Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
2,494 vulnerabilities · highest exploit probability first
- CVE-2014-5301High 8.8Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4.manageengine · assetexplorerEPSS78%5 exploitsPublished Aug 28, 2017
- CVE-2015-2857Critical 9.8Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metacharacters in the oauth_token parameter.accellion · file transfer applianceEPSS84%3 exploitsPublished Aug 22, 2017
- CVE-2017-8671High 7.5Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka…microsoft · edgeEPSS69%1 exploitPublished Aug 8, 2017
- CVE-2017-8670High 7.5Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting…microsoft · edgeEPSS69%1 exploitPublished Aug 8, 2017
- CVE-2017-8657High 7.5Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka…microsoft · edgeEPSS55%1 exploitPublished Aug 8, 2017
- CVE-2017-8656High 7.5Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting…microsoft · edgeEPSS69%1 exploitPublished Aug 8, 2017
- CVE-2017-8646High 7.5Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine…microsoft · edgeEPSS69%1 exploitPublished Aug 8, 2017
- CVE-2017-8645High 7.5Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine…microsoft · edgeEPSS69%1 exploitPublished Aug 8, 2017
- CVE-2017-8641High 7.5Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to…microsoft · edgeEPSS72%1 exploitPublished Aug 8, 2017
- CVE-2017-8640High 7.5Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting…microsoft · edgeEPSS69%1 exploitPublished Aug 8, 2017
- CVE-2017-8636High 7.5Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to…microsoft · edgeEPSS72%8 exploitsPublished Aug 8, 2017
- CVE-2017-8635High 7.5Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to…microsoft · edgeEPSS56%2 exploitsPublished Aug 8, 2017
- CVE-2017-8634High 7.5Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption…microsoft · edgeEPSS70%2 exploitsPublished Aug 8, 2017
- CVE-2016-7976High 8.8The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams.artifex · ghostscriptEPSS23%1 exploitPublished Aug 7, 2017
- CVE-2017-12478Critical 9.8It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of its input parameters was not validated.kaseya · unitrends backupEPSS78%6 exploitsPublished Aug 7, 2017
- CVE-2017-12477Critical 9.8It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in which its authentication can be bypassed.kaseya · unitrends backupEPSS68%4 exploitsPublished Aug 7, 2017
- CVE-2017-11394Critical 9.8Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations.trendmicro · officescanEPSS67%2 exploitsPublished Aug 3, 2017
- CVE-2017-11392High 8.8Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations.trendmicro · interscan messaging security virtual applianceEPSS34%1 exploitPublished Aug 3, 2017
- CVE-2017-11391High 8.8Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations.trendmicro · interscan messaging security virtual applianceEPSS62%1 exploitPublished Aug 3, 2017
- CVE-2017-7442High 8.8Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences.gonitro · nitro proEPSS41%2 exploitsPublished Aug 3, 2017
- CVE-2017-9769Critical 9.8A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a handle to be opened to an arbitrary process.razer · synapseEPSS86%2 exploitsPublished Aug 2, 2017
- CVE-2017-9554Medium 5.3An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers to enumerate valid usernames via unspecified vectors.synology · diskstation managerEPSS77%1 exploitPublished Jul 24, 2017
- CVE-2017-11517Critical 9.8Stack-based buffer overflow in GCoreServer.exe in the server in Geutebrueck Gcore 1.3.8.42 and 1.4.2.37 allows remote attackers to execute arbitrary code via a long URI in a GET request.geutebrueck · gcoreEPSS29%3 exploitsPublished Jul 21, 2017
- CVE-2017-1000028High 7.5Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request.oracle · glassfish serverEPSS99%5 exploitsPublished Jul 17, 2017
- CVE-2017-1000002Critical 9.8ATutor versions 2.2.1 and earlier are vulnerable to a directory traversal and file extension check bypass in the Course component resulting in code execution.atutor · atutorEPSS31%1 exploitPublished Jul 17, 2017
- CVE-2017-11165Critical 9.8dataTaker DT80 dEX 1.50.012 allows remote attackers to obtain sensitive credential and configuration information via a direct request for the /services/getFile.cmd?userfile=config.xml URI.thermofisher · dt80 dex firmwareEPSS64%2 exploitsPublished Jul 12, 2017
- CVE-2017-8618High 7.5Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 Internet Explorer in the way affected Microsoft scripting engines render when…microsoft · internet explorerEPSS58%2 exploitsPublished Jul 11, 2017
- CVE-2017-8601High 7.5Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka "Scripting…microsoft · edgeEPSS67%2 exploitsPublished Jul 11, 2017
- CVE-2017-8594High 7.5Internet Explorer on Microsoft Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption…microsoft · internet explorerEPSS50%2 exploitsPublished Jul 11, 2017
- CVE-2017-10974High 7.5Yaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Traversal with /%5C../ to port 8080.yaws · yawsEPSS81%2 exploitsPublished Jul 7, 2017
- CVE-2017-6326Critical 10.0The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process.symantec · messaging gatewayEPSS73%2 exploitsPublished Jun 26, 2017
- CVE-2017-9833High 7.5/cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA variable (sent by GET) to read files with root privileges.boa · boaEPSS68%2 exploitsPublished Jun 23, 2017
- CVE-2017-9757High 8.8IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINKCODE parameter, which is mishandled by a shell.ipfire · ipfireEPSS37%2 exploitsPublished Jun 19, 2017
- CVE-2017-8487High 7.8Windows OLE in Windows XP and Windows Server 2003 allows an attacker to execute code when a victim opens a specially crafted file or program aka "Windows olecnv32.dll Remote Code Execution Vulnerability."microsoft · windows server 2003EPSS54%2 exploitsPublished Jun 15, 2017
- CVE-2017-8461High 7.8Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute code on a targeted RPC server which has Routing and Remote Access enabled via a specially crafted application, aka "Windows RPC Remote Code Execution…microsoft · windows server 2003EPSS20%2 exploitsPublished Jun 15, 2017
- CVE-2017-8548High 7.5Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system when Microsoft Edge improperly handles objects in memory, aka "Scripting Engine Memory Corruption…microsoft · edgeEPSS68%2 exploitsPublished Jun 14, 2017
- CVE-2017-8496High 7.5Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability".microsoft · edgeEPSS51%2 exploitsPublished Jun 14, 2017
- CVE-2017-9544Critical 9.8There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1.echatserver · easy chat serverEPSS24%2 exploitsPublished Jun 12, 2017
- CVE-2014-8687Critical 9.8Seagate Business NAS devices with firmware before 2015.00322 allow remote attackers to execute arbitrary code with root privileges by leveraging use of a static encryption key to create session tokens.seagate · business nas firmwareEPSS44%7 exploitsPublished Jun 8, 2017
- CVE-2017-8835Critical 9.8SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093.peplink · 1350hw2 firmwareEPSS62%1 exploitPublished Jun 5, 2017
- CVE-2017-9417Critical 9.8Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpwn" issue.broadcom · bcm43xx wi-fi chipset firmwareEPSS64%1 exploitPublished Jun 4, 2017
- CVE-2015-0936Critical 9.8Ceragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu user, which allows remote attackers to obtain SSH access by leveraging knowledge of the private key.ceragon · fibeair ip-10 firmwareEPSS78%3 exploitsPublished Jun 1, 2017
- CVE-2017-8538High 7.8The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…microsoft · malware protection engineEPSS50%1 exploitPublished May 26, 2017
- CVE-2016-10073High 7.5The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote attackers to spoof the email domain in sent messages and potentially obtain sensitive information via a crafted HTTP Host header, as demonstrated by a password reset request.vanillaforums · vanillaEPSS84%3 exploitsPublished May 23, 2017
- CVE-2017-1092Critical 9.8IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system admin on Windows servers.ibm · informix open admin toolEPSS76%3 exploitsPublished May 22, 2017
- CVE-2017-9101Critical 9.8import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via vectors involving the User-Agent HTTP header and PHP code in the name of a file.playsms · playsmsEPSS77%4 exploitsPublished May 21, 2017
- CVE-2017-9100High 8.8login.cgi on D-Link DIR-600M devices with firmware 3.04 allows remote attackers to bypass authentication by entering more than 20 blank spaces in the password field during an admin login attempt.dlink · dir-600m firmwareEPSS85%1 exploitPublished May 21, 2017
- CVE-2017-9080High 8.8PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed.playsms · playsmsEPSS62%4 exploitsPublished May 19, 2017
- CVE-2017-5174Critical 9.8An Authentication Bypass issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12.geutebruck · ip camera g-cam efd-2250 firmwareEPSS52%1 exploitPublished May 19, 2017
- CVE-2017-6622Critical 9.8A vulnerability in the web interface for Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to bypass authentication and perform command injection with root privileges.cisco · prime collaboration provisioningEPSS62%1 exploitPublished May 18, 2017
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2014-5301 | Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4. manageengine · assetexplorer | High 8.8 | 78% | 5 exploits | |
| CVE-2015-2857 | Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metacharacters in the oauth_token parameter. accellion · file transfer appliance | Critical 9.8 | 84% | 3 exploits | |
| CVE-2017-8671 | Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka… microsoft · edge | High 7.5 | 69% | 1 exploit | |
| CVE-2017-8670 | Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting… microsoft · edge | High 7.5 | 69% | 1 exploit | |
| CVE-2017-8657 | Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka… microsoft · edge | High 7.5 | 55% | 1 exploit | |
| CVE-2017-8656 | Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting… microsoft · edge | High 7.5 | 69% | 1 exploit | |
| CVE-2017-8646 | Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine… microsoft · edge | High 7.5 | 69% | 1 exploit | |
| CVE-2017-8645 | Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine… microsoft · edge | High 7.5 | 69% | 1 exploit | |
| CVE-2017-8641 | Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to… microsoft · edge | High 7.5 | 72% | 1 exploit | |
| CVE-2017-8640 | Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting… microsoft · edge | High 7.5 | 69% | 1 exploit | |
| CVE-2017-8636 | Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to… microsoft · edge | High 7.5 | 72% | 8 exploits | |
| CVE-2017-8635 | Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to… microsoft · edge | High 7.5 | 56% | 2 exploits | |
| CVE-2017-8634 | Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption… microsoft · edge | High 7.5 | 70% | 2 exploits | |
| CVE-2016-7976 | The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams. artifex · ghostscript | High 8.8 | 23% | 1 exploit | |
| CVE-2017-12478 | It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of its input parameters was not validated. kaseya · unitrends backup | Critical 9.8 | 78% | 6 exploits | |
| CVE-2017-12477 | It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in which its authentication can be bypassed. kaseya · unitrends backup | Critical 9.8 | 68% | 4 exploits | |
| CVE-2017-11394 | Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. trendmicro · officescan | Critical 9.8 | 67% | 2 exploits | |
| CVE-2017-11392 | Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. trendmicro · interscan messaging security virtual appliance | High 8.8 | 34% | 1 exploit | |
| CVE-2017-11391 | Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. trendmicro · interscan messaging security virtual appliance | High 8.8 | 62% | 1 exploit | |
| CVE-2017-7442 | Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences. gonitro · nitro pro | High 8.8 | 41% | 2 exploits | |
| CVE-2017-9769 | A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a handle to be opened to an arbitrary process. razer · synapse | Critical 9.8 | 86% | 2 exploits | |
| CVE-2017-9554 | An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers to enumerate valid usernames via unspecified vectors. synology · diskstation manager | Medium 5.3 | 77% | 1 exploit | |
| CVE-2017-11517 | Stack-based buffer overflow in GCoreServer.exe in the server in Geutebrueck Gcore 1.3.8.42 and 1.4.2.37 allows remote attackers to execute arbitrary code via a long URI in a GET request. geutebrueck · gcore | Critical 9.8 | 29% | 3 exploits | |
| CVE-2017-1000028 | Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request. oracle · glassfish server | High 7.5 | 99% | 5 exploits | |
| CVE-2017-1000002 | ATutor versions 2.2.1 and earlier are vulnerable to a directory traversal and file extension check bypass in the Course component resulting in code execution. atutor · atutor | Critical 9.8 | 31% | 1 exploit | |
| CVE-2017-11165 | dataTaker DT80 dEX 1.50.012 allows remote attackers to obtain sensitive credential and configuration information via a direct request for the /services/getFile.cmd?userfile=config.xml URI. thermofisher · dt80 dex firmware | Critical 9.8 | 64% | 2 exploits | |
| CVE-2017-8618 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 Internet Explorer in the way affected Microsoft scripting engines render when… microsoft · internet explorer | High 7.5 | 58% | 2 exploits | |
| CVE-2017-8601 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka "Scripting… microsoft · edge | High 7.5 | 67% | 2 exploits | |
| CVE-2017-8594 | Internet Explorer on Microsoft Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption… microsoft · internet explorer | High 7.5 | 50% | 2 exploits | |
| CVE-2017-10974 | Yaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Traversal with /%5C../ to port 8080. yaws · yaws | High 7.5 | 81% | 2 exploits | |
| CVE-2017-6326 | The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process. symantec · messaging gateway | Critical 10.0 | 73% | 2 exploits | |
| CVE-2017-9833 | /cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA variable (sent by GET) to read files with root privileges. boa · boa | High 7.5 | 68% | 2 exploits | |
| CVE-2017-9757 | IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINKCODE parameter, which is mishandled by a shell. ipfire · ipfire | High 8.8 | 37% | 2 exploits | |
| CVE-2017-8487 | Windows OLE in Windows XP and Windows Server 2003 allows an attacker to execute code when a victim opens a specially crafted file or program aka "Windows olecnv32.dll Remote Code Execution Vulnerability." microsoft · windows server 2003 | High 7.8 | 54% | 2 exploits | |
| CVE-2017-8461 | Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute code on a targeted RPC server which has Routing and Remote Access enabled via a specially crafted application, aka "Windows RPC Remote Code Execution… microsoft · windows server 2003 | High 7.8 | 20% | 2 exploits | |
| CVE-2017-8548 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system when Microsoft Edge improperly handles objects in memory, aka "Scripting Engine Memory Corruption… microsoft · edge | High 7.5 | 68% | 2 exploits | |
| CVE-2017-8496 | Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 51% | 2 exploits | |
| CVE-2017-9544 | There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. echatserver · easy chat server | Critical 9.8 | 24% | 2 exploits | |
| CVE-2014-8687 | Seagate Business NAS devices with firmware before 2015.00322 allow remote attackers to execute arbitrary code with root privileges by leveraging use of a static encryption key to create session tokens. seagate · business nas firmware | Critical 9.8 | 44% | 7 exploits | |
| CVE-2017-8835 | SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. peplink · 1350hw2 firmware | Critical 9.8 | 62% | 1 exploit | |
| CVE-2017-9417 | Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpwn" issue. broadcom · bcm43xx wi-fi chipset firmware | Critical 9.8 | 64% | 1 exploit | |
| CVE-2015-0936 | Ceragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu user, which allows remote attackers to obtain SSH access by leveraging knowledge of the private key. ceragon · fibeair ip-10 firmware | Critical 9.8 | 78% | 3 exploits | |
| CVE-2017-8538 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server… microsoft · malware protection engine | High 7.8 | 50% | 1 exploit | |
| CVE-2016-10073 | The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote attackers to spoof the email domain in sent messages and potentially obtain sensitive information via a crafted HTTP Host header, as demonstrated by a password reset request. vanillaforums · vanilla | High 7.5 | 84% | 3 exploits | |
| CVE-2017-1092 | IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system admin on Windows servers. ibm · informix open admin tool | Critical 9.8 | 76% | 3 exploits | |
| CVE-2017-9101 | import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via vectors involving the User-Agent HTTP header and PHP code in the name of a file. playsms · playsms | Critical 9.8 | 77% | 4 exploits | |
| CVE-2017-9100 | login.cgi on D-Link DIR-600M devices with firmware 3.04 allows remote attackers to bypass authentication by entering more than 20 blank spaces in the password field during an admin login attempt. dlink · dir-600m firmware | High 8.8 | 85% | 1 exploit | |
| CVE-2017-9080 | PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed. playsms · playsms | High 8.8 | 62% | 4 exploits | |
| CVE-2017-5174 | An Authentication Bypass issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. geutebruck · ip camera g-cam efd-2250 firmware | Critical 9.8 | 52% | 1 exploit | |
| CVE-2017-6622 | A vulnerability in the web interface for Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to bypass authentication and perform command injection with root privileges. cisco · prime collaboration provisioning | Critical 9.8 | 62% | 1 exploit |
Showing 1,051–1,100 of 2,494
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.