Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Emerging

Emerging Threats, Before They Hit KEV.

Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.

Synced hourly · figures as of Oct 20, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
1,192 vulnerabilities · highest exploit probability first
  • CVE-2009-0545Critical 10.0
    cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action.
    zeroshell · zeroshell
    EPSS90%
    1 exploit
    Published Feb 12, 2009
  • CVE-2009-0075Critical 9.3
    Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to CFunctionPointer and the appending of document objects, aka "Uninitialized…
    microsoft · internet explorer
    EPSS85%
    3 exploits
    Published Feb 10, 2009
  • CVE-2009-0476Critical 9.3
    Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedia Soft audio components for .NET, allows remote attackers to execute arbitrary code via a long string in a playlist (.pls) file, as originally reported for…
    multimediasoft · audio dj studio for .net
    EPSS37%
    7 exploits
    Published Feb 8, 2009
  • CVE-2009-0184Critical 9.3
    Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allow remote attackers to execute arbitrary code via (1) a long file name within a torrent file, (2) a long tracker URL in a torrent file, or (3) a long…
    free download manager · free download manager
    EPSS28%
    3 exploits
    Published Feb 3, 2009
  • CVE-2009-0183Critical 10.0
    Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute arbitrary code via a long Authorization header in an HTTP request.
    free download manager · free download manager
    EPSS67%
    2 exploits
    Published Feb 3, 2009
  • CVE-2009-0323Critical 10.0
    Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrary code via (1) a long type parameter in an input tag, which is not properly handled by the EndOfXmlAttributeValue function; (2) an "HTML GI" in a start tag,…
    w3 · amaya
    EPSS62%
    2 exploits
    Published Jan 28, 2009
  • CVE-2008-4388Critical 9.3
    The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods.
    symantec · appstream client
    EPSS38%
    2 exploits
    Published Jan 20, 2009
  • CVE-2009-0133Critical 10.0
    Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Index file" field, possibly a related issue to CVE-2006-0564.
    microsoft · html help workshop
    EPSS67%
    7 exploits
    Published Jan 15, 2009
  • CVE-2008-5457Critical 10.0
    Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via…
    oracle · bea product suite
    EPSS61%
    3 exploits
    Published Jan 14, 2009
  • CVE-2008-5444Critical 10.0
    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5448 and CVE-2008-5449.
    oracle · secure backup
    EPSS61%
    2 exploits
    Published Jan 13, 2009
  • CVE-2009-0043Critical 10.0
    The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors.
    ca · service level management
    EPSS53%
    1 exploit
    Published Jan 8, 2009
  • CVE-2008-0067Critical 10.0
    Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program,…
    hp · openview network node manager
    EPSS63%
    2 exploits
    Published Jan 8, 2009
  • CVE-2008-5711Critical 9.3
    Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value.
    facebook · photouploader
    EPSS33%
    3 exploits
    Published Dec 24, 2008
  • CVE-2008-5664Critical 9.3
    Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows remote attackers to execute arbitrary code via a crafted playlist (PLA) file.
    realtek · realtek media player
    EPSS36%
    2 exploits
    Published Dec 18, 2008
  • CVE-2008-5499Critical 9.3
    flash-plugin: Linux-specific code execution flaw via crafted SWF file
    adobe · flash player for linux
    EPSS79%
    2 exploits
    Published Dec 17, 2008
  • CVE-2008-5492Critical 9.3
    Heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OCX Control allows remote attackers to execute arbitrary code via a long first argument to the OpenPDF method.
    verypdf · verydoc pdf viewer
    EPSS35%
    3 exploits
    Published Dec 12, 2008
  • CVE-2008-4844Critical 9.3
    Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via DSO bindings involving (1) an XML Island, (2) XML DSOs, or (3) Tabular…
    microsoft · internet explorer
    EPSS67%
    2 exploits
    Published Dec 11, 2008
  • CVE-2008-5416Critical 9.0
    Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 Desktop Engine (WMSDE) on Windows Server 2003 SP1 and SP2; and Windows Internal…
    microsoft · sql server
    EPSS87%
    4 exploits
    Published Dec 10, 2008
  • CVE-2008-4255Critical 9.3
    Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, and Office Project 2003 SP3 and 2007 Gold…
    microsoft · project
    EPSS54%
    1 exploit
    Published Dec 10, 2008
  • CVE-2008-5405Critical 9.3
    Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier, allows remote attackers to execute arbitrary code via an RDP file containing a long string.
    oxid · cain and abel
    EPSS47%
    3 exploits
    Published Dec 10, 2008
  • CVE-2008-5353Critical 10.0
    OpenJDK calendar object deserialization allows privilege escalation (6734167)
    sun · jdk
    EPSS86%
    5 exploits
    Published Dec 4, 2008
  • CVE-2008-5159Critical 10.0
    Integer overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to cause a denial of service (crash) via a large string length argument, which triggers memory corruption.
    clientsoftware · wincome mpd total
    EPSS60%
    3 exploits
    Published Nov 18, 2008
  • CVE-2008-5053Critical 10.0
    PHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader (com_rssreader) 1.0 component for Joomla!
    joomla · com rssreader
    EPSS64%
    1 exploit
    Published Nov 13, 2008
  • CVE-2008-4037Critical 9.3
    Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka…
    microsoft · windows 2000
    EPSS59%
    3 exploits
    Published Nov 12, 2008
  • CVE-2008-5036Critical 9.3
    Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText (rt) subtitle file, related to the ParseRealText function in modules/demux/subtitle.c.
    videolan · vlc media player
    EPSS41%
    3 exploits
    Published Nov 10, 2008
  • CVE-2008-5002Critical 9.3
    Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilkat Crypt ActiveX Component allows remote attackers to create and overwrite arbitrary files via the WriteFile method.
    chilkat software · chilkat crypt activex control
    EPSS41%
    2 exploits
    Published Nov 10, 2008
  • CVE-2008-4922Critical 9.3
    Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll) allows remote attackers to execute arbitrary code via a long (1) ImageURL property, and possibly the (2) Mode, (3) Page, or (4) Zoom properties.
    djvu · activex control for microsoft office 2000
    EPSS33%
    2 exploits
    Published Nov 4, 2008
  • CVE-2008-4779Critical 10.0
    Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash) or execute arbitrary code via a long filename in a .zip file.
    tguzip · tguzip
    EPSS65%
    3 exploits
    Published Oct 29, 2008
  • CVE-2008-4687Critical 9.0
    mantis: code execution by registered users via sort parameter to manage_proj_page.php
    mantis · mantis
    EPSS67%
    3 exploits
    Published Oct 22, 2008
  • CVE-2008-4654Critical 9.3
    Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value.
    videolan · vlc media player
    EPSS58%
    4 exploits
    Published Oct 22, 2008
  • CVE-2008-4556Critical 10.0
    Stack-based buffer overflow in the adm_build_path function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted request.
    sun · solaris
    EPSS70%
    3 exploits
    Published Oct 14, 2008
  • CVE-2008-4008Critical 10.0
    Unspecified vulnerability in the WebLogic Server Plugins for Apache component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, and 6.1 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
    oracle · bea product suite
    EPSS56%
    2 exploits
    Published Oct 14, 2008
  • CVE-2008-4397Critical 10.0
    Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a ..
    broadcom · arcserve backup
    EPSS81%
    2 exploits
    Published Oct 14, 2008
  • CVE-2008-4385Critical 9.3
    Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of arbitrary programs via by specifiying a malicious website argument to the Init method in (1) a certain ActiveX control (sysreqlab2.cab,…
    systemrequirementslab · system requirements lab
    EPSS38%
    2 exploits
    Published Oct 14, 2008
  • CVE-2008-4384Critical 9.3
    Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods.
    iseemedia · lpviewer
    EPSS29%
    2 exploits
    Published Oct 7, 2008
  • CVE-2008-4449Critical 9.3
    Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIVMSG message.
    mirc · mirc
    EPSS39%
    2 exploits
    Published Oct 6, 2008
  • CVE-2008-4322Critical 10.0
    Stack-based buffer overflow in RealFlex Technologies Ltd.
    realflex technologies ltd · realwin server
    EPSS65%
    2 exploits
    Published Sep 29, 2008
  • CVE-2008-4193Critical 10.0
    Stack-based buffer overflow in SecurityGateway.dll in Alt-N Technologies SecurityGateway 1.0.1 allows remote attackers to execute arbitrary code via a long username parameter.
    alt-n · securitygateway
    EPSS75%
    2 exploits
    Published Sep 24, 2008
  • CVE-2008-3013Critical 9.3
    gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital…
    microsoft · digital image suite
    EPSS52%
    1 exploit
    Published Sep 10, 2008
  • CVE-2008-3008Critical 9.3
    Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote attackers to execute arbitrary code via a long first argument to the GetDetailsString method, aka "Windows Media Encoder Buffer Overrun…
    microsoft · windows media encoder
    EPSS56%
    2 exploits
    Published Sep 10, 2008
  • CVE-2007-5348Critical 9.3
    Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8,…
    microsoft · digital image suite
    EPSS53%
    1 exploit
    Published Sep 10, 2008
  • CVE-2008-3922Critical 9.3
    awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences in the sort parameter, which is used by the multisort function when dynamically creating an anonymous PHP function.
    telartis bv · awstats totals
    EPSS53%
    2 exploits
    Published Sep 4, 2008
  • CVE-2008-3878Critical 9.3
    Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the HttpUpload method.
    ultrashareware · ultra office control
    EPSS36%
    2 exploits
    Published Sep 2, 2008
  • CVE-2007-1682Critical 9.3
    Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute arbitrary code via unspecified calls to the (1) BuildPath, (2) GetDriveName, (3) DriveExists, or (4) DeleteFile method.
    softartisans · xfile
    EPSS30%
    2 exploits
    Published Aug 27, 2008
  • CVE-2008-3704Critical 9.3
    Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows…
    microsoft · visual basic
    EPSS56%
    2 exploits
    Published Aug 18, 2008
  • CVE-2008-3558Critical 9.3
    Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before 20.2008.2606.4919 allows remote attackers to execute arbitrary code via a long argument to the NewObject method.
    cisco · webex meeting manager
    EPSS65%
    2 exploits
    Published Aug 8, 2008
  • CVE-2008-3257Critical 10.0
    Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP…
    bea systems · weblogic server
    EPSS84%
    2 exploits
    Published Jul 22, 2008
  • CVE-2008-2908Critical 9.3
    Multiple stack-based buffer overflows in a certain ActiveX control in ienipp.ocx in Novell iPrint Client for Windows before 4.36 allow remote attackers to execute arbitrary code via a long value of the (1) operation, (2) printer-url, or (3) target-frame parameter.
    novell · iprint client
    EPSS35%
    2 exploits
    Published Jun 30, 2008
  • CVE-2008-2703Critical 10.0
    Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow remote attackers to execute arbitrary code via "spoofed server responses" that contain a long string after the NM_A_SZ_TRANSACTION_ID field name.
    novell · groupwise messenger
    EPSS61%
    3 exploits
    Published Jun 13, 2008
  • CVE-2008-2683Critical 9.3
    The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to force the download and storage of arbitrary files by specifying the origin URL in the first argument to the DownloadImageFileURL method, and the local filename in…
    black ice · barcode sdk
    EPSS35%
    3 exploits
    Published Jun 12, 2008
Showing 951–1,000 of 1,192

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.

Figures as of Oct 20, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.