Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
2,494 vulnerabilities · highest exploit probability first
- CVE-2015-2994Medium 6.5Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators to execute arbitrary code by uploading a file with a .jsp extension, then accessing it via a direct request to the file in icons/user_photo/.sysaid · sysaidEPSS50%4 exploitsPublished Jun 8, 2015
- CVE-2015-2993High 7.5SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers to (1) create administrator accounts via a crafted request to /createnewaccount or (2) write to arbitrary files via the fileName parameter to /userentry.sysaid · sysaidEPSS55%2 exploitsPublished Jun 8, 2015
- CVE-2015-0779Critical 10.0Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11.3.2 allows remote attackers to execute arbitrary code via a crafted directory name in the uid parameter, in conjunction with a WAR filename in the filename…novell · zenworks configuration managementEPSS74%3 exploitsPublished Jun 7, 2015
- CVE-2010-5324Critical 10.0Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to execute arbitrary code via a zenworks-fileupload request with a crafted directory name in the type…novell · zenworks configuration managementEPSS72%2 exploitsPublished Jun 7, 2015
- CVE-2014-9727Critical 10.0AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm.avm · fritz\!boxEPSS72%3 exploitsPublished May 29, 2015
- CVE-2015-2845Critical 10.0The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arbitrary commands via the $type portion of the PATH_INFO.goautodial · goadmin ceEPSS72%4 exploitsPublished May 12, 2015
- CVE-2015-2843High 7.5Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute arbitrary SQL commands via the (1) user_name or (2) user_pass parameter in go_login.php or the PATH_INFO to (3) go_login/validate_credentials/admin/ or (4)…goautodial · goadmin ceEPSS38%4 exploitsPublished May 12, 2015
- CVE-2015-3090Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-09adobe · airEPSS83%2 exploitsPublished May 12, 2015
- CVE-2015-3087Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-09adobe · airEPSS74%1 exploitPublished May 12, 2015
- CVE-2015-3088Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-09adobe · airEPSS62%1 exploitPublished May 12, 2015
- CVE-2015-3080Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-09adobe · airEPSS57%1 exploitPublished May 12, 2015
- CVE-2015-1397Medium 6.5SQL injection vulnerability in the getCsvFile function in the Mage_Adminhtml_Block_Widget_Grid class in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allows remote administrators to execute arbitrary SQL commands via the popularity[field_expr]…magento · magentoEPSS56%1 exploitPublished Apr 29, 2015
- CVE-2015-0359Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-06adobe · flash playerEPSS92%2 exploitsPublished Apr 14, 2015
- CVE-2015-2295Medium 6.8Cross-site request forgery (CSRF) vulnerability in system_firmware_restorefullbackup.php in the WebGUI in pfSense before 2.2.1 allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary files via the deletefile parameter.netgate · pfsenseEPSS66%2 exploitsPublished Apr 10, 2015
- CVE-2014-9708Medium 5.0Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demonstrated by "Range: x=,".embedthis · appwebEPSS56%2 exploitsPublished Mar 31, 2015
- CVE-2015-0802Medium 5.0Mozilla: Windows can retain access to privileged content on navigation to unprivileged pages (MFSA 2015-42)mozilla · firefoxEPSS67%3 exploitsPublished Mar 31, 2015
- CVE-2015-0816Medium 5.0Mozilla: resource: // documents can load privileged pages (MFSA 2015-33)mozilla · firefoxEPSS67%2 exploitsPublished Mar 31, 2015
- CVE-2015-2284Critical 10.0userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbitrary code via unspecified vectors, related to client session handling.solarwinds · firewall security managerEPSS73%2 exploitsPublished Mar 24, 2015
- CVE-2015-4133Critical 9.8ReFlex Gallery » WordPress Photo Gallery < 3.1.4 - Arbitrary File Uploadreflex gallery project · reflex galleryEPSS62%5 exploitsPublished Mar 15, 2015
- CVE-2015-2208High 7.5The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the object parameter.avinu · phpmoadminEPSS62%4 exploitsPublished Mar 12, 2015
- CVE-2015-0336Critical 9.3flash-plugin: multiple code execution issues fixed in APSB15-05adobe · flash playerEPSS70%2 exploitsPublished Mar 12, 2015
- CVE-2015-0096Critical 9.3Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a Trojan…microsoft · windows 7EPSS71%5 exploitsPublished Mar 11, 2015
- CVE-2015-0240Critical 10.0The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted…samba · sambaEPSS88%1 exploitPublished Feb 24, 2015
- CVE-2014-6593Medium 4.0Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.oracle · jrockitEPSS66%1 exploitPublished Feb 24, 2015
- CVE-2015-2049Critical 9.0Unrestricted file upload vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension.dlink · dcs-931l firmwareEPSS67%2 exploitsPublished Feb 23, 2015
- CVE-2015-1592High 7.5Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::thaw function, which allows remote attackers to include and execute arbitrary local Perl files and possibly execute arbitrary code via…sixapart · movable typeEPSS75%2 exploitsPublished Feb 19, 2015
- CVE-2015-1587High 7.5Unrestricted file upload vulnerability in file_to_index.php in Maarch LetterBox 2.8 and earlier and GEC/GED 1.4 and earlier allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a request to a predictable filename…maarch · gec\/gedEPSS43%4 exploitsPublished Feb 19, 2015
- CVE-2015-1497Critical 10.0radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execute arbitrary commands via a crafted request to TCP port 3465.persistent systems · radia client automationEPSS74%7 exploitsPublished Feb 16, 2015
- CVE-2015-0923Medium 5.0The ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1 allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference within an…ektron · ektron content management systemEPSS22%1 exploitPublished Feb 14, 2015
- CVE-2014-9312High 8.8Photo Gallery by 10Web <= 1.2.5 - Unrestricted File Upload10web · photo galleryEPSS45%4 exploitsPublished Feb 11, 2015
- CVE-2015-0072Medium 4.3Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy and inject arbitrary web script or HTML via vectors involving an IFRAME element that triggers a redirect, a second IFRAME element that…microsoft · internet explorerEPSS72%1 exploitPublished Feb 7, 2015
- CVE-2015-0318Critical 10.0flash-plugin: multiple code execution flaws (APSB15-04)adobe · flash playerEPSS75%2 exploitsPublished Feb 4, 2015
- CVE-2015-0925Critical 9.0The client in iPass Open Mobile before 2.4.5 on Windows allows remote authenticated users to execute arbitrary code via a DLL pathname in a crafted Unicode string that is improperly handled by a subprocess reached through a named pipe, as demonstrated by a UNC share pathname.ipass · ipass open mobileEPSS52%3 exploitsPublished Jan 22, 2015
- CVE-2015-1376High 8.8Pixabay Images <= 2.3 - Arbitrary File Uploadpixabay images project · pixabay imagesEPSS33%3 exploitsPublished Jan 18, 2015
- CVE-2015-1172Critical 9.8Holding Pattern <= 0.6 - Arbitrary File Uploadholding pattern project · holding patternEPSS58%2 exploitsPublished Jan 17, 2015
- CVE-2014-9195High 7.5Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic.phoenixcontact-software · multiprogEPSS81%1 exploitPublished Jan 17, 2015
- CVE-2014-100015Medium 6.4Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a ..solidworks · product data managementEPSS57%6 exploitsPublished Jan 13, 2015
- CVE-2014-100002Medium 5.0Directory traversal vulnerability in ManageEngine SupportCenter Plus 7.9 before 7917 allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the attach parameter to WorkOrder.do in the file attachment for a new ticket.zohocorp · manageengine supportcenter plusEPSS60%2 exploitsPublished Jan 13, 2015
- CVE-2014-9308High 8.8Shopping Cart & eCommerce Store < 3.0.16 - Arbitrary File Uploadwpeasycart · wp easycartEPSS51%5 exploitsPublished Jan 8, 2015
- CVE-2014-9583Critical 10.0common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and other routers, does not properly check the MAC address for a request, which allows remote attackers to bypass authentication and execute…asus · wrt firmwareEPSS80%6 exploitsPublished Jan 8, 2015
- CVE-2014-9567High 7.5Unrestricted file upload vulnerability in process-upload.php in ProjectSend (formerly cFTP) r100 through r561 allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in the upload/files/…projectsend · projectsendEPSS43%6 exploitsPublished Jan 7, 2015
- CVE-2011-4722High 7.8Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a ..ipswitch · tftp serverEPSS58%2 exploitsPublished Dec 28, 2014
- CVE-2014-7285Medium 6.5The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting command strings into unspecified PHP scripts.symantec · web gatewayEPSS50%2 exploitsPublished Dec 17, 2014
- CVE-2014-10021Critical 9.8WP Symposium <= 14.11 - Arbitrary File Uploadwpsymposiumpro · wp symposiumEPSS59%4 exploitsPublished Dec 10, 2014
- CVE-2014-7866High 7.5Multiple directory traversal vulnerabilities in ZOHO ManageEngine OpManager 8 (build 88xx) through 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to write and execute arbitrary files via a ..zohocorp · manageengine opmanagerEPSS80%2 exploitsPublished Dec 10, 2014
- CVE-2014-4880High 7.5Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote attackers to execute arbitrary code via an RTSP PLAY request with a long Authorization header.hikvision · dvr ds-7204 firmwareEPSS71%4 exploitsPublished Dec 8, 2014
- CVE-2014-3996High 7.5SQL injection vulnerability in the LinkViewFetchServlet servlet in ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90043, Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition…manageengine · desktop centralEPSS38%3 exploitsPublished Dec 5, 2014
- CVE-2014-7868High 7.5Multiple SQL injection vulnerabilities in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the (1) OPM_BVNAME parameter in a Delete operation to the…zohocorp · manageengine opmanagerEPSS73%3 exploitsPublished Dec 4, 2014
- CVE-2014-6034Medium 5.0Directory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe.FileCollector servlet in ZOHO ManageEngine OpManager 8.8 through 11.3, Social IT Plus 11.0, and IT360 10.4 and earlier allows remote attackers or remote authenticated users to write to…zohocorp · manageengine opmanagerEPSS79%3 exploitsPublished Dec 4, 2014
- CVE-2014-5446Medium 5.0Directory traversal vulnerability in the DisplayChartPDF servlet in ZOHO ManageEngine Netflow Analyzer 8.6 through 10.2 and IT360 10.3 allows remote attackers and remote authenticated users to read arbitrary files via a ..zohocorp · manageengine netflow analyzerEPSS55%2 exploitsPublished Dec 4, 2014
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2015-2994 | Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators to execute arbitrary code by uploading a file with a .jsp extension, then accessing it via a direct request to the file in icons/user_photo/. sysaid · sysaid | Medium 6.5 | 50% | 4 exploits | |
| CVE-2015-2993 | SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers to (1) create administrator accounts via a crafted request to /createnewaccount or (2) write to arbitrary files via the fileName parameter to /userentry. sysaid · sysaid | High 7.5 | 55% | 2 exploits | |
| CVE-2015-0779 | Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11.3.2 allows remote attackers to execute arbitrary code via a crafted directory name in the uid parameter, in conjunction with a WAR filename in the filename… novell · zenworks configuration management | Critical 10.0 | 74% | 3 exploits | |
| CVE-2010-5324 | Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to execute arbitrary code via a zenworks-fileupload request with a crafted directory name in the type… novell · zenworks configuration management | Critical 10.0 | 72% | 2 exploits | |
| CVE-2014-9727 | AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm. avm · fritz\!box | Critical 10.0 | 72% | 3 exploits | |
| CVE-2015-2845 | The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arbitrary commands via the $type portion of the PATH_INFO. goautodial · goadmin ce | Critical 10.0 | 72% | 4 exploits | |
| CVE-2015-2843 | Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute arbitrary SQL commands via the (1) user_name or (2) user_pass parameter in go_login.php or the PATH_INFO to (3) go_login/validate_credentials/admin/ or (4)… goautodial · goadmin ce | High 7.5 | 38% | 4 exploits | |
| CVE-2015-3090 | flash-plugin: multiple code execution issues fixed in APSB15-09 adobe · air | Critical 10.0 | 83% | 2 exploits | |
| CVE-2015-3087 | flash-plugin: multiple code execution issues fixed in APSB15-09 adobe · air | Critical 10.0 | 74% | 1 exploit | |
| CVE-2015-3088 | flash-plugin: multiple code execution issues fixed in APSB15-09 adobe · air | Critical 10.0 | 62% | 1 exploit | |
| CVE-2015-3080 | flash-plugin: multiple code execution issues fixed in APSB15-09 adobe · air | Critical 10.0 | 57% | 1 exploit | |
| CVE-2015-1397 | SQL injection vulnerability in the getCsvFile function in the Mage_Adminhtml_Block_Widget_Grid class in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allows remote administrators to execute arbitrary SQL commands via the popularity[field_expr]… magento · magento | Medium 6.5 | 56% | 1 exploit | |
| CVE-2015-0359 | flash-plugin: multiple code execution issues fixed in APSB15-06 adobe · flash player | Critical 10.0 | 92% | 2 exploits | |
| CVE-2015-2295 | Cross-site request forgery (CSRF) vulnerability in system_firmware_restorefullbackup.php in the WebGUI in pfSense before 2.2.1 allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary files via the deletefile parameter. netgate · pfsense | Medium 6.8 | 66% | 2 exploits | |
| CVE-2014-9708 | Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demonstrated by "Range: x=,". embedthis · appweb | Medium 5.0 | 56% | 2 exploits | |
| CVE-2015-0802 | Mozilla: Windows can retain access to privileged content on navigation to unprivileged pages (MFSA 2015-42) mozilla · firefox | Medium 5.0 | 67% | 3 exploits | |
| CVE-2015-0816 | Mozilla: resource: // documents can load privileged pages (MFSA 2015-33) mozilla · firefox | Medium 5.0 | 67% | 2 exploits | |
| CVE-2015-2284 | userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbitrary code via unspecified vectors, related to client session handling. solarwinds · firewall security manager | Critical 10.0 | 73% | 2 exploits | |
| CVE-2015-4133 | ReFlex Gallery » WordPress Photo Gallery < 3.1.4 - Arbitrary File Upload reflex gallery project · reflex gallery | Critical 9.8 | 62% | 5 exploits | |
| CVE-2015-2208 | The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the object parameter. avinu · phpmoadmin | High 7.5 | 62% | 4 exploits | |
| CVE-2015-0336 | flash-plugin: multiple code execution issues fixed in APSB15-05 adobe · flash player | Critical 9.3 | 70% | 2 exploits | |
| CVE-2015-0096 | Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a Trojan… microsoft · windows 7 | Critical 9.3 | 71% | 5 exploits | |
| CVE-2015-0240 | The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted… samba · samba | Critical 10.0 | 88% | 1 exploit | |
| CVE-2014-6593 | Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. oracle · jrockit | Medium 4.0 | 66% | 1 exploit | |
| CVE-2015-2049 | Unrestricted file upload vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension. dlink · dcs-931l firmware | Critical 9.0 | 67% | 2 exploits | |
| CVE-2015-1592 | Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::thaw function, which allows remote attackers to include and execute arbitrary local Perl files and possibly execute arbitrary code via… sixapart · movable type | High 7.5 | 75% | 2 exploits | |
| CVE-2015-1587 | Unrestricted file upload vulnerability in file_to_index.php in Maarch LetterBox 2.8 and earlier and GEC/GED 1.4 and earlier allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a request to a predictable filename… maarch · gec\/ged | High 7.5 | 43% | 4 exploits | |
| CVE-2015-1497 | radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execute arbitrary commands via a crafted request to TCP port 3465. persistent systems · radia client automation | Critical 10.0 | 74% | 7 exploits | |
| CVE-2015-0923 | The ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1 allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference within an… ektron · ektron content management system | Medium 5.0 | 22% | 1 exploit | |
| CVE-2014-9312 | Photo Gallery by 10Web <= 1.2.5 - Unrestricted File Upload 10web · photo gallery | High 8.8 | 45% | 4 exploits | |
| CVE-2015-0072 | Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy and inject arbitrary web script or HTML via vectors involving an IFRAME element that triggers a redirect, a second IFRAME element that… microsoft · internet explorer | Medium 4.3 | 72% | 1 exploit | |
| CVE-2015-0318 | flash-plugin: multiple code execution flaws (APSB15-04) adobe · flash player | Critical 10.0 | 75% | 2 exploits | |
| CVE-2015-0925 | The client in iPass Open Mobile before 2.4.5 on Windows allows remote authenticated users to execute arbitrary code via a DLL pathname in a crafted Unicode string that is improperly handled by a subprocess reached through a named pipe, as demonstrated by a UNC share pathname. ipass · ipass open mobile | Critical 9.0 | 52% | 3 exploits | |
| CVE-2015-1376 | Pixabay Images <= 2.3 - Arbitrary File Upload pixabay images project · pixabay images | High 8.8 | 33% | 3 exploits | |
| CVE-2015-1172 | Holding Pattern <= 0.6 - Arbitrary File Upload holding pattern project · holding pattern | Critical 9.8 | 58% | 2 exploits | |
| CVE-2014-9195 | Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic. phoenixcontact-software · multiprog | High 7.5 | 81% | 1 exploit | |
| CVE-2014-100015 | Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. solidworks · product data management | Medium 6.4 | 57% | 6 exploits | |
| CVE-2014-100002 | Directory traversal vulnerability in ManageEngine SupportCenter Plus 7.9 before 7917 allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the attach parameter to WorkOrder.do in the file attachment for a new ticket. zohocorp · manageengine supportcenter plus | Medium 5.0 | 60% | 2 exploits | |
| CVE-2014-9308 | Shopping Cart & eCommerce Store < 3.0.16 - Arbitrary File Upload wpeasycart · wp easycart | High 8.8 | 51% | 5 exploits | |
| CVE-2014-9583 | common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and other routers, does not properly check the MAC address for a request, which allows remote attackers to bypass authentication and execute… asus · wrt firmware | Critical 10.0 | 80% | 6 exploits | |
| CVE-2014-9567 | Unrestricted file upload vulnerability in process-upload.php in ProjectSend (formerly cFTP) r100 through r561 allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in the upload/files/… projectsend · projectsend | High 7.5 | 43% | 6 exploits | |
| CVE-2011-4722 | Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a .. ipswitch · tftp server | High 7.8 | 58% | 2 exploits | |
| CVE-2014-7285 | The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting command strings into unspecified PHP scripts. symantec · web gateway | Medium 6.5 | 50% | 2 exploits | |
| CVE-2014-10021 | WP Symposium <= 14.11 - Arbitrary File Upload wpsymposiumpro · wp symposium | Critical 9.8 | 59% | 4 exploits | |
| CVE-2014-7866 | Multiple directory traversal vulnerabilities in ZOHO ManageEngine OpManager 8 (build 88xx) through 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to write and execute arbitrary files via a .. zohocorp · manageengine opmanager | High 7.5 | 80% | 2 exploits | |
| CVE-2014-4880 | Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote attackers to execute arbitrary code via an RTSP PLAY request with a long Authorization header. hikvision · dvr ds-7204 firmware | High 7.5 | 71% | 4 exploits | |
| CVE-2014-3996 | SQL injection vulnerability in the LinkViewFetchServlet servlet in ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90043, Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition… manageengine · desktop central | High 7.5 | 38% | 3 exploits | |
| CVE-2014-7868 | Multiple SQL injection vulnerabilities in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the (1) OPM_BVNAME parameter in a Delete operation to the… zohocorp · manageengine opmanager | High 7.5 | 73% | 3 exploits | |
| CVE-2014-6034 | Directory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe.FileCollector servlet in ZOHO ManageEngine OpManager 8.8 through 11.3, Social IT Plus 11.0, and IT360 10.4 and earlier allows remote attackers or remote authenticated users to write to… zohocorp · manageengine opmanager | Medium 5.0 | 79% | 3 exploits | |
| CVE-2014-5446 | Directory traversal vulnerability in the DisplayChartPDF servlet in ZOHO ManageEngine Netflow Analyzer 8.6 through 10.2 and IT360 10.3 allows remote attackers and remote authenticated users to read arbitrary files via a .. zohocorp · manageengine netflow analyzer | Medium 5.0 | 55% | 2 exploits |
Showing 1,251–1,300 of 2,494
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.