Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
1,192 vulnerabilities · highest exploit probability first
- CVE-2006-4868Critical 9.3Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet Explorer 6.0 on Windows XP SP2, and possibly other versions, allows remote attackers to execute arbitrary code via a Vector Markup Language (VML) file with a…microsoft · internet explorerEPSS61%4 exploitsPublished Sep 19, 2006
- CVE-2006-4305Critical 10.0Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long database name when connecting via a WebDBM client.mysql · maxdbEPSS72%2 exploitsPublished Aug 29, 2006
- CVE-2006-3439Critical 10.0Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RPC message, a different vulnerability than CVE-2006-1314.microsoft · windows 2000EPSS85%6 exploitsPublished Aug 8, 2006
- CVE-2006-3441Critical 10.0Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted record response.microsoft · windows 2000EPSS62%1 exploitPublished Aug 8, 2006
- CVE-2006-3440Critical 10.0Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka "Winsock Hostname Vulnerability."microsoft · windows 2000EPSS57%1 exploitPublished Aug 8, 2006
- CVE-2006-3838Critical 10.0Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0, as used in products including (a) Sidewinder, (b) iPolicy Security Manager, (c) Astaro Report Manager, (d) Fortinet FortiReporter, (e) Top Layer Network Security Analyzer, and…eiqnetworks · enterprise security analyzerEPSS74%8 exploitsPublished Jul 26, 2006
- CVE-2006-3086Critical 9.3Stack-based buffer overflow in the HrShellOpenWithMonikerDisplayName function in Microsoft Hyperlink Object Library (hlink.dll) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long hyperlink, as demonstrated using an Excel…microsoft · hyperlink object libraryEPSS56%1 exploitPublished Jun 19, 2006
- CVE-2006-2379Critical 9.3Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing.microsoft · windows 2000EPSS54%1 exploitPublished Jun 13, 2006
- CVE-2006-2630Critical 10.0Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitrary code via unknown attack vectors.symantec · client securityEPSS74%2 exploitsPublished May 27, 2006
- CVE-2006-0992Critical 10.0Stack-based buffer overflow in Novell GroupWise Messenger before 2.0 Public Beta 2 allows remote attackers to execute arbitrary code via a long Accept-Language value without a comma or semicolon.novell · groupwise messengerEPSS73%2 exploitsPublished Apr 14, 2006
- CVE-2006-1189Critical 10.0Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via a crafted URL with an International Domain Name (IDN) using double-byte character sets (DBCS), aka the "Double Byte Character Parsing Memory…microsoft · internet explorerEPSS62%1 exploitPublished Apr 11, 2006
- CVE-2006-1190Critical 10.0Microsoft Internet Explorer 5.01 through 6 does not always return the correct IOleClientSite information when dynamically creating an embedded object, which could cause Internet Explorer to run the object in the wrong security context or zone, and allow remote attackers to…microsoft · internet explorerEPSS62%1 exploitPublished Apr 11, 2006
- CVE-2006-1186Critical 10.0Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via by instantiating the (1) Mdt2gddr.dll, (2) Mdt2dd.dll, and (3) Mdt2gddo.dll COM objects as ActiveX controls, which leads to memory corruption.microsoft · internet explorerEPSS58%1 exploitPublished Apr 11, 2006
- CVE-2006-1652Critical 9.0Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-assisted remote attackers to execute arbitrary code via a malicious server that sends a long string to a client that connects on TCP port 5900, which triggers an…ultravnc · tabbed viewerEPSS68%4 exploitsPublished Apr 6, 2006
- CVE-2006-1359Critical 9.3Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer.microsoft · internet explorerEPSS68%6 exploitsPublished Mar 22, 2006
- CVE-2006-1255Critical 10.0Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long string to the (1) LOGIN or (2) SELECT command, a different set of…mercur · mercur messagingEPSS69%8 exploitsPublished Mar 18, 2006
- CVE-2005-2715Critical 10.0Format string vulnerability in the Java user interface service (bpjava-msvc) daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the…symantec veritas · netbackup data and business centerEPSS60%3 exploitsPublished Oct 12, 2005
- CVE-2005-2668Critical 10.0Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow remote attackers to execute arbitrary code via unknown vectors.broadcom · advantage data transportEPSS75%2 exploitsPublished Aug 23, 2005
- CVE-2005-2611Critical 10.0VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static password during authentication from the NDMP agent to the server, which allows remote attackers to…symantec veritas · backup execEPSS87%1 exploitPublished Aug 17, 2005
- CVE-2005-1983Critical 10.0Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the…microsoft · windows 2000EPSS93%5 exploitsPublished Aug 10, 2005
- CVE-2005-1812Critical 10.0Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to execute arbitrary code via a long (1) filename or (2) transfer mode string in a Read Request (RRQ) or Write Request (WRQ) packet.futuresoft · tftp server 2000EPSS63%3 exploitsPublished Jun 1, 2005
- CVE-2005-1415Critical 10.0Buffer overflow in GlobalSCAPE Secure FTP Server 3.0.2 allows remote authenticated users to execute arbitrary code via a long FTP command.globalscape · secure ftp serverEPSS61%3 exploitsPublished May 3, 2005
- CVE-2005-0059Critical 10.0Buffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers to execute arbitrary code via a crafted message.microsoft · windows 2000EPSS73%3 exploitsPublished May 2, 2005
- CVE-2005-0353Critical 10.0Buffer overflow in the Sentinel LM (Lservnt) service in the Sentinel License Manager 7.2.0.2 allows remote attackers to execute arbitrary code by sending a large amount of data to UDP port 5093.safenet · sentinel license managerEPSS71%3 exploitsPublished May 2, 2005
- CVE-2005-0260Critical 10.0Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote attackers to execute arbitrary code via a long packet to UDP port 41524, which is not properly handled in a recvfrom call.broadcom · brightstor arcserve backupEPSS70%2 exploitsPublished May 2, 2005
- CVE-2005-0491Critical 10.0Stack-based buffer overflow in Knox Arkeia Server Backup 5.3.x allows remote attackers to execute arbitrary code via a long type 77 request.knox software · arkeia server backupEPSS65%7 exploitsPublished May 2, 2005
- CVE-2005-0768Critical 10.0Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions before 5.0.7, allows remote attackers to execute arbitrary code via a long string to port 2380.goodtech systems · goodtech telnet serverEPSS60%3 exploitsPublished May 2, 2005
- CVE-2005-1009Critical 10.0Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or (2) local users to execute arbitrary code via a long Name entry in the…bakbone · netvaultEPSS57%5 exploitsPublished May 2, 2005
- CVE-2005-0684Critical 10.0Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long file parameter after a percent ("%") sign or (2) a long Lock-Token string to the WebDAV functionality, which is…mysql · maxdbEPSS69%2 exploitsPublished Apr 25, 2005
- CVE-2005-1099Critical 10.0Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is listening on a network interface, allow remote attackers to execute arbitrary code.salim gasmi · gldEPSS68%4 exploitsPublished Apr 12, 2005
- CVE-2004-1037Critical 10.0The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string.twiki · twikiEPSS62%3 exploitsPublished Mar 1, 2005
- CVE-2004-0964Critical 10.0Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file.zinf · zinfEPSS63%7 exploitsPublished Feb 9, 2005
- CVE-2004-1172Critical 10.0Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9.1.4691 Hotfix 40, allows remote attackers to execute arbitrary code via a registration request with a long hostname.symantec veritas · backup execEPSS82%3 exploitsPublished Jan 10, 2005
- CVE-2004-1080Critical 10.0The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port…microsoft · windows 2000EPSS80%3 exploitsPublished Jan 10, 2005
- CVE-2004-1211Critical 10.0Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via long arguments to the (1) EXAMINE, (2) SUBSCRIBE, (3) STATUS, (4) APPEND, (5) CHECK, (6)…david harris · mercuryEPSS72%8 exploitsPublished Jan 10, 2005
- CVE-2004-1134Critical 10.0Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long query string.microsoft · w3who.dllEPSS72%2 exploitsPublished Jan 10, 2005
- CVE-2004-2687Critical 9.3distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server without authorization checks.apple · xcodeEPSS88%2 exploitsPublished Dec 31, 2004
- CVE-2004-1050Critical 10.0Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML…microsoft · internet explorerEPSS67%1 exploitPublished Dec 31, 2004
- CVE-2004-0608Critical 10.0The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and earlier, Rune 107 and earlier, Tactical Ops 3.4.0 and earlier, Unreal 1 226f and earlier, Unreal II XMP…arush · devastationEPSS74%5 exploitsPublished Dec 6, 2004
- CVE-2004-0330Critical 10.0Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time zone argument to the MDTM command.solarwinds · serv-u file serverEPSS85%7 exploitsPublished Nov 23, 2004
- CVE-2004-0297Critical 10.0Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via an LDAP message with a large tag length.ipswitch · imailEPSS68%3 exploitsPublished Nov 23, 2004
- CVE-2004-0636Critical 10.0Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message.aol · instant messengerEPSS66%4 exploitsPublished Nov 23, 2004
- CVE-2004-0313Critical 10.0Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request, as demonstrated using a long (1) GET argument or (2) method name.psoproxy · psoproxy serverEPSS64%6 exploitsPublished Nov 23, 2004
- CVE-2004-0326Critical 10.0Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET request.proxy-pro · professional gatekeeperEPSS63%4 exploitsPublished Nov 23, 2004
- CVE-2004-0847Critical 9.8The Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass authentication for .aspx files in restricted directories via a request containing a (1) "\" (backslash) or (2) "%5C" (encoded backslash), aka "Path Validation Vulnerability."microsoft · asp.netEPSS76%1 exploitPublished Nov 3, 2004
- CVE-2004-0574Critical 10.0The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper…microsoft · exchange serverEPSS64%1 exploitPublished Nov 3, 2004
- CVE-2004-0575Critical 10.0Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an "unchecked buffer" and improper…microsoft · windows xpEPSS60%2 exploitsPublished Nov 3, 2004
- CVE-2004-0209Critical 10.0Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats that involve "an…microsoft · windows 2000EPSS57%1 exploitPublished Nov 3, 2004
- CVE-2004-0541Critical 10.0Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary code via a long password ("pass" variable).national science foundation · squid web proxy cacheEPSS71%3 exploitsPublished Aug 6, 2004
- CVE-2004-0212Critical 10.0Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters, as demonstrated using Internet Explorer and accessing a…microsoft · windows 2000EPSS64%2 exploitsPublished Aug 6, 2004
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2006-4868 | Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet Explorer 6.0 on Windows XP SP2, and possibly other versions, allows remote attackers to execute arbitrary code via a Vector Markup Language (VML) file with a… microsoft · internet explorer | Critical 9.3 | 61% | 4 exploits | |
| CVE-2006-4305 | Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long database name when connecting via a WebDBM client. mysql · maxdb | Critical 10.0 | 72% | 2 exploits | |
| CVE-2006-3439 | Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RPC message, a different vulnerability than CVE-2006-1314. microsoft · windows 2000 | Critical 10.0 | 85% | 6 exploits | |
| CVE-2006-3441 | Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted record response. microsoft · windows 2000 | Critical 10.0 | 62% | 1 exploit | |
| CVE-2006-3440 | Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka "Winsock Hostname Vulnerability." microsoft · windows 2000 | Critical 10.0 | 57% | 1 exploit | |
| CVE-2006-3838 | Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0, as used in products including (a) Sidewinder, (b) iPolicy Security Manager, (c) Astaro Report Manager, (d) Fortinet FortiReporter, (e) Top Layer Network Security Analyzer, and… eiqnetworks · enterprise security analyzer | Critical 10.0 | 74% | 8 exploits | |
| CVE-2006-3086 | Stack-based buffer overflow in the HrShellOpenWithMonikerDisplayName function in Microsoft Hyperlink Object Library (hlink.dll) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long hyperlink, as demonstrated using an Excel… microsoft · hyperlink object library | Critical 9.3 | 56% | 1 exploit | |
| CVE-2006-2379 | Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing. microsoft · windows 2000 | Critical 9.3 | 54% | 1 exploit | |
| CVE-2006-2630 | Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitrary code via unknown attack vectors. symantec · client security | Critical 10.0 | 74% | 2 exploits | |
| CVE-2006-0992 | Stack-based buffer overflow in Novell GroupWise Messenger before 2.0 Public Beta 2 allows remote attackers to execute arbitrary code via a long Accept-Language value without a comma or semicolon. novell · groupwise messenger | Critical 10.0 | 73% | 2 exploits | |
| CVE-2006-1189 | Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via a crafted URL with an International Domain Name (IDN) using double-byte character sets (DBCS), aka the "Double Byte Character Parsing Memory… microsoft · internet explorer | Critical 10.0 | 62% | 1 exploit | |
| CVE-2006-1190 | Microsoft Internet Explorer 5.01 through 6 does not always return the correct IOleClientSite information when dynamically creating an embedded object, which could cause Internet Explorer to run the object in the wrong security context or zone, and allow remote attackers to… microsoft · internet explorer | Critical 10.0 | 62% | 1 exploit | |
| CVE-2006-1186 | Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via by instantiating the (1) Mdt2gddr.dll, (2) Mdt2dd.dll, and (3) Mdt2gddo.dll COM objects as ActiveX controls, which leads to memory corruption. microsoft · internet explorer | Critical 10.0 | 58% | 1 exploit | |
| CVE-2006-1652 | Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-assisted remote attackers to execute arbitrary code via a malicious server that sends a long string to a client that connects on TCP port 5900, which triggers an… ultravnc · tabbed viewer | Critical 9.0 | 68% | 4 exploits | |
| CVE-2006-1359 | Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer. microsoft · internet explorer | Critical 9.3 | 68% | 6 exploits | |
| CVE-2006-1255 | Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long string to the (1) LOGIN or (2) SELECT command, a different set of… mercur · mercur messaging | Critical 10.0 | 69% | 8 exploits | |
| CVE-2005-2715 | Format string vulnerability in the Java user interface service (bpjava-msvc) daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the… symantec veritas · netbackup data and business center | Critical 10.0 | 60% | 3 exploits | |
| CVE-2005-2668 | Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow remote attackers to execute arbitrary code via unknown vectors. broadcom · advantage data transport | Critical 10.0 | 75% | 2 exploits | |
| CVE-2005-2611 | VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static password during authentication from the NDMP agent to the server, which allows remote attackers to… symantec veritas · backup exec | Critical 10.0 | 87% | 1 exploit | |
| CVE-2005-1983 | Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the… microsoft · windows 2000 | Critical 10.0 | 93% | 5 exploits | |
| CVE-2005-1812 | Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to execute arbitrary code via a long (1) filename or (2) transfer mode string in a Read Request (RRQ) or Write Request (WRQ) packet. futuresoft · tftp server 2000 | Critical 10.0 | 63% | 3 exploits | |
| CVE-2005-1415 | Buffer overflow in GlobalSCAPE Secure FTP Server 3.0.2 allows remote authenticated users to execute arbitrary code via a long FTP command. globalscape · secure ftp server | Critical 10.0 | 61% | 3 exploits | |
| CVE-2005-0059 | Buffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers to execute arbitrary code via a crafted message. microsoft · windows 2000 | Critical 10.0 | 73% | 3 exploits | |
| CVE-2005-0353 | Buffer overflow in the Sentinel LM (Lservnt) service in the Sentinel License Manager 7.2.0.2 allows remote attackers to execute arbitrary code by sending a large amount of data to UDP port 5093. safenet · sentinel license manager | Critical 10.0 | 71% | 3 exploits | |
| CVE-2005-0260 | Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote attackers to execute arbitrary code via a long packet to UDP port 41524, which is not properly handled in a recvfrom call. broadcom · brightstor arcserve backup | Critical 10.0 | 70% | 2 exploits | |
| CVE-2005-0491 | Stack-based buffer overflow in Knox Arkeia Server Backup 5.3.x allows remote attackers to execute arbitrary code via a long type 77 request. knox software · arkeia server backup | Critical 10.0 | 65% | 7 exploits | |
| CVE-2005-0768 | Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions before 5.0.7, allows remote attackers to execute arbitrary code via a long string to port 2380. goodtech systems · goodtech telnet server | Critical 10.0 | 60% | 3 exploits | |
| CVE-2005-1009 | Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or (2) local users to execute arbitrary code via a long Name entry in the… bakbone · netvault | Critical 10.0 | 57% | 5 exploits | |
| CVE-2005-0684 | Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long file parameter after a percent ("%") sign or (2) a long Lock-Token string to the WebDAV functionality, which is… mysql · maxdb | Critical 10.0 | 69% | 2 exploits | |
| CVE-2005-1099 | Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is listening on a network interface, allow remote attackers to execute arbitrary code. salim gasmi · gld | Critical 10.0 | 68% | 4 exploits | |
| CVE-2004-1037 | The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string. twiki · twiki | Critical 10.0 | 62% | 3 exploits | |
| CVE-2004-0964 | Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file. zinf · zinf | Critical 10.0 | 63% | 7 exploits | |
| CVE-2004-1172 | Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9.1.4691 Hotfix 40, allows remote attackers to execute arbitrary code via a registration request with a long hostname. symantec veritas · backup exec | Critical 10.0 | 82% | 3 exploits | |
| CVE-2004-1080 | The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port… microsoft · windows 2000 | Critical 10.0 | 80% | 3 exploits | |
| CVE-2004-1211 | Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via long arguments to the (1) EXAMINE, (2) SUBSCRIBE, (3) STATUS, (4) APPEND, (5) CHECK, (6)… david harris · mercury | Critical 10.0 | 72% | 8 exploits | |
| CVE-2004-1134 | Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long query string. microsoft · w3who.dll | Critical 10.0 | 72% | 2 exploits | |
| CVE-2004-2687 | distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server without authorization checks. apple · xcode | Critical 9.3 | 88% | 2 exploits | |
| CVE-2004-1050 | Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML… microsoft · internet explorer | Critical 10.0 | 67% | 1 exploit | |
| CVE-2004-0608 | The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and earlier, Rune 107 and earlier, Tactical Ops 3.4.0 and earlier, Unreal 1 226f and earlier, Unreal II XMP… arush · devastation | Critical 10.0 | 74% | 5 exploits | |
| CVE-2004-0330 | Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time zone argument to the MDTM command. solarwinds · serv-u file server | Critical 10.0 | 85% | 7 exploits | |
| CVE-2004-0297 | Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via an LDAP message with a large tag length. ipswitch · imail | Critical 10.0 | 68% | 3 exploits | |
| CVE-2004-0636 | Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message. aol · instant messenger | Critical 10.0 | 66% | 4 exploits | |
| CVE-2004-0313 | Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request, as demonstrated using a long (1) GET argument or (2) method name. psoproxy · psoproxy server | Critical 10.0 | 64% | 6 exploits | |
| CVE-2004-0326 | Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET request. proxy-pro · professional gatekeeper | Critical 10.0 | 63% | 4 exploits | |
| CVE-2004-0847 | The Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass authentication for .aspx files in restricted directories via a request containing a (1) "\" (backslash) or (2) "%5C" (encoded backslash), aka "Path Validation Vulnerability." microsoft · asp.net | Critical 9.8 | 76% | 1 exploit | |
| CVE-2004-0574 | The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper… microsoft · exchange server | Critical 10.0 | 64% | 1 exploit | |
| CVE-2004-0575 | Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an "unchecked buffer" and improper… microsoft · windows xp | Critical 10.0 | 60% | 2 exploits | |
| CVE-2004-0209 | Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats that involve "an… microsoft · windows 2000 | Critical 10.0 | 57% | 1 exploit | |
| CVE-2004-0541 | Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary code via a long password ("pass" variable). national science foundation · squid web proxy cache | Critical 10.0 | 71% | 3 exploits | |
| CVE-2004-0212 | Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters, as demonstrated using Internet Explorer and accessing a… microsoft · windows 2000 | Critical 10.0 | 64% | 2 exploits |
Showing 1,101–1,150 of 1,192
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.