Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
2,494 vulnerabilities · highest exploit probability first
- CVE-2013-5877Medium 5.0Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.0, and 12.2.1 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.oracle · supply chain products suiteEPSS55%1 exploitPublished Jan 15, 2014
- CVE-2013-5795Medium 5.0Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.1, 12.2.2, and 12.2.3 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.oracle · supply chain products suiteEPSS59%1 exploitPublished Jan 15, 2014
- CVE-2013-2827High 7.5An unspecified ActiveX control in WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before 3.1.2 allows remote attackers to download arbitrary DLL code onto a client machine and execute this code via the ProjectURL property value.wellintech · kingalarm\&eventEPSS48%2 exploitsPublished Jan 15, 2014
- CVE-2014-8636High 7.5Mozilla: XrayWrapper bypass through DOM objects (MFSA 2015-09)mozilla · firefoxEPSS65%2 exploitsPublished Jan 15, 2014
- CVE-2014-0659Critical 10.0The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote attackers to read credential and configuration data, and execute arbitrary…cisco · rvs4000EPSS74%2 exploitsPublished Jan 12, 2014
- CVE-2013-6955Critical 10.0webman/imageSelector.cgi in Synology DiskStation Manager (DSM) 4.0 before 4.0-2259, 4.2 before 4.2-3243, and 4.3 before 4.3-3810 Update 1 allows remote attackers to append data to arbitrary files, and consequently execute arbitrary code, via a pathname in the SLICEUPLOAD…synology · diskstation managerEPSS85%2 exploitsPublished Jan 9, 2014
- CVE-2013-6194Critical 10.0Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1905.hp · storage data protectorEPSS66%3 exploitsPublished Jan 4, 2014
- CVE-2013-2347Critical 10.0The Backup Client Service (OmniInet.exe) in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary commands or cause a denial of service via a crafted EXEC_BAR packet to TCP port 5555, aka ZDI-CAN-1885.hp · storage data protectorEPSS66%3 exploitsPublished Jan 4, 2014
- CVE-2013-7260High 7.5Multiple stack-based buffer overflows in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allow remote attackers to execute arbitrary code via a long (1) version number or (2) encoding declaration in the XML declaration of an RMP file,…realnetworks · realplayerEPSS67%2 exploitsPublished Jan 3, 2014
- CVE-2013-5211Medium 5.0The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.ntp · ntpEPSS98%1 exploitPublished Jan 2, 2014
- CVE-2012-0262Critical 10.0op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter.op5 · monitorEPSS73%2 exploitsPublished Dec 31, 2013
- CVE-2012-0261Critical 10.0license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for an install action.op5 · monitorEPSS74%2 exploitsPublished Dec 31, 2013
- CVE-2013-7091Medium 5.0Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zimbra 7.2.2 and 8.0.2 allows remote attackers to read arbitrary files via a ..synacor · zimbra collaboration suiteEPSS86%4 exploitsPublished Dec 13, 2013
- CVE-2013-4988Critical 9.3Stack-based buffer overflow in IcoFX 2.5 and earlier allows remote attackers to execute arbitrary code via a long idCount value in an ICONDIR structure in an ICO file.icofx · icofxEPSS67%6 exploitsPublished Dec 13, 2013
- CVE-2013-2751Critical 10.0Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to execute arbitrary Perl code via a crafted request, related to the "forgot password workflow."netgear · raidiatorEPSS72%3 exploitsPublished Dec 12, 2013
- CVE-2013-3623Critical 10.0Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro X9 generation motherboards allow remote attackers to execute arbitrary code via the (1)…supermicro · intelligent platform management firmwareEPSS72%3 exploitsPublished Dec 10, 2013
- CVE-2013-5447Medium 6.8Stack-based buffer overflow in IBM Forms Viewer 4.x before 4.0.0.3 and 8.x before 8.0.1.1 allows remote attackers to execute arbitrary code via an XFDL form with a long fontname value.ibm · forms viewerEPSS34%2 exploitsPublished Dec 10, 2013
- CVE-2013-5331Critical 9.3flash-plugin: multiple code execution flaws (APSB13-28)adobe · airEPSS72%2 exploitsPublished Dec 10, 2013
- CVE-2013-1349High 7.5Eval injection vulnerability in ajax.php in openSIS 4.5 through 5.2 allows remote attackers to execute arbitrary PHP code via the modname parameter.os4ed · opensisEPSS23%2 exploitsPublished Dec 9, 2013
- CVE-2013-4212Medium 6.8Certain getText methods in the ActionSupport controller in Apache Roller before 5.0.2 allow remote attackers to execute arbitrary OGNL expressions via the first or second parameter, as demonstrated by the pageTitle parameter in the !getPageTitle sub-URL to roller-ui/login.rol,…apache · rollerEPSS81%3 exploitsPublished Dec 7, 2013
- CVE-2013-6935Critical 9.3Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a long string in the SourcePath value in a .wcf file.videocharge · watermark masterEPSS32%3 exploitsPublished Dec 4, 2013
- CVE-2013-4547High 7.5nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI.f5 · nginxEPSS68%1 exploitPublished Nov 23, 2013
- CVE-2013-6829High 7.5admin/confnetworking.html in PineApp Mail-SeCure allows remote attackers to execute arbitrary commands via shell metacharacters in the pinghost parameter during a ping operation.pineapp · mail-secureEPSS80%2 exploitsPublished Nov 20, 2013
- CVE-2013-4557High 7.5The Security Screen (_core_/securite/ecran_securite.php) before 1.1.8 for SPIP, as used in SPIP 3.0.x before 3.0.12, allows remote attackers to execute arbitrary PHP via the connect parameter.spip · spipEPSS25%1 exploitPublished Nov 18, 2013
- CVE-2013-4837Critical 10.0Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1832.hp · loadrunnerEPSS63%2 exploitsPublished Nov 4, 2013
- CVE-2013-4835High 7.5The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary code via a direct request to the issueSiebelCmd method, aka ZDI-CAN-1765.hp · sitescopeEPSS71%2 exploitsPublished Nov 4, 2013
- CVE-2013-6129High 7.5The install/upgrade.php scripts in vBulletin 4.1 and 5 allow remote attackers to create administrative accounts via the customerid, htmldata[password], htmldata[confirmpassword], and htmldata[email] parameters, as exploited in the wild in October 2013.vbulletin · vbulletinEPSS52%1 exploitPublished Oct 19, 2013
- CVE-2013-4822Critical 10.0Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent Management System Software Module (aka BIMS) allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1606.hp · imc branch intelligent management system software moduleEPSS63%2 exploitsPublished Oct 13, 2013
- CVE-2013-2578Critical 10.0cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the ServerName parameter and (2)…tp-link · tl-sc3130EPSS74%2 exploitsPublished Oct 11, 2013
- CVE-2013-5576Medium 6.8administrator/components/com_media/helpers/media.php in the media manager in Joomla!joomla · joomla\!EPSS48%3 exploitsPublished Oct 9, 2013
- CVE-2013-5486Critical 10.0Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036.cisco · prime data center network managerEPSS76%3 exploitsPublished Sep 23, 2013
- CVE-2013-4341Medium 4.3Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 allow remote attackers to inject arbitrary web script or HTML via a crafted blog link within an RSS feed.moodle · moodleEPSS22%3 exploitsPublished Sep 16, 2013
- CVE-2013-4811Critical 10.0UpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the adCert argument, which allows remote attackers to upload .jsp files and consequently…hp · identity driven managerEPSS71%2 exploitsPublished Sep 16, 2013
- CVE-2013-4812Critical 10.0UpdateCertificatesServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the fileName argument, which allows remote attackers to upload .jsp files and consequently…hp · identity driven managerEPSS52%2 exploitsPublished Sep 16, 2013
- CVE-2013-3205Critical 9.3Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."microsoft · internet explorerEPSS66%2 exploitsPublished Sep 11, 2013
- CVE-2013-0810High 8.1Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, and Windows Server 2008 SP2 allow remote attackers to execute arbitrary code via a crafted screensaver in a theme file, aka "Windows Theme File Remote Code Execution Vulnerability."microsoft · windows server 2003EPSS60%2 exploitsPublished Sep 11, 2013
- CVE-2013-4983Critical 10.0The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to end-user/index.php.sophos · web appliance firmwareEPSS90%3 exploitsPublished Sep 10, 2013
- CVE-2013-2068Critical 9.4cfme: CFME 2.0 multiple zip file upload path traversal vulnerabilitiesredhat · cloudforms management engineEPSS59%2 exploitsPublished Sep 4, 2013
- CVE-2013-3184Critical 9.3Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."microsoft · internet explorerEPSS58%2 exploitsPublished Aug 14, 2013
- CVE-2013-1710Critical 10.0Mozilla: CRMF requests allow for code execution and XSS attacks (MFSA 2013-69)mozilla · firefoxEPSS40%3 exploitsPublished Aug 7, 2013
- CVE-2013-4124Medium 5.0Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.samba · sambaEPSS69%1 exploitPublished Aug 6, 2013
- CVE-2013-5019Critical 10.0Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resource name in an HTTP request.vector · ultra mini httpdEPSS64%8 exploitsPublished Jul 31, 2013
- CVE-2013-2367Critical 10.0Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1678.hp · sitescopeEPSS69%2 exploitsPublished Jul 31, 2013
- CVE-2013-4800Critical 9.3Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1735.hp · loadrunnerEPSS39%2 exploitsPublished Jul 29, 2013
- CVE-2013-4798Critical 10.0Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1705.hp · loadrunnerEPSS67%2 exploitsPublished Jul 29, 2013
- CVE-2013-2370High 7.5Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1671.hp · loadrunnerEPSS62%2 exploitsPublished Jul 29, 2013
- CVE-2013-2028High 7.5The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness…f5 · nginxEPSS87%6 exploitsPublished Jul 18, 2013
- CVE-2013-3763Medium 5.5Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 7.4.0 and 7.5.1.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2013-3764.oracle · fusion middlewareEPSS60%2 exploitsPublished Jul 17, 2013
- CVE-2013-4123Medium 5.0client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote attackers to cause a denial of service via a crafted port number in a HTTP Host header.squid-cache · squidEPSS80%1 exploitPublished Jul 13, 2013
- CVE-2013-1362High 7.5Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor (NRPE) before 2.14 might allow remote attackers to execute arbitrary shell commands via "$()" shell metacharacters, which are processed by bash.nagios · remote plug in executorEPSS66%2 exploitsPublished Jul 9, 2013
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2013-5877 | Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.0, and 12.2.1 allows remote attackers to affect confidentiality via unknown vectors related to DM Others. oracle · supply chain products suite | Medium 5.0 | 55% | 1 exploit | |
| CVE-2013-5795 | Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.1, 12.2.2, and 12.2.3 allows remote attackers to affect confidentiality via unknown vectors related to DM Others. oracle · supply chain products suite | Medium 5.0 | 59% | 1 exploit | |
| CVE-2013-2827 | An unspecified ActiveX control in WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before 3.1.2 allows remote attackers to download arbitrary DLL code onto a client machine and execute this code via the ProjectURL property value. wellintech · kingalarm\&event | High 7.5 | 48% | 2 exploits | |
| CVE-2014-8636 | Mozilla: XrayWrapper bypass through DOM objects (MFSA 2015-09) mozilla · firefox | High 7.5 | 65% | 2 exploits | |
| CVE-2014-0659 | The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote attackers to read credential and configuration data, and execute arbitrary… cisco · rvs4000 | Critical 10.0 | 74% | 2 exploits | |
| CVE-2013-6955 | webman/imageSelector.cgi in Synology DiskStation Manager (DSM) 4.0 before 4.0-2259, 4.2 before 4.2-3243, and 4.3 before 4.3-3810 Update 1 allows remote attackers to append data to arbitrary files, and consequently execute arbitrary code, via a pathname in the SLICEUPLOAD… synology · diskstation manager | Critical 10.0 | 85% | 2 exploits | |
| CVE-2013-6194 | Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1905. hp · storage data protector | Critical 10.0 | 66% | 3 exploits | |
| CVE-2013-2347 | The Backup Client Service (OmniInet.exe) in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary commands or cause a denial of service via a crafted EXEC_BAR packet to TCP port 5555, aka ZDI-CAN-1885. hp · storage data protector | Critical 10.0 | 66% | 3 exploits | |
| CVE-2013-7260 | Multiple stack-based buffer overflows in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allow remote attackers to execute arbitrary code via a long (1) version number or (2) encoding declaration in the XML declaration of an RMP file,… realnetworks · realplayer | High 7.5 | 67% | 2 exploits | |
| CVE-2013-5211 | The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013. ntp · ntp | Medium 5.0 | 98% | 1 exploit | |
| CVE-2012-0262 | op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter. op5 · monitor | Critical 10.0 | 73% | 2 exploits | |
| CVE-2012-0261 | license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for an install action. op5 · monitor | Critical 10.0 | 74% | 2 exploits | |
| CVE-2013-7091 | Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zimbra 7.2.2 and 8.0.2 allows remote attackers to read arbitrary files via a .. synacor · zimbra collaboration suite | Medium 5.0 | 86% | 4 exploits | |
| CVE-2013-4988 | Stack-based buffer overflow in IcoFX 2.5 and earlier allows remote attackers to execute arbitrary code via a long idCount value in an ICONDIR structure in an ICO file. icofx · icofx | Critical 9.3 | 67% | 6 exploits | |
| CVE-2013-2751 | Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to execute arbitrary Perl code via a crafted request, related to the "forgot password workflow." netgear · raidiator | Critical 10.0 | 72% | 3 exploits | |
| CVE-2013-3623 | Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro X9 generation motherboards allow remote attackers to execute arbitrary code via the (1)… supermicro · intelligent platform management firmware | Critical 10.0 | 72% | 3 exploits | |
| CVE-2013-5447 | Stack-based buffer overflow in IBM Forms Viewer 4.x before 4.0.0.3 and 8.x before 8.0.1.1 allows remote attackers to execute arbitrary code via an XFDL form with a long fontname value. ibm · forms viewer | Medium 6.8 | 34% | 2 exploits | |
| CVE-2013-5331 | flash-plugin: multiple code execution flaws (APSB13-28) adobe · air | Critical 9.3 | 72% | 2 exploits | |
| CVE-2013-1349 | Eval injection vulnerability in ajax.php in openSIS 4.5 through 5.2 allows remote attackers to execute arbitrary PHP code via the modname parameter. os4ed · opensis | High 7.5 | 23% | 2 exploits | |
| CVE-2013-4212 | Certain getText methods in the ActionSupport controller in Apache Roller before 5.0.2 allow remote attackers to execute arbitrary OGNL expressions via the first or second parameter, as demonstrated by the pageTitle parameter in the !getPageTitle sub-URL to roller-ui/login.rol,… apache · roller | Medium 6.8 | 81% | 3 exploits | |
| CVE-2013-6935 | Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a long string in the SourcePath value in a .wcf file. videocharge · watermark master | Critical 9.3 | 32% | 3 exploits | |
| CVE-2013-4547 | nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI. f5 · nginx | High 7.5 | 68% | 1 exploit | |
| CVE-2013-6829 | admin/confnetworking.html in PineApp Mail-SeCure allows remote attackers to execute arbitrary commands via shell metacharacters in the pinghost parameter during a ping operation. pineapp · mail-secure | High 7.5 | 80% | 2 exploits | |
| CVE-2013-4557 | The Security Screen (_core_/securite/ecran_securite.php) before 1.1.8 for SPIP, as used in SPIP 3.0.x before 3.0.12, allows remote attackers to execute arbitrary PHP via the connect parameter. spip · spip | High 7.5 | 25% | 1 exploit | |
| CVE-2013-4837 | Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1832. hp · loadrunner | Critical 10.0 | 63% | 2 exploits | |
| CVE-2013-4835 | The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary code via a direct request to the issueSiebelCmd method, aka ZDI-CAN-1765. hp · sitescope | High 7.5 | 71% | 2 exploits | |
| CVE-2013-6129 | The install/upgrade.php scripts in vBulletin 4.1 and 5 allow remote attackers to create administrative accounts via the customerid, htmldata[password], htmldata[confirmpassword], and htmldata[email] parameters, as exploited in the wild in October 2013. vbulletin · vbulletin | High 7.5 | 52% | 1 exploit | |
| CVE-2013-4822 | Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent Management System Software Module (aka BIMS) allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1606. hp · imc branch intelligent management system software module | Critical 10.0 | 63% | 2 exploits | |
| CVE-2013-2578 | cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the ServerName parameter and (2)… tp-link · tl-sc3130 | Critical 10.0 | 74% | 2 exploits | |
| CVE-2013-5576 | administrator/components/com_media/helpers/media.php in the media manager in Joomla! joomla · joomla\! | Medium 6.8 | 48% | 3 exploits | |
| CVE-2013-5486 | Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. cisco · prime data center network manager | Critical 10.0 | 76% | 3 exploits | |
| CVE-2013-4341 | Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 allow remote attackers to inject arbitrary web script or HTML via a crafted blog link within an RSS feed. moodle · moodle | Medium 4.3 | 22% | 3 exploits | |
| CVE-2013-4811 | UpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the adCert argument, which allows remote attackers to upload .jsp files and consequently… hp · identity driven manager | Critical 10.0 | 71% | 2 exploits | |
| CVE-2013-4812 | UpdateCertificatesServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the fileName argument, which allows remote attackers to upload .jsp files and consequently… hp · identity driven manager | Critical 10.0 | 52% | 2 exploits | |
| CVE-2013-3205 | Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 66% | 2 exploits | |
| CVE-2013-0810 | Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, and Windows Server 2008 SP2 allow remote attackers to execute arbitrary code via a crafted screensaver in a theme file, aka "Windows Theme File Remote Code Execution Vulnerability." microsoft · windows server 2003 | High 8.1 | 60% | 2 exploits | |
| CVE-2013-4983 | The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to end-user/index.php. sophos · web appliance firmware | Critical 10.0 | 90% | 3 exploits | |
| CVE-2013-2068 | cfme: CFME 2.0 multiple zip file upload path traversal vulnerabilities redhat · cloudforms management engine | Critical 9.4 | 59% | 2 exploits | |
| CVE-2013-3184 | Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 58% | 2 exploits | |
| CVE-2013-1710 | Mozilla: CRMF requests allow for code execution and XSS attacks (MFSA 2013-69) mozilla · firefox | Critical 10.0 | 40% | 3 exploits | |
| CVE-2013-4124 | Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet. samba · samba | Medium 5.0 | 69% | 1 exploit | |
| CVE-2013-5019 | Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resource name in an HTTP request. vector · ultra mini httpd | Critical 10.0 | 64% | 8 exploits | |
| CVE-2013-2367 | Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1678. hp · sitescope | Critical 10.0 | 69% | 2 exploits | |
| CVE-2013-4800 | Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1735. hp · loadrunner | Critical 9.3 | 39% | 2 exploits | |
| CVE-2013-4798 | Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1705. hp · loadrunner | Critical 10.0 | 67% | 2 exploits | |
| CVE-2013-2370 | Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1671. hp · loadrunner | High 7.5 | 62% | 2 exploits | |
| CVE-2013-2028 | The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness… f5 · nginx | High 7.5 | 87% | 6 exploits | |
| CVE-2013-3763 | Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 7.4.0 and 7.5.1.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2013-3764. oracle · fusion middleware | Medium 5.5 | 60% | 2 exploits | |
| CVE-2013-4123 | client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote attackers to cause a denial of service via a crafted port number in a HTTP Host header. squid-cache · squid | Medium 5.0 | 80% | 1 exploit | |
| CVE-2013-1362 | Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor (NRPE) before 2.14 might allow remote attackers to execute arbitrary shell commands via "$()" shell metacharacters, which are processed by bash. nagios · remote plug in executor | High 7.5 | 66% | 2 exploits |
Showing 1,401–1,450 of 2,494
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.