Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 19, 2026
2,494 vulnerabilities · highest exploit probability first
- CVE-2017-11841High 7.5ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine…microsoft · chakracoreEPSS60%1 exploitPublished Nov 15, 2017
- CVE-2017-11840High 7.5ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine…microsoft · chakracoreEPSS60%1 exploitPublished Nov 15, 2017
- CVE-2017-11839High 7.5Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to take control of an affected system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…microsoft · edgeEPSS62%1 exploitPublished Nov 15, 2017
- CVE-2017-16806High 7.5The Process function in RemoteTaskServer/WebServer/HttpServer.cs in Ulterius before 1.9.5.0 allows HTTP server directory traversal.ulterius · ulterius serverEPSS91%1 exploitPublished Nov 13, 2017
- CVE-2017-16249High 7.5The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the server to hang until eventually replying (~300 seconds) with an HTTP 500 error.brother · dcp-j132w firmwareEPSS59%3 exploitsPublished Nov 9, 2017
- CVE-2017-16524High 8.8Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_upload.php' allows remote authenticated attackers to upload and execute arbitrary PHP code via a filename with a .php extension, which is then accessed via a…hanwhasecurity · web viewerEPSS30%4 exploitsPublished Nov 6, 2017
- CVE-2017-12243High 7.8A vulnerability in the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to obtain root shell privileges on the device, aka Command…cisco · firepower 4100 next-generation firewall firmwareEPSS77%1 exploitPublished Nov 2, 2017
- CVE-2017-7411High 8.8The vulnerability exists because the User::getRecentElements() method is using the unserialize() function with a preference value that can be arbitrarily manipulated by malicious users through the REST API interface, and this can be exploited to inject arbitrary PHP objects into…enalean · tuleapEPSS67%2 exploitsPublished Oct 30, 2017
- CVE-2012-5357Critical 9.8Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true, which allows remote attackers to execute arbitrary code with NETWORK SERVICE privileges via crafted XSL data.ektron · ektron content management systemEPSS68%2 exploitsPublished Oct 30, 2017
- CVE-2013-0156High 7.5actionpack Improper Input Validation vulnerabilityrubyonrails · railsEPSS99%6 exploitsPublished Oct 24, 2017
- CVE-2013-0333High 7.5activesupport in Rails vulnerable to incorrect data conversionrubyonrails · railsEPSS96%2 exploitsPublished Oct 24, 2017
- CVE-2014-7205Critical 10.0Arbitrary JavaScript Execution in bassmasterbassmaster project · bassmasterEPSS79%1 exploitPublished Oct 24, 2017
- CVE-2015-3224Medium 4.3Web Console (Ruby gem) contains whitelisted_ips bypassrubyonrails · web consoleEPSS45%2 exploitsPublished Oct 24, 2017
- CVE-2016-2098High 7.3actionpack allows remote code execution via application's unrestricted use of render methodrubyonrails · railsEPSS81%1 exploitPublished Oct 24, 2017
- CVE-2017-15222Critical 9.8Buffer Overflow vulnerability in Ayukov NFTPD 2.0 and earlier allows remote attackers to execute arbitrary code.nftp project · nftpEPSS60%7 exploitsPublished Oct 24, 2017
- CVE-2017-13772High 8.8Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arbitrary code via the (1) ping_addr parameter to PingIframeRpm.htm or (2) dnsserver2 parameter to WanStaticIpV6CfgRpm.htm.tp-link · wr940n firmwareEPSS51%2 exploitsPublished Oct 23, 2017
- CVE-2014-9118High 8.8The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddr parameter to zhnping.cmd.dasanzhone · znid 2426a firmwareEPSS53%3 exploitsPublished Oct 17, 2017
- CVE-2017-11811High 7.5ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory…microsoft · chakracoreEPSS65%2 exploitsPublished Oct 13, 2017
- CVE-2017-11810High 7.5Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current…microsoft · internet explorerEPSS55%2 exploitsPublished Oct 13, 2017
- CVE-2017-11809High 7.5ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory…microsoft · chakracoreEPSS68%1 exploitPublished Oct 13, 2017
- CVE-2017-11802High 7.5ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory…microsoft · chakracoreEPSS69%1 exploitPublished Oct 13, 2017
- CVE-2017-11799High 7.5ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory…microsoft · chakracoreEPSS64%1 exploitPublished Oct 13, 2017
- CVE-2017-14980Critical 9.8Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login.flexense · syncbreezeEPSS22%2 exploitsPublished Oct 9, 2017
- CVE-2017-1000117High 8.8A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed.git-scm · gitEPSS78%2 exploitsPublished Oct 5, 2017
- CVE-2017-1000112High 7.0Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch.linux · linux kernelEPSS21%4 exploitsPublished Oct 5, 2017
- CVE-2017-14491Critical 9.8Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.thekelleys · dnsmasqEPSS85%3 exploitsPublished Oct 4, 2017
- CVE-2017-14496High 7.5Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request.thekelleys · dnsmasqEPSS66%1 exploitPublished Oct 3, 2017
- CVE-2017-14495High 7.5Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation.thekelleys · dnsmasqEPSS84%1 exploitPublished Oct 3, 2017
- CVE-2017-14494Medium 5.9dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.thekelleys · dnsmasqEPSS68%1 exploitPublished Oct 3, 2017
- CVE-2017-14493Critical 9.8Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request.thekelleys · dnsmasqEPSS84%2 exploitsPublished Oct 3, 2017
- CVE-2017-14492Critical 9.8Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.thekelleys · dnsmasqEPSS93%1 exploitPublished Oct 3, 2017
- CVE-2017-6090High 8.8Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logos_clients/.phpcollab · phpcollabEPSS96%5 exploitsPublished Oct 2, 2017
- CVE-2017-14942Critical 9.8Intelbras WRN 150 devices allow remote attackers to read the configuration file, and consequently bypass authentication, via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg containing an admin:language=pt cookie.intelbras · wrn 150 firmwareEPSS61%1 exploitPublished Sep 29, 2017
- CVE-2015-8249Critical 9.8The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows remote attackers to upload and execute arbitrary files via the ConnectionId parameter.manageengine · desktop centralEPSS74%4 exploitsPublished Sep 27, 2017
- CVE-2017-14706Critical 9.8DenyAll WAF before 6.4.1 allows unauthenticated remote attackers to obtain authentication information by making a typeOf=debug request to /webservices/download/index.php, and then reading the iToken field in the reply.denyall · i-suiteEPSS28%2 exploitsPublished Sep 22, 2017
- CVE-2015-4074High 7.5Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla!helpdesk pro project · helpdesk proEPSS57%3 exploitsPublished Sep 20, 2017
- CVE-2014-8686Critical 9.8CodeIgniter before 2.2.0 makes it easier for attackers to decode session cookies by leveraging fallback to a custom XOR-based encryption scheme when the Mcrypt extension for PHP is not available.codeigniter · codeigniterEPSS37%2 exploitsPublished Sep 19, 2017
- CVE-2017-14143Critical 9.8The getUserzoneCookie function in Kaltura before 13.2.0 uses a hardcoded cookie secret to validate cookie signatures, which allows remote attackers to bypass an intended protection mechanism and consequently conduct PHP object injection attacks and execute arbitrary PHP code via…kaltura · kaltura serverEPSS77%3 exploitsPublished Sep 19, 2017
- CVE-2014-9618Critical 9.8The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL.netsweeper · netsweeperEPSS73%1 exploitPublished Sep 19, 2017
- CVE-2017-9798High 7.5Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed.apache · http serverEPSS95%3 exploitsPublished Sep 18, 2017
- CVE-2017-8755High 7.5Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory…microsoft · edgeEPSS71%2 exploitsPublished Sep 12, 2017
- CVE-2017-8751High 7.5Microsoft Edge in Microsoft Windows 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability".microsoft · edgeEPSS50%2 exploitsPublished Sep 12, 2017
- CVE-2017-8740High 7.5Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS72%2 exploitsPublished Sep 12, 2017
- CVE-2017-8734High 7.5Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption…microsoft · edgeEPSS53%2 exploitsPublished Sep 12, 2017
- CVE-2017-8731High 7.5Microsoft Edge in Microsoft Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability".microsoft · edgeEPSS52%2 exploitsPublished Sep 12, 2017
- CVE-2017-8729High 7.5Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS72%2 exploitsPublished Sep 12, 2017
- CVE-2017-11764High 7.5Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…microsoft · edgeEPSS64%2 exploitsPublished Sep 12, 2017
- CVE-2017-14147Critical 9.8An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which could allow an attacker to easily restore a router to its factory settings by simply browsing to the link http://[Default-Router-IP]/restoreinfo.cgi & execute it.fiberhome · adsl an1020-25 firmwareEPSS66%3 exploitsPublished Sep 7, 2017
- CVE-2017-1000083High 7.8backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a…gnome · evinceEPSS51%5 exploitsPublished Sep 5, 2017
- CVE-2015-5958High 8.8phpFileManager 0.9.8 allows remote attackers to execute arbitrary commands via a crafted URL.phpfilemanager project · phpfilemanagerEPSS27%2 exploitsPublished Aug 31, 2017
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-11841 | ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine… microsoft · chakracore | High 7.5 | 60% | 1 exploit | |
| CVE-2017-11840 | ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine… microsoft · chakracore | High 7.5 | 60% | 1 exploit | |
| CVE-2017-11839 | Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to take control of an affected system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption… microsoft · edge | High 7.5 | 62% | 1 exploit | |
| CVE-2017-16806 | The Process function in RemoteTaskServer/WebServer/HttpServer.cs in Ulterius before 1.9.5.0 allows HTTP server directory traversal. ulterius · ulterius server | High 7.5 | 91% | 1 exploit | |
| CVE-2017-16249 | The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the server to hang until eventually replying (~300 seconds) with an HTTP 500 error. brother · dcp-j132w firmware | High 7.5 | 59% | 3 exploits | |
| CVE-2017-16524 | Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_upload.php' allows remote authenticated attackers to upload and execute arbitrary PHP code via a filename with a .php extension, which is then accessed via a… hanwhasecurity · web viewer | High 8.8 | 30% | 4 exploits | |
| CVE-2017-12243 | A vulnerability in the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to obtain root shell privileges on the device, aka Command… cisco · firepower 4100 next-generation firewall firmware | High 7.8 | 77% | 1 exploit | |
| CVE-2017-7411 | The vulnerability exists because the User::getRecentElements() method is using the unserialize() function with a preference value that can be arbitrarily manipulated by malicious users through the REST API interface, and this can be exploited to inject arbitrary PHP objects into… enalean · tuleap | High 8.8 | 67% | 2 exploits | |
| CVE-2012-5357 | Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true, which allows remote attackers to execute arbitrary code with NETWORK SERVICE privileges via crafted XSL data. ektron · ektron content management system | Critical 9.8 | 68% | 2 exploits | |
| CVE-2013-0156 | actionpack Improper Input Validation vulnerability rubyonrails · rails | High 7.5 | 99% | 6 exploits | |
| CVE-2013-0333 | activesupport in Rails vulnerable to incorrect data conversion rubyonrails · rails | High 7.5 | 96% | 2 exploits | |
| CVE-2014-7205 | Arbitrary JavaScript Execution in bassmaster bassmaster project · bassmaster | Critical 10.0 | 79% | 1 exploit | |
| CVE-2015-3224 | Web Console (Ruby gem) contains whitelisted_ips bypass rubyonrails · web console | Medium 4.3 | 45% | 2 exploits | |
| CVE-2016-2098 | actionpack allows remote code execution via application's unrestricted use of render method rubyonrails · rails | High 7.3 | 81% | 1 exploit | |
| CVE-2017-15222 | Buffer Overflow vulnerability in Ayukov NFTPD 2.0 and earlier allows remote attackers to execute arbitrary code. nftp project · nftp | Critical 9.8 | 60% | 7 exploits | |
| CVE-2017-13772 | Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arbitrary code via the (1) ping_addr parameter to PingIframeRpm.htm or (2) dnsserver2 parameter to WanStaticIpV6CfgRpm.htm. tp-link · wr940n firmware | High 8.8 | 51% | 2 exploits | |
| CVE-2014-9118 | The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddr parameter to zhnping.cmd. dasanzhone · znid 2426a firmware | High 8.8 | 53% | 3 exploits | |
| CVE-2017-11811 | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory… microsoft · chakracore | High 7.5 | 65% | 2 exploits | |
| CVE-2017-11810 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current… microsoft · internet explorer | High 7.5 | 55% | 2 exploits | |
| CVE-2017-11809 | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory… microsoft · chakracore | High 7.5 | 68% | 1 exploit | |
| CVE-2017-11802 | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory… microsoft · chakracore | High 7.5 | 69% | 1 exploit | |
| CVE-2017-11799 | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory… microsoft · chakracore | High 7.5 | 64% | 1 exploit | |
| CVE-2017-14980 | Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login. flexense · syncbreeze | Critical 9.8 | 22% | 2 exploits | |
| CVE-2017-1000117 | A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. git-scm · git | High 8.8 | 78% | 2 exploits | |
| CVE-2017-1000112 | Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. linux · linux kernel | High 7.0 | 21% | 4 exploits | |
| CVE-2017-14491 | Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response. thekelleys · dnsmasq | Critical 9.8 | 85% | 3 exploits | |
| CVE-2017-14496 | Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request. thekelleys · dnsmasq | High 7.5 | 66% | 1 exploit | |
| CVE-2017-14495 | Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation. thekelleys · dnsmasq | High 7.5 | 84% | 1 exploit | |
| CVE-2017-14494 | dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests. thekelleys · dnsmasq | Medium 5.9 | 68% | 1 exploit | |
| CVE-2017-14493 | Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request. thekelleys · dnsmasq | Critical 9.8 | 84% | 2 exploits | |
| CVE-2017-14492 | Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request. thekelleys · dnsmasq | Critical 9.8 | 93% | 1 exploit | |
| CVE-2017-6090 | Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logos_clients/. phpcollab · phpcollab | High 8.8 | 96% | 5 exploits | |
| CVE-2017-14942 | Intelbras WRN 150 devices allow remote attackers to read the configuration file, and consequently bypass authentication, via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg containing an admin:language=pt cookie. intelbras · wrn 150 firmware | Critical 9.8 | 61% | 1 exploit | |
| CVE-2015-8249 | The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows remote attackers to upload and execute arbitrary files via the ConnectionId parameter. manageengine · desktop central | Critical 9.8 | 74% | 4 exploits | |
| CVE-2017-14706 | DenyAll WAF before 6.4.1 allows unauthenticated remote attackers to obtain authentication information by making a typeOf=debug request to /webservices/download/index.php, and then reading the iToken field in the reply. denyall · i-suite | Critical 9.8 | 28% | 2 exploits | |
| CVE-2015-4074 | Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! helpdesk pro project · helpdesk pro | High 7.5 | 57% | 3 exploits | |
| CVE-2014-8686 | CodeIgniter before 2.2.0 makes it easier for attackers to decode session cookies by leveraging fallback to a custom XOR-based encryption scheme when the Mcrypt extension for PHP is not available. codeigniter · codeigniter | Critical 9.8 | 37% | 2 exploits | |
| CVE-2017-14143 | The getUserzoneCookie function in Kaltura before 13.2.0 uses a hardcoded cookie secret to validate cookie signatures, which allows remote attackers to bypass an intended protection mechanism and consequently conduct PHP object injection attacks and execute arbitrary PHP code via… kaltura · kaltura server | Critical 9.8 | 77% | 3 exploits | |
| CVE-2014-9618 | The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL. netsweeper · netsweeper | Critical 9.8 | 73% | 1 exploit | |
| CVE-2017-9798 | Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed. apache · http server | High 7.5 | 95% | 3 exploits | |
| CVE-2017-8755 | Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory… microsoft · edge | High 7.5 | 71% | 2 exploits | |
| CVE-2017-8751 | Microsoft Edge in Microsoft Windows 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 50% | 2 exploits | |
| CVE-2017-8740 | Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 72% | 2 exploits | |
| CVE-2017-8734 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption… microsoft · edge | High 7.5 | 53% | 2 exploits | |
| CVE-2017-8731 | Microsoft Edge in Microsoft Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 52% | 2 exploits | |
| CVE-2017-8729 | Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 72% | 2 exploits | |
| CVE-2017-11764 | Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption… microsoft · edge | High 7.5 | 64% | 2 exploits | |
| CVE-2017-14147 | An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which could allow an attacker to easily restore a router to its factory settings by simply browsing to the link http://[Default-Router-IP]/restoreinfo.cgi & execute it. fiberhome · adsl an1020-25 firmware | Critical 9.8 | 66% | 3 exploits | |
| CVE-2017-1000083 | backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a… gnome · evince | High 7.8 | 51% | 5 exploits | |
| CVE-2015-5958 | phpFileManager 0.9.8 allows remote attackers to execute arbitrary commands via a crafted URL. phpfilemanager project · phpfilemanager | High 8.8 | 27% | 2 exploits |
Showing 1,001–1,050 of 2,494
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.