Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
2,494 vulnerabilities · highest exploit probability first
- CVE-2014-5445Medium 5.0Multiple absolute path traversal vulnerabilities in ZOHO ManageEngine Netflow Analyzer 8.6 through 10.2 and IT360 10.3 allow remote attackers or remote authenticated users to read arbitrary files via a full pathname in the schFilePath parameter to the (1) CSVServlet or (2)…zohocorp · manageengine netflow analyzerEPSS98%2 exploitsPublished Dec 4, 2014
- CVE-2014-8424High 7.8ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication.arris · vap2500 firmwareEPSS60%2 exploitsPublished Nov 28, 2014
- CVE-2014-8423Critical 10.0Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute arbitrary commands via unknown vectors.arris · vap2500 firmwareEPSS62%2 exploitsPublished Nov 28, 2014
- CVE-2014-9034Medium 5.3wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to cause a denial of service (CPU consumption) via a long password that is improperly handled during hashing, a similar issue to…wordpress · wordpressEPSS83%2 exploitsPublished Nov 25, 2014
- CVE-2014-8420Critical 9.0The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors.sonicwall · analyzerEPSS24%1 exploitPublished Nov 25, 2014
- CVE-2014-9735Critical 9.8Slider Revolution < 3.0.96 & Showbiz Pro < 1.7.1 - Missing Authorization to Arbitrary File Uploadthemepunch · showbiz proEPSS76%2 exploitsPublished Nov 24, 2014
- CVE-2014-9016Medium 5.0The password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes (aka phpass) module 6.x-2.x before 6.x-2.1 for Drupal allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted request.drupal · drupalEPSS82%1 exploitPublished Nov 24, 2014
- CVE-2014-8998Medium 6.5lib/message.php in X7 Chat 2.0.0 through 2.0.5.1 allows remote authenticated users to execute arbitrary PHP code via a crafted HTTP header to index.php, which is processed by the preg_replace function with the eval switch.x7chat · x7 chatEPSS36%4 exploitsPublished Nov 20, 2014
- CVE-2014-8598Medium 6.4The XML Import/Export plugin in MantisBT 1.2.x does not restrict access, which allows remote attackers to (1) upload arbitrary XML files via the import page or (2) obtain sensitive information via the export page.mantisbt · mantisbtEPSS38%2 exploitsPublished Nov 18, 2014
- CVE-2014-7146High 7.5The XmlImportExport plugin in MantisBT 1.2.17 and earlier allows remote attackers to execute arbitrary PHP code via a crafted (1) description field or (2) issuelink attribute in an XML file, which is not properly handled when executing the preg_replace function with the e…mantisbt · mantisbtEPSS51%3 exploitsPublished Nov 18, 2014
- CVE-2014-8517High 7.5The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 through 6.0.6, and 6.1 through 6.1.5 allows remote attackers to execute arbitrary commands via a | (pipe) character at the end of an HTTP redirect.netbsd · netbsdEPSS69%3 exploitsPublished Nov 17, 2014
- CVE-2014-2268Medium 5.0views/Index.php in the Install module in vTiger 6.0 before Security Patch 2 does not properly restrict access, which allows remote attackers to re-install the application via a request that sets the X-Requested-With HTTP header, as demonstrated by executing arbitrary PHP code…vtiger · vtiger crmEPSS31%3 exploitsPublished Nov 15, 2014
- CVE-2014-8799High 7.5DukaPress < 2.5.4 - Directory Traversaldukapress · dukapressEPSS68%2 exploitsPublished Nov 12, 2014
- CVE-2014-1635Critical 10.0Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103_WW_1.10.17m allows remote attackers to execute arbitrary code via a long string in the jump parameter.belkin · n750 wireless routerEPSS67%3 exploitsPublished Nov 12, 2014
- CVE-2014-4076High 7.2Microsoft Windows Server 2003 SP2 allows local users to gain privileges via a crafted IOCTL call to (1) tcpip.sys or (2) tcpip6.sys, aka "TCP/IP Elevation of Privilege Vulnerability."microsoft · windows server 2003EPSS23%4 exploitsPublished Nov 11, 2014
- CVE-2014-8440Critical 10.0flash-plugin: multiple code execution flaws (APSB14-24)adobe · airEPSS82%3 exploitsPublished Nov 11, 2014
- CVE-2014-7228High 7.5Akeeba Restore (restore.php), as used in Joomla!joomla · joomla\!EPSS55%2 exploitsPublished Nov 3, 2014
- CVE-2013-7409High 7.5Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a .m3u (playlist) file.allplayer · allplayerEPSS68%15 exploitsPublished Oct 30, 2014
- CVE-2014-6037High 7.5Directory traversal vulnerability in the agentUpload servlet in ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 allows remote attackers to execute arbitrary code by uploading a ZIP file which contains an executable file with ..zohocorp · manageengine eventlog analyzerEPSS84%6 exploitsPublished Oct 26, 2014
- CVE-2014-3829Critical 10.0displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) session_id or (2) template_id parameter, related to the command_line variable.merethis · centreonEPSS80%2 exploitsPublished Oct 22, 2014
- CVE-2014-3828Critical 10.0Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allow remote attackers to execute arbitrary SQL commands via (1) the index_id parameter to views/graphs/common/makeXML_ListMetrics.php, (2) the sid parameter…merethis · centreonEPSS73%3 exploitsPublished Oct 22, 2014
- CVE-2014-5005High 7.5Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers to execute arbitrary code via a ..zohocorp · manageengine desktop centralEPSS78%4 exploitsPublished Oct 21, 2014
- CVE-2014-3704High 7.5Drupalgeddon — Drupal core SQL injectiondrupal · drupalEPSS100%13 exploitsPublished Oct 16, 2014
- CVE-2014-0569Critical 9.3flash-plugin: multiple code execution flaws (APSB14-22)adobe · air sdkEPSS91%2 exploitsPublished Oct 14, 2014
- CVE-2014-4872High 7.5BMC Track-It!bmc · track-it\!EPSS79%3 exploitsPublished Oct 10, 2014
- CVE-2014-6446Critical 9.8Infusionsoft Gravity Forms Add-on 1.5.3 - 1.5.10 - Arbitrary File Uploadinfusionsoft gravity forms project · infusionsoft gravity formsEPSS46%4 exploitsPublished Oct 5, 2014
- CVE-2013-3632High 8.8The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter.openmediavault · openmediavaultEPSS57%3 exploitsPublished Sep 29, 2014
- CVE-2014-7187Critical 10.0Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the…gnu · bashEPSS58%2 exploitsPublished Sep 28, 2014
- CVE-2014-7186Critical 10.0The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the "redir_stack"…gnu · bashEPSS64%2 exploitsPublished Sep 28, 2014
- CVE-2014-6277Critical 10.0GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access, and untrusted-pointer read and write…gnu · bashEPSS64%3 exploitsPublished Sep 27, 2014
- CVE-2014-5519High 7.5The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a device option in the edit[content] parameter to index.php/HeIp.phpwiki project · phpwikiEPSS65%4 exploitsPublished Sep 11, 2014
- CVE-2014-2624Critical 10.0Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2264.hp · network node manager iEPSS65%2 exploitsPublished Sep 10, 2014
- CVE-2014-0556Critical 10.0flash-plugin: multiple code execution or security bypass flaws (APSB14-21)adobe · adobe airEPSS85%2 exploitsPublished Sep 9, 2014
- CVE-2014-5377Medium 5.0ReadUsersFromMasterServlet in ManageEngine DeviceExpert before 5.9 build 5981 allows remote attackers to obtain user account credentials via a direct request.manageengine · device expertEPSS57%3 exploitsPublished Sep 4, 2014
- CVE-2014-5073High 7.5vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call.vmturbo · operations managerEPSS76%4 exploitsPublished Aug 29, 2014
- CVE-2014-5460High 8.8Slideshow Gallery < 1.4.7 - Arbitrary File Uploadtribulant · tibulant slideshow galleryEPSS71%6 exploitsPublished Aug 28, 2014
- CVE-2014-5350Medium 5.0Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via a (1) ..bitdefender · gravityzoneEPSS64%1 exploitPublished Aug 19, 2014
- CVE-2014-3914Critical 10.0Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in Rocket ServerGraph 1.2 allows remote attackers to (1) create arbitrary files via a ..rocketsoftware · rocket servergraphEPSS73%3 exploitsPublished Aug 7, 2014
- CVE-2014-4725Critical 9.8MailPoet Newsletters <= 2.6.6 - Arbitrary File Uploadmailpoet · mailpoet newslettersEPSS61%2 exploitsPublished Jul 31, 2014
- CVE-2014-4971High 7.2Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted address in an IOCTL call, related to (1) the MQAC.sys driver in the MQ…microsoft · windows xpEPSS23%9 exploitsPublished Jul 26, 2014
- CVE-2014-4511High 7.5Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in the URI of a request for a (1) blame, (2) file, or (3) stats page, as demonstrated by requests to blame/master/, master/, and stats/master/.gitlist · gitlistEPSS83%7 exploitsPublished Jul 22, 2014
- CVE-2014-0226Medium 6.8Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers…apache · http serverEPSS86%1 exploitPublished Jul 20, 2014
- CVE-2014-2364High 7.5Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter, (8) GetColor, (9)…advantech · advantech webaccessEPSS61%3 exploitsPublished Jul 19, 2014
- CVE-2014-2623Critical 10.0Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors.hp · storage data protectorEPSS91%8 exploitsPublished Jul 17, 2014
- CVE-2014-4977Medium 6.5Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) selectedUserGroup parameter in a create new user request to cgi-bin/admin.cgi or the (2) user_id parameter in the changeUnit…sonicwall · scrutinizerEPSS75%3 exploitsPublished Jul 16, 2014
- CVE-2013-6117High 7.5Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perform other actions via a request to TCP port 37777.dahuasecurity · dvr firmwareEPSS70%1 exploitPublished Jul 11, 2014
- CVE-2014-3888High 8.3Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled,…yokogawa · exaopcEPSS62%3 exploitsPublished Jul 10, 2014
- CVE-2013-7389Medium 4.3Multiple cross-site scripting (XSS) vulnerabilities in D-Link DIR-645 Router (Rev.dlink · dir-645EPSS28%3 exploitsPublished Jul 7, 2014
- CVE-2013-6221Critical 10.0Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server is enabled, allows remote attackers to create arbitrary files and consequently execute arbitrary code via unspecified vectors, aka…hp · service virtualizationEPSS78%1 exploitPublished Jun 18, 2014
- CVE-2014-3804Critical 10.0The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) update_system_info_debian_package, (2) ossec_task, (3) set_ossim_setup admin_ip, (4) sync_rserver, or (5) set_ossim_setup framework_ip request, a…alienvault · open source security information managementEPSS72%3 exploitsPublished Jun 13, 2014
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2014-5445 | Multiple absolute path traversal vulnerabilities in ZOHO ManageEngine Netflow Analyzer 8.6 through 10.2 and IT360 10.3 allow remote attackers or remote authenticated users to read arbitrary files via a full pathname in the schFilePath parameter to the (1) CSVServlet or (2)… zohocorp · manageengine netflow analyzer | Medium 5.0 | 98% | 2 exploits | |
| CVE-2014-8424 | ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication. arris · vap2500 firmware | High 7.8 | 60% | 2 exploits | |
| CVE-2014-8423 | Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute arbitrary commands via unknown vectors. arris · vap2500 firmware | Critical 10.0 | 62% | 2 exploits | |
| CVE-2014-9034 | wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to cause a denial of service (CPU consumption) via a long password that is improperly handled during hashing, a similar issue to… wordpress · wordpress | Medium 5.3 | 83% | 2 exploits | |
| CVE-2014-8420 | The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors. sonicwall · analyzer | Critical 9.0 | 24% | 1 exploit | |
| CVE-2014-9735 | Slider Revolution < 3.0.96 & Showbiz Pro < 1.7.1 - Missing Authorization to Arbitrary File Upload themepunch · showbiz pro | Critical 9.8 | 76% | 2 exploits | |
| CVE-2014-9016 | The password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes (aka phpass) module 6.x-2.x before 6.x-2.1 for Drupal allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted request. drupal · drupal | Medium 5.0 | 82% | 1 exploit | |
| CVE-2014-8998 | lib/message.php in X7 Chat 2.0.0 through 2.0.5.1 allows remote authenticated users to execute arbitrary PHP code via a crafted HTTP header to index.php, which is processed by the preg_replace function with the eval switch. x7chat · x7 chat | Medium 6.5 | 36% | 4 exploits | |
| CVE-2014-8598 | The XML Import/Export plugin in MantisBT 1.2.x does not restrict access, which allows remote attackers to (1) upload arbitrary XML files via the import page or (2) obtain sensitive information via the export page. mantisbt · mantisbt | Medium 6.4 | 38% | 2 exploits | |
| CVE-2014-7146 | The XmlImportExport plugin in MantisBT 1.2.17 and earlier allows remote attackers to execute arbitrary PHP code via a crafted (1) description field or (2) issuelink attribute in an XML file, which is not properly handled when executing the preg_replace function with the e… mantisbt · mantisbt | High 7.5 | 51% | 3 exploits | |
| CVE-2014-8517 | The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 through 6.0.6, and 6.1 through 6.1.5 allows remote attackers to execute arbitrary commands via a | (pipe) character at the end of an HTTP redirect. netbsd · netbsd | High 7.5 | 69% | 3 exploits | |
| CVE-2014-2268 | views/Index.php in the Install module in vTiger 6.0 before Security Patch 2 does not properly restrict access, which allows remote attackers to re-install the application via a request that sets the X-Requested-With HTTP header, as demonstrated by executing arbitrary PHP code… vtiger · vtiger crm | Medium 5.0 | 31% | 3 exploits | |
| CVE-2014-8799 | DukaPress < 2.5.4 - Directory Traversal dukapress · dukapress | High 7.5 | 68% | 2 exploits | |
| CVE-2014-1635 | Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103_WW_1.10.17m allows remote attackers to execute arbitrary code via a long string in the jump parameter. belkin · n750 wireless router | Critical 10.0 | 67% | 3 exploits | |
| CVE-2014-4076 | Microsoft Windows Server 2003 SP2 allows local users to gain privileges via a crafted IOCTL call to (1) tcpip.sys or (2) tcpip6.sys, aka "TCP/IP Elevation of Privilege Vulnerability." microsoft · windows server 2003 | High 7.2 | 23% | 4 exploits | |
| CVE-2014-8440 | flash-plugin: multiple code execution flaws (APSB14-24) adobe · air | Critical 10.0 | 82% | 3 exploits | |
| CVE-2014-7228 | Akeeba Restore (restore.php), as used in Joomla! joomla · joomla\! | High 7.5 | 55% | 2 exploits | |
| CVE-2013-7409 | Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a .m3u (playlist) file. allplayer · allplayer | High 7.5 | 68% | 15 exploits | |
| CVE-2014-6037 | Directory traversal vulnerability in the agentUpload servlet in ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 allows remote attackers to execute arbitrary code by uploading a ZIP file which contains an executable file with .. zohocorp · manageengine eventlog analyzer | High 7.5 | 84% | 6 exploits | |
| CVE-2014-3829 | displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) session_id or (2) template_id parameter, related to the command_line variable. merethis · centreon | Critical 10.0 | 80% | 2 exploits | |
| CVE-2014-3828 | Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allow remote attackers to execute arbitrary SQL commands via (1) the index_id parameter to views/graphs/common/makeXML_ListMetrics.php, (2) the sid parameter… merethis · centreon | Critical 10.0 | 73% | 3 exploits | |
| CVE-2014-5005 | Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers to execute arbitrary code via a .. zohocorp · manageengine desktop central | High 7.5 | 78% | 4 exploits | |
| CVE-2014-3704 | Drupalgeddon — Drupal core SQL injection drupal · drupal | High 7.5 | 100% | 13 exploits | |
| CVE-2014-0569 | flash-plugin: multiple code execution flaws (APSB14-22) adobe · air sdk | Critical 9.3 | 91% | 2 exploits | |
| CVE-2014-4872 | BMC Track-It! bmc · track-it\! | High 7.5 | 79% | 3 exploits | |
| CVE-2014-6446 | Infusionsoft Gravity Forms Add-on 1.5.3 - 1.5.10 - Arbitrary File Upload infusionsoft gravity forms project · infusionsoft gravity forms | Critical 9.8 | 46% | 4 exploits | |
| CVE-2013-3632 | The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter. openmediavault · openmediavault | High 8.8 | 57% | 3 exploits | |
| CVE-2014-7187 | Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the… gnu · bash | Critical 10.0 | 58% | 2 exploits | |
| CVE-2014-7186 | The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the "redir_stack"… gnu · bash | Critical 10.0 | 64% | 2 exploits | |
| CVE-2014-6277 | GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access, and untrusted-pointer read and write… gnu · bash | Critical 10.0 | 64% | 3 exploits | |
| CVE-2014-5519 | The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a device option in the edit[content] parameter to index.php/HeIp. phpwiki project · phpwiki | High 7.5 | 65% | 4 exploits | |
| CVE-2014-2624 | Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2264. hp · network node manager i | Critical 10.0 | 65% | 2 exploits | |
| CVE-2014-0556 | flash-plugin: multiple code execution or security bypass flaws (APSB14-21) adobe · adobe air | Critical 10.0 | 85% | 2 exploits | |
| CVE-2014-5377 | ReadUsersFromMasterServlet in ManageEngine DeviceExpert before 5.9 build 5981 allows remote attackers to obtain user account credentials via a direct request. manageengine · device expert | Medium 5.0 | 57% | 3 exploits | |
| CVE-2014-5073 | vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call. vmturbo · operations manager | High 7.5 | 76% | 4 exploits | |
| CVE-2014-5460 | Slideshow Gallery < 1.4.7 - Arbitrary File Upload tribulant · tibulant slideshow gallery | High 8.8 | 71% | 6 exploits | |
| CVE-2014-5350 | Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via a (1) .. bitdefender · gravityzone | Medium 5.0 | 64% | 1 exploit | |
| CVE-2014-3914 | Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in Rocket ServerGraph 1.2 allows remote attackers to (1) create arbitrary files via a .. rocketsoftware · rocket servergraph | Critical 10.0 | 73% | 3 exploits | |
| CVE-2014-4725 | MailPoet Newsletters <= 2.6.6 - Arbitrary File Upload mailpoet · mailpoet newsletters | Critical 9.8 | 61% | 2 exploits | |
| CVE-2014-4971 | Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted address in an IOCTL call, related to (1) the MQAC.sys driver in the MQ… microsoft · windows xp | High 7.2 | 23% | 9 exploits | |
| CVE-2014-4511 | Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in the URI of a request for a (1) blame, (2) file, or (3) stats page, as demonstrated by requests to blame/master/, master/, and stats/master/. gitlist · gitlist | High 7.5 | 83% | 7 exploits | |
| CVE-2014-0226 | Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers… apache · http server | Medium 6.8 | 86% | 1 exploit | |
| CVE-2014-2364 | Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter, (8) GetColor, (9)… advantech · advantech webaccess | High 7.5 | 61% | 3 exploits | |
| CVE-2014-2623 | Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors. hp · storage data protector | Critical 10.0 | 91% | 8 exploits | |
| CVE-2014-4977 | Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) selectedUserGroup parameter in a create new user request to cgi-bin/admin.cgi or the (2) user_id parameter in the changeUnit… sonicwall · scrutinizer | Medium 6.5 | 75% | 3 exploits | |
| CVE-2013-6117 | Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perform other actions via a request to TCP port 37777. dahuasecurity · dvr firmware | High 7.5 | 70% | 1 exploit | |
| CVE-2014-3888 | Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled,… yokogawa · exaopc | High 8.3 | 62% | 3 exploits | |
| CVE-2013-7389 | Multiple cross-site scripting (XSS) vulnerabilities in D-Link DIR-645 Router (Rev. dlink · dir-645 | Medium 4.3 | 28% | 3 exploits | |
| CVE-2013-6221 | Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server is enabled, allows remote attackers to create arbitrary files and consequently execute arbitrary code via unspecified vectors, aka… hp · service virtualization | Critical 10.0 | 78% | 1 exploit | |
| CVE-2014-3804 | The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) update_system_info_debian_package, (2) ossec_task, (3) set_ossim_setup admin_ip, (4) sync_rserver, or (5) set_ossim_setup framework_ip request, a… alienvault · open source security information management | Critical 10.0 | 72% | 3 exploits |
Showing 1,301–1,350 of 2,494
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.