absolute path in the filename argument in an action, as demonstrated by the "Open/Execute a file"…
    foxit · reader3.0
    EPSS76%
    3 exploits
    Published Mar 10, 2009
  • CVE-2009-0187Critical 9.3
    Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote attackers to execute arbitrary code via a crafted HTTP URL with a long host name, which is not properly handled when constructing a "Connecting" log message.
    orbitdownloader · orbit downloader
    EPSS40%
    3 exploits
    Published Feb 26, 2009
  • CVE-2009-0546Critical 9.3
    Stack-based buffer overflow in NewsGator FeedDemon 2.7 and earlier allows user-assisted remote attackers to execute arbitrary code via a long text attribute in an outline element in a .opml file.
    newsgator · feeddemon
    EPSS37%
    3 exploits
    Published Feb 12, 2009
Showing 901–950 of 1,192

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.

Figures as of Oct 20, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.