Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 19, 2026
2,494 vulnerabilities · highest exploit probability first
- CVE-2018-0101Critical 10.0A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code.cisco · firepower threat defenseEPSS87%2 exploitsPublished Jan 29, 2018
- CVE-2017-13696Critical 9.8A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze Enterprise 9.9.16, and Disk Pulse Enterprise 9.9.16 where an attacker can craft a malicious GET request and exploit the web server component.flexense · diskpulseEPSS79%7 exploitsPublished Jan 24, 2018
- CVE-2017-2741Critical 9.8A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D.hp · d3q15a firmwareEPSS85%3 exploitsPublished Jan 23, 2018
- CVE-2018-1000006High 8.8Remote Code Execution in electronatom · electronEPSS84%2 exploitsPublished Jan 23, 2018
- CVE-2017-18048High 8.8Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php (lowercase) is blocked but .PHP (uppercase) is not.monstra · monstraEPSS63%2 exploitsPublished Jan 23, 2018
- CVE-2018-6000Critical 9.8The do_vpnupload_post function in router/httpd/web.c in vpnupload.cgi provides functionality for setting NVRAM configuration values, which allows attackers to set the admin password and launch an SSH daemon (or enable infosvr command mode), and consequently obtain remote…asus · asuswrtEPSS85%5 exploitsPublished Jan 22, 2018
- CVE-2018-5999Critical 9.8In the handle_request function in router/httpd/httpd.c, processing of POST requests continues even if authentication fails.asus · asuswrtEPSS88%5 exploitsPublished Jan 22, 2018
- CVE-2016-10709High 8.8pfSense before 2.3 allows remote authenticated users to execute arbitrary OS commands via a '|' character in the status_rrd_graph_img.php graph parameter, related to _rrd_graph_img.php.pfsense · pfsenseEPSS34%3 exploitsPublished Jan 22, 2018
- CVE-2018-5955Critical 9.8User controlled input is not sufficiently filtered, allowing an unauthenticated attacker to add a user to the server via the username and password fields to the rest/user/ URI.smartmobilesoftware · gitstackEPSS81%4 exploitsPublished Jan 21, 2018
- CVE-2017-12635Critical 9.8couchdb - security updateapache · couchdbEPSS100%3 exploitsPublished Jan 21, 2018
- CVE-2017-12636High 7.2couchdb - security updateapache · couchdbEPSS91%3 exploitsPublished Jan 21, 2018
- CVE-2017-18044Critical 9.8A Command Injection issue was discovered in ContentStore/Base/CVDataPipe.dll in Commvault before v11 SP6.commvault · commvaultEPSS70%2 exploitsPublished Jan 19, 2018
- CVE-2018-5347Critical 9.8Seagate Media Server in Seagate Personal Cloud has unauthenticated command injection in the uploadTelemetry and getLogs functions in views.py because .psp URLs are handled by the fastcgi.server component and shell metacharacters are mishandled.seagate · personal cloud firmwareEPSS54%2 exploitsPublished Jan 11, 2018
- CVE-2017-16666High 8.8Xplico before 1.2.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the name of an uploaded PCAP file.xplico · xplicoEPSS81%4 exploitsPublished Jan 5, 2018
- CVE-2017-16720Critical 9.8A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier.advantech · webaccessEPSS50%2 exploitsPublished Jan 5, 2018
- CVE-2014-7862Critical 9.8The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action.zohocorp · desktop centralEPSS81%1 exploitPublished Jan 4, 2018
- CVE-2017-5715Medium 5.6Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.EPSS74%3 exploitsPublished Jan 4, 2018
- CVE-2018-0780Medium 5.3Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure…microsoft · edgeEPSS59%2 exploitsPublished Jan 4, 2018
- CVE-2018-0777High 7.5Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS78%2 exploitsPublished Jan 4, 2018
- CVE-2018-0776High 7.5Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS78%2 exploitsPublished Jan 4, 2018
- CVE-2018-0775High 7.5Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS68%2 exploitsPublished Jan 4, 2018
- CVE-2018-0774High 7.5Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS68%2 exploitsPublished Jan 4, 2018
- CVE-2018-0770High 7.5Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS78%2 exploitsPublished Jan 4, 2018
- CVE-2018-0769High 7.5Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS79%2 exploitsPublished Jan 4, 2018
- CVE-2018-0767Medium 5.3Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure…microsoft · edgeEPSS65%1 exploitPublished Jan 4, 2018
- CVE-2018-0758High 7.5Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS81%2 exploitsPublished Jan 4, 2018
- CVE-2017-5753Medium 5.6Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.EPSS94%Ransomware3 exploits1 actorPublished Jan 4, 2018
- CVE-2017-1000479High 8.8pfSense versions 2.4.1 and lower are vulnerable to clickjacking attacks in the CSRF error page resulting in privileged execution of arbitrary code, because the error detection occurs before an X-Frame-Options header is set.netgate · pfsenseEPSS32%1 exploitPublished Jan 3, 2018
- CVE-2018-3810High 7.2Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to insert arbitrary JavaScript or HTML code (via the sgcgoogleanalytic parameter) that runs on all pages served by WordPress.oturia · smart google code inserterEPSS91%2 exploitsPublished Jan 1, 2018
- CVE-2017-17968Critical 9.8A buffer overflow vulnerability in NetTransport.exe in NetTransport Download Manager 2.96L and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long HTTP response.xi-soft · nettransport download managerEPSS39%3 exploitsPublished Dec 29, 2017
- CVE-2017-17932Critical 9.8A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow remote attackers to execute arbitrary code and/or cause denial of service on the victim machine/computer via a long string to TCP port 888.allmediaserver · allmediaserverEPSS54%7 exploitsPublished Dec 28, 2017
- CVE-2014-8389Critical 9.8cgi-bin/mft/wireless_mft.cgi in AirLive BU-2015 with firmware 1.03.18 16.06.2014, AirLive BU-3026 with firmware 1.43 21.08.2014, AirLive MD-3025 with firmware 1.81 21.08.2014, AirLive WL-2000CAM with firmware LM.1.6.18 14.10.2011, and AirLive POE-200CAM v2 with firmware…airlive · bu-2015 firmwareEPSS51%1 exploitPublished Dec 27, 2017
- CVE-2017-16995High 7.8The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension.linux · linux kernelEPSS30%4 exploitsPublished Dec 27, 2017
- CVE-2017-17692High 7.5Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that redirects to a child tab and rewrites the innerHTML property.samsung · internet browserEPSS79%4 exploitsPublished Dec 21, 2017
- CVE-2017-17411Critical 9.8This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0.linksys · wvbr0 firmwareEPSS88%6 exploitsPublished Dec 21, 2017
- CVE-2017-5255High 8.8In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console allows any authenticated user (including the otherwise low-privilege readonly user) to inject shell meta-characters as part of a…cambiumnetworks · epmp 1000 firmwareEPSS74%3 exploitsPublished Dec 20, 2017
- CVE-2012-2576Critical 9.8SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, and SolarWinds Backup Profiler before 5.1.2 allows remote attackers to execute arbitrary SQL commands via the loginName field.solarwinds · backup profilerEPSS59%4 exploitsPublished Dec 20, 2017
- CVE-2017-17105Critical 9.8Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 (and possibly in-between versions) web cameras are vulnerable to unauthenticated, blind remote command injection via CGI scripts used as part of the web interface, as demonstrated by a…zivif · pr115-204-p-rs firmwareEPSS85%2 exploitsPublished Dec 18, 2017
- CVE-2017-17405High 8.8ruby1.9.1 - security updateruby-lang · rubyEPSS74%2 exploitsPublished Dec 15, 2017
- CVE-2017-11918High 7.5ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…microsoft · chakracoreEPSS63%2 exploitsPublished Dec 12, 2017
- CVE-2017-11907High 7.5Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to…microsoft · internet explorerEPSS65%2 exploitsPublished Dec 12, 2017
- CVE-2017-11890High 7.5Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user, due to how…microsoft · internet explorerEPSS50%2 exploitsPublished Dec 12, 2017
- CVE-2017-17560Critical 9.8An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices.westerndigital · my cloud pr4100 firmwareEPSS73%3 exploitsPublished Dec 12, 2017
- CVE-2017-13156High 7.8An elevation of privilege vulnerability in the Android system (art).google · androidEPSS20%2 exploitsPublished Dec 6, 2017
- CVE-2017-15889High 8.8Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authenticated users to execute arbitrary commands via disk field.synology · diskstation managerEPSS74%2 exploitsPublished Dec 4, 2017
- CVE-2017-17090High 7.5If the chan_skinny (aka SCCP protocol) channel driver is flooded with certain requests, it can cause the asterisk process to use excessive amounts of virtual memory, eventually causing asterisk to stop processing requests of any kind.digium · asteriskEPSS82%1 exploitPublished Dec 2, 2017
- CVE-2017-13872High 8.1macOS High Sierra before Security Update 2017-001 is affected.apple · mac os xEPSS37%4 exploitsPublished Nov 29, 2017
- CVE-2017-16894High 7.5In Laravel framework through 5.5.21, remote attackers can obtain sensitive information (such as externally usable passwords) via a direct request for the /.env URI.laravel · laravelEPSS87%2 exploitsPublished Nov 20, 2017
- CVE-2017-11873High 7.5ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory…microsoft · chakracoreEPSS70%2 exploitsPublished Nov 15, 2017
- CVE-2017-11861High 7.5Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…microsoft · edgeEPSS64%2 exploitsPublished Nov 15, 2017
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-0101 | A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. cisco · firepower threat defense | Critical 10.0 | 87% | 2 exploits | |
| CVE-2017-13696 | A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze Enterprise 9.9.16, and Disk Pulse Enterprise 9.9.16 where an attacker can craft a malicious GET request and exploit the web server component. flexense · diskpulse | Critical 9.8 | 79% | 7 exploits | |
| CVE-2017-2741 | A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. hp · d3q15a firmware | Critical 9.8 | 85% | 3 exploits | |
| CVE-2018-1000006 | Remote Code Execution in electron atom · electron | High 8.8 | 84% | 2 exploits | |
| CVE-2017-18048 | Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php (lowercase) is blocked but .PHP (uppercase) is not. monstra · monstra | High 8.8 | 63% | 2 exploits | |
| CVE-2018-6000 | The do_vpnupload_post function in router/httpd/web.c in vpnupload.cgi provides functionality for setting NVRAM configuration values, which allows attackers to set the admin password and launch an SSH daemon (or enable infosvr command mode), and consequently obtain remote… asus · asuswrt | Critical 9.8 | 85% | 5 exploits | |
| CVE-2018-5999 | In the handle_request function in router/httpd/httpd.c, processing of POST requests continues even if authentication fails. asus · asuswrt | Critical 9.8 | 88% | 5 exploits | |
| CVE-2016-10709 | pfSense before 2.3 allows remote authenticated users to execute arbitrary OS commands via a '|' character in the status_rrd_graph_img.php graph parameter, related to _rrd_graph_img.php. pfsense · pfsense | High 8.8 | 34% | 3 exploits | |
| CVE-2018-5955 | User controlled input is not sufficiently filtered, allowing an unauthenticated attacker to add a user to the server via the username and password fields to the rest/user/ URI. smartmobilesoftware · gitstack | Critical 9.8 | 81% | 4 exploits | |
| CVE-2017-12635 | couchdb - security update apache · couchdb | Critical 9.8 | 100% | 3 exploits | |
| CVE-2017-12636 | couchdb - security update apache · couchdb | High 7.2 | 91% | 3 exploits | |
| CVE-2017-18044 | A Command Injection issue was discovered in ContentStore/Base/CVDataPipe.dll in Commvault before v11 SP6. commvault · commvault | Critical 9.8 | 70% | 2 exploits | |
| CVE-2018-5347 | Seagate Media Server in Seagate Personal Cloud has unauthenticated command injection in the uploadTelemetry and getLogs functions in views.py because .psp URLs are handled by the fastcgi.server component and shell metacharacters are mishandled. seagate · personal cloud firmware | Critical 9.8 | 54% | 2 exploits | |
| CVE-2017-16666 | Xplico before 1.2.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the name of an uploaded PCAP file. xplico · xplico | High 8.8 | 81% | 4 exploits | |
| CVE-2017-16720 | A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. advantech · webaccess | Critical 9.8 | 50% | 2 exploits | |
| CVE-2014-7862 | The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action. zohocorp · desktop central | Critical 9.8 | 81% | 1 exploit | |
| CVE-2017-5715 | Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. | Medium 5.6 | 74% | 3 exploits | |
| CVE-2018-0780 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure… microsoft · edge | Medium 5.3 | 59% | 2 exploits | |
| CVE-2018-0777 | Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 78% | 2 exploits | |
| CVE-2018-0776 | Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 78% | 2 exploits | |
| CVE-2018-0775 | Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 68% | 2 exploits | |
| CVE-2018-0774 | Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 68% | 2 exploits | |
| CVE-2018-0770 | Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 78% | 2 exploits | |
| CVE-2018-0769 | Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 79% | 2 exploits | |
| CVE-2018-0767 | Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure… microsoft · edge | Medium 5.3 | 65% | 1 exploit | |
| CVE-2018-0758 | Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 81% | 2 exploits | |
| CVE-2017-5753 | Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. | Medium 5.6 | 94% | Ransomware3 exploits1 actor | |
| CVE-2017-1000479 | pfSense versions 2.4.1 and lower are vulnerable to clickjacking attacks in the CSRF error page resulting in privileged execution of arbitrary code, because the error detection occurs before an X-Frame-Options header is set. netgate · pfsense | High 8.8 | 32% | 1 exploit | |
| CVE-2018-3810 | Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to insert arbitrary JavaScript or HTML code (via the sgcgoogleanalytic parameter) that runs on all pages served by WordPress. oturia · smart google code inserter | High 7.2 | 91% | 2 exploits | |
| CVE-2017-17968 | A buffer overflow vulnerability in NetTransport.exe in NetTransport Download Manager 2.96L and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long HTTP response. xi-soft · nettransport download manager | Critical 9.8 | 39% | 3 exploits | |
| CVE-2017-17932 | A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow remote attackers to execute arbitrary code and/or cause denial of service on the victim machine/computer via a long string to TCP port 888. allmediaserver · allmediaserver | Critical 9.8 | 54% | 7 exploits | |
| CVE-2014-8389 | cgi-bin/mft/wireless_mft.cgi in AirLive BU-2015 with firmware 1.03.18 16.06.2014, AirLive BU-3026 with firmware 1.43 21.08.2014, AirLive MD-3025 with firmware 1.81 21.08.2014, AirLive WL-2000CAM with firmware LM.1.6.18 14.10.2011, and AirLive POE-200CAM v2 with firmware… airlive · bu-2015 firmware | Critical 9.8 | 51% | 1 exploit | |
| CVE-2017-16995 | The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension. linux · linux kernel | High 7.8 | 30% | 4 exploits | |
| CVE-2017-17692 | Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that redirects to a child tab and rewrites the innerHTML property. samsung · internet browser | High 7.5 | 79% | 4 exploits | |
| CVE-2017-17411 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0. linksys · wvbr0 firmware | Critical 9.8 | 88% | 6 exploits | |
| CVE-2017-5255 | In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console allows any authenticated user (including the otherwise low-privilege readonly user) to inject shell meta-characters as part of a… cambiumnetworks · epmp 1000 firmware | High 8.8 | 74% | 3 exploits | |
| CVE-2012-2576 | SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, and SolarWinds Backup Profiler before 5.1.2 allows remote attackers to execute arbitrary SQL commands via the loginName field. solarwinds · backup profiler | Critical 9.8 | 59% | 4 exploits | |
| CVE-2017-17105 | Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 (and possibly in-between versions) web cameras are vulnerable to unauthenticated, blind remote command injection via CGI scripts used as part of the web interface, as demonstrated by a… zivif · pr115-204-p-rs firmware | Critical 9.8 | 85% | 2 exploits | |
| CVE-2017-17405 | ruby1.9.1 - security update ruby-lang · ruby | High 8.8 | 74% | 2 exploits | |
| CVE-2017-11918 | ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption… microsoft · chakracore | High 7.5 | 63% | 2 exploits | |
| CVE-2017-11907 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to… microsoft · internet explorer | High 7.5 | 65% | 2 exploits | |
| CVE-2017-11890 | Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user, due to how… microsoft · internet explorer | High 7.5 | 50% | 2 exploits | |
| CVE-2017-17560 | An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices. westerndigital · my cloud pr4100 firmware | Critical 9.8 | 73% | 3 exploits | |
| CVE-2017-13156 | An elevation of privilege vulnerability in the Android system (art). google · android | High 7.8 | 20% | 2 exploits | |
| CVE-2017-15889 | Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authenticated users to execute arbitrary commands via disk field. synology · diskstation manager | High 8.8 | 74% | 2 exploits | |
| CVE-2017-17090 | If the chan_skinny (aka SCCP protocol) channel driver is flooded with certain requests, it can cause the asterisk process to use excessive amounts of virtual memory, eventually causing asterisk to stop processing requests of any kind. digium · asterisk | High 7.5 | 82% | 1 exploit | |
| CVE-2017-13872 | macOS High Sierra before Security Update 2017-001 is affected. apple · mac os x | High 8.1 | 37% | 4 exploits | |
| CVE-2017-16894 | In Laravel framework through 5.5.21, remote attackers can obtain sensitive information (such as externally usable passwords) via a direct request for the /.env URI. laravel · laravel | High 7.5 | 87% | 2 exploits | |
| CVE-2017-11873 | ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory… microsoft · chakracore | High 7.5 | 70% | 2 exploits | |
| CVE-2017-11861 | Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption… microsoft · edge | High 7.5 | 64% | 2 exploits |
Showing 951–1,000 of 2,494
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.