Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 19, 2026
401 vulnerabilities · highest exploit probability first
- CVE-2019-11358Medium 6.1XSS in jQuery as used in Drupal, Backdrop CMS, and other productsbackdropcms · backdropEPSS87%1 exploitPublished Apr 26, 2019
- CVE-2019-9692Medium 6.5class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a watermark file has a standard image file extension (GIF, JPG, JPEG, or PNG).cmsmadesimple · cms made simpleEPSS46%6 exploitsPublished Mar 11, 2019
- CVE-2019-8953Medium 6.1The HAProxy package before 0.59_16 for pfSense has XSS via the desc (aka Description) or table_actionsaclN parameter, related to haproxy_listeners.php and haproxy_listeners_edit.php.netgate · haproxyEPSS52%2 exploitsPublished Feb 20, 2019
- CVE-2019-8943Medium 6.5WordPress through 5.0.3 allows Path Traversal in wp_crop_image().wordpress · wordpressEPSS92%7 exploitsPublished Feb 20, 2019
- CVE-2019-6111Medium 5.9Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client.openbsd · opensshEPSS58%3 exploitsPublished Jan 31, 2019
- CVE-2013-7108Medium 5.5nagios3 - security updateicinga · icingaEPSS62%1 exploitPublished Dec 24, 2018
- CVE-2018-11770Medium 4.2org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 Improper Authentication vulnerabilityapache · sparkEPSS66%1 exploitPublished Nov 9, 2018
- CVE-2018-14665Medium 6.6An incorrect permission check for -modulepath and -logfile options when starting Xorg.x.org · x serverEPSS27%18 exploitsPublished Oct 25, 2018
- CVE-2018-17128Medium 5.4A Persistent XSS issue was discovered in the Visual Editor in MyBB before 1.8.19 via a Video MyCode.mybb · mybbEPSS75%2 exploitsPublished Sep 17, 2018
- CVE-2018-15473Medium 5.9OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.openbsd · opensshEPSS99%6 exploitsPublished Aug 17, 2018
- CVE-2018-1612Medium 5.8IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and obtain sensitive information.ibm · qradar security information and event managerEPSS56%2 exploitsPublished Jul 17, 2018
- CVE-2018-12998Medium 6.1A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 allows remote…zohocorp · firewall analyzerEPSS99%2 exploitsPublished Jun 29, 2018
- CVE-2018-11409Medium 5.3Splunk through 7.0.1 allows information disclosure by appending raw/services/server/info/server-info?output_mode=json to a query, as demonstrated by discovering a license key.splunk · splunkEPSS98%3 exploitsPublished Jun 8, 2018
- CVE-2018-3639Medium 5.5Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis,…EPSS61%2 exploitsPublished May 22, 2018
- CVE-2018-9948Medium 6.5This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935.foxitsoftware · foxit readerEPSS63%3 exploitsPublished May 17, 2018
- CVE-2018-8831Medium 6.1A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the context of the victim user's browser via a playlist.kodi · kodiEPSS52%2 exploitsPublished Apr 18, 2018
- CVE-2018-8770Medium 5.3Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php, controllers/getConfigTest.php, controllers/getUpdateTest.php, controllers/postclientdataTest.php, controllers/posterrorTest.php, controllers/posteventTest.php, controllers/posttagTest.php,…cobub · razorEPSS59%3 exploitsPublished Mar 18, 2018
- CVE-2018-7286Medium 6.5res_pjsip allows remote authenticated users to crash Asterisk (segmentation fault) by sending a number of SIP INVITE messages on a TCP or TLS connection and then suddenly closing the connection.digium · asteriskEPSS53%2 exploitsPublished Feb 21, 2018
- CVE-2017-5715Medium 5.6Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.EPSS74%3 exploitsPublished Jan 4, 2018
- CVE-2018-0780Medium 5.3Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure…microsoft · edgeEPSS59%2 exploitsPublished Jan 4, 2018
- CVE-2018-0767Medium 5.3Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure…microsoft · edgeEPSS65%1 exploitPublished Jan 4, 2018
- CVE-2017-5753Medium 5.6Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.EPSS94%Ransomware3 exploits1 actorPublished Jan 4, 2018
- CVE-2015-3224Medium 4.3Web Console (Ruby gem) contains whitelisted_ips bypassrubyonrails · web consoleEPSS45%2 exploitsPublished Oct 24, 2017
- CVE-2017-14494Medium 5.9dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.thekelleys · dnsmasqEPSS68%1 exploitPublished Oct 3, 2017
- CVE-2017-9554Medium 5.3An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers to enumerate valid usernames via unspecified vectors.synology · diskstation managerEPSS77%1 exploitPublished Jul 24, 2017
- CVE-2017-3548Medium 6.5Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.oracle · peoplesoft enterprise peopletoolsEPSS51%2 exploitsPublished Apr 24, 2017
- CVE-2015-8256Medium 6.1Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras.axis · network camera firmwareEPSS51%3 exploitsPublished Apr 17, 2017
- CVE-2016-5312Medium 6.5Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a ..symantec · messaging gatewayEPSS54%3 exploitsPublished Apr 14, 2017
- CVE-2017-0038Medium 5.5gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive…microsoft · windows 10EPSS82%1 exploitPublished Feb 20, 2017
- CVE-2016-6210Medium 5.9sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large…openbsd · opensshEPSS89%2 exploitsPublished Feb 13, 2017
- CVE-2017-5487Medium 5.3wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote attackers to obtain sensitive information via a wp-json/wp/v2/users request.wordpress · wordpressEPSS87%1 exploitPublished Jan 15, 2017
- CVE-2016-7237Medium 6.5Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote…microsoft · windows 10EPSS67%1 exploitPublished Nov 10, 2016
- CVE-2016-3209Medium 5.5Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for…microsoft · live meetingEPSS54%1 exploitPublished Oct 13, 2016
- CVE-2016-2107Medium 5.9The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session.openssl · opensslEPSS89%1 exploitPublished May 5, 2016
- CVE-2015-8399Medium 4.3Atlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files via the decoratorName parameter to (1) spaces/viewdefaultdecorator.action or (2) admin/viewdefaultdecorator.action.atlassian · confluenceEPSS60%1 exploitPublished Apr 11, 2016
- CVE-2016-0492Medium 6.4Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Load Testing for Web Apps, a different…oracle · application testing suiteEPSS92%6 exploitsPublished Jan 21, 2016
- CVE-2016-0491Medium 6.4Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect integrity and availability via unknown vectors related to Load Testing for Web Apps.oracle · application testing suiteEPSS80%6 exploitsPublished Jan 21, 2016
- CVE-2015-8660Medium 6.7The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.linux · linux kernelEPSS22%4 exploitsPublished Dec 28, 2015
- CVE-2015-7309Medium 6.5The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, which allows remote authenticated users to execute arbitrary code by renaming a crafted file and then directly accessing it.boltcms · boltEPSS39%4 exploitsPublished Sep 22, 2015
- CVE-2015-5603Medium 6.5The HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java code via unspecified vectors, related to "Velocity Template Injection Vulnerability."atlassian · hipchatEPSS59%3 exploitsPublished Sep 21, 2015
- CVE-2015-6973Medium 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to hijack the authentication of administrators for requests that (1) change a password via a crafted request to user-password.jsp, (2) add users via a crafted…igniterealtime · openfireEPSS65%2 exploitsPublished Sep 16, 2015
- CVE-2015-6967Medium 6.5Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in…nibbleblog · nibbleblogEPSS49%3 exploitsPublished Sep 16, 2015
- CVE-2015-1487Medium 5.5The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to write to arbitrary files, and consequently obtain administrator privileges, via a crafted filename.symantec · endpoint protection managerEPSS52%2 exploitsPublished Jul 31, 2015
- CVE-2015-1793Medium 6.5The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote attackers to spoof a Certification…openssl · opensslEPSS58%1 exploitPublished Jul 9, 2015
- CVE-2015-5453Medium 6.5Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the id parameter to ADMIN/mailqueue.spl.watchguard · xcsEPSS59%5 exploitsPublished Jul 8, 2015
- CVE-2015-2997Medium 5.0SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an invalid value in the accountid parameter to getAgentLogFile, as demonstrated by a large directory traversal sequence, which reveals the installation path in an error message.sysaid · sysaidEPSS57%2 exploitsPublished Jun 8, 2015
- CVE-2015-2995Medium 6.8The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote attackers to upload and execute arbitrary files via a NULL byte after the extension, as demonstrated by a .war%00 file.sysaid · sysaidEPSS34%4 exploitsPublished Jun 8, 2015
- CVE-2015-2994Medium 6.5Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators to execute arbitrary code by uploading a file with a .jsp extension, then accessing it via a direct request to the file in icons/user_photo/.sysaid · sysaidEPSS50%4 exploitsPublished Jun 8, 2015
- CVE-2015-1397Medium 6.5SQL injection vulnerability in the getCsvFile function in the Mage_Adminhtml_Block_Widget_Grid class in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allows remote administrators to execute arbitrary SQL commands via the popularity[field_expr]…magento · magentoEPSS56%1 exploitPublished Apr 29, 2015
- CVE-2015-2295Medium 6.8Cross-site request forgery (CSRF) vulnerability in system_firmware_restorefullbackup.php in the WebGUI in pfSense before 2.2.1 allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary files via the deletefile parameter.netgate · pfsenseEPSS66%2 exploitsPublished Apr 10, 2015
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-11358 | XSS in jQuery as used in Drupal, Backdrop CMS, and other products backdropcms · backdrop | Medium 6.1 | 87% | 1 exploit | |
| CVE-2019-9692 | class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a watermark file has a standard image file extension (GIF, JPG, JPEG, or PNG). cmsmadesimple · cms made simple | Medium 6.5 | 46% | 6 exploits | |
| CVE-2019-8953 | The HAProxy package before 0.59_16 for pfSense has XSS via the desc (aka Description) or table_actionsaclN parameter, related to haproxy_listeners.php and haproxy_listeners_edit.php. netgate · haproxy | Medium 6.1 | 52% | 2 exploits | |
| CVE-2019-8943 | WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). wordpress · wordpress | Medium 6.5 | 92% | 7 exploits | |
| CVE-2019-6111 | Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. openbsd · openssh | Medium 5.9 | 58% | 3 exploits | |
| CVE-2013-7108 | nagios3 - security update icinga · icinga | Medium 5.5 | 62% | 1 exploit | |
| CVE-2018-11770 | org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 Improper Authentication vulnerability apache · spark | Medium 4.2 | 66% | 1 exploit | |
| CVE-2018-14665 | An incorrect permission check for -modulepath and -logfile options when starting Xorg. x.org · x server | Medium 6.6 | 27% | 18 exploits | |
| CVE-2018-17128 | A Persistent XSS issue was discovered in the Visual Editor in MyBB before 1.8.19 via a Video MyCode. mybb · mybb | Medium 5.4 | 75% | 2 exploits | |
| CVE-2018-15473 | OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c. openbsd · openssh | Medium 5.9 | 99% | 6 exploits | |
| CVE-2018-1612 | IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and obtain sensitive information. ibm · qradar security information and event manager | Medium 5.8 | 56% | 2 exploits | |
| CVE-2018-12998 | A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 allows remote… zohocorp · firewall analyzer | Medium 6.1 | 99% | 2 exploits | |
| CVE-2018-11409 | Splunk through 7.0.1 allows information disclosure by appending raw/services/server/info/server-info?output_mode=json to a query, as demonstrated by discovering a license key. splunk · splunk | Medium 5.3 | 98% | 3 exploits | |
| CVE-2018-3639 | Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis,… | Medium 5.5 | 61% | 2 exploits | |
| CVE-2018-9948 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. foxitsoftware · foxit reader | Medium 6.5 | 63% | 3 exploits | |
| CVE-2018-8831 | A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the context of the victim user's browser via a playlist. kodi · kodi | Medium 6.1 | 52% | 2 exploits | |
| CVE-2018-8770 | Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php, controllers/getConfigTest.php, controllers/getUpdateTest.php, controllers/postclientdataTest.php, controllers/posterrorTest.php, controllers/posteventTest.php, controllers/posttagTest.php,… cobub · razor | Medium 5.3 | 59% | 3 exploits | |
| CVE-2018-7286 | res_pjsip allows remote authenticated users to crash Asterisk (segmentation fault) by sending a number of SIP INVITE messages on a TCP or TLS connection and then suddenly closing the connection. digium · asterisk | Medium 6.5 | 53% | 2 exploits | |
| CVE-2017-5715 | Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. | Medium 5.6 | 74% | 3 exploits | |
| CVE-2018-0780 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure… microsoft · edge | Medium 5.3 | 59% | 2 exploits | |
| CVE-2018-0767 | Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure… microsoft · edge | Medium 5.3 | 65% | 1 exploit | |
| CVE-2017-5753 | Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. | Medium 5.6 | 94% | Ransomware3 exploits1 actor | |
| CVE-2015-3224 | Web Console (Ruby gem) contains whitelisted_ips bypass rubyonrails · web console | Medium 4.3 | 45% | 2 exploits | |
| CVE-2017-14494 | dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests. thekelleys · dnsmasq | Medium 5.9 | 68% | 1 exploit | |
| CVE-2017-9554 | An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers to enumerate valid usernames via unspecified vectors. synology · diskstation manager | Medium 5.3 | 77% | 1 exploit | |
| CVE-2017-3548 | Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. oracle · peoplesoft enterprise peopletools | Medium 6.5 | 51% | 2 exploits | |
| CVE-2015-8256 | Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras. axis · network camera firmware | Medium 6.1 | 51% | 3 exploits | |
| CVE-2016-5312 | Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. symantec · messaging gateway | Medium 6.5 | 54% | 3 exploits | |
| CVE-2017-0038 | gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive… microsoft · windows 10 | Medium 5.5 | 82% | 1 exploit | |
| CVE-2016-6210 | sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large… openbsd · openssh | Medium 5.9 | 89% | 2 exploits | |
| CVE-2017-5487 | wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote attackers to obtain sensitive information via a wp-json/wp/v2/users request. wordpress · wordpress | Medium 5.3 | 87% | 1 exploit | |
| CVE-2016-7237 | Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote… microsoft · windows 10 | Medium 6.5 | 67% | 1 exploit | |
| CVE-2016-3209 | Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for… microsoft · live meeting | Medium 5.5 | 54% | 1 exploit | |
| CVE-2016-2107 | The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. openssl · openssl | Medium 5.9 | 89% | 1 exploit | |
| CVE-2015-8399 | Atlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files via the decoratorName parameter to (1) spaces/viewdefaultdecorator.action or (2) admin/viewdefaultdecorator.action. atlassian · confluence | Medium 4.3 | 60% | 1 exploit | |
| CVE-2016-0492 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Load Testing for Web Apps, a different… oracle · application testing suite | Medium 6.4 | 92% | 6 exploits | |
| CVE-2016-0491 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect integrity and availability via unknown vectors related to Load Testing for Web Apps. oracle · application testing suite | Medium 6.4 | 80% | 6 exploits | |
| CVE-2015-8660 | The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application. linux · linux kernel | Medium 6.7 | 22% | 4 exploits | |
| CVE-2015-7309 | The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, which allows remote authenticated users to execute arbitrary code by renaming a crafted file and then directly accessing it. boltcms · bolt | Medium 6.5 | 39% | 4 exploits | |
| CVE-2015-5603 | The HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java code via unspecified vectors, related to "Velocity Template Injection Vulnerability." atlassian · hipchat | Medium 6.5 | 59% | 3 exploits | |
| CVE-2015-6973 | Multiple cross-site request forgery (CSRF) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to hijack the authentication of administrators for requests that (1) change a password via a crafted request to user-password.jsp, (2) add users via a crafted… igniterealtime · openfire | Medium 6.8 | 65% | 2 exploits | |
| CVE-2015-6967 | Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in… nibbleblog · nibbleblog | Medium 6.5 | 49% | 3 exploits | |
| CVE-2015-1487 | The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to write to arbitrary files, and consequently obtain administrator privileges, via a crafted filename. symantec · endpoint protection manager | Medium 5.5 | 52% | 2 exploits | |
| CVE-2015-1793 | The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote attackers to spoof a Certification… openssl · openssl | Medium 6.5 | 58% | 1 exploit | |
| CVE-2015-5453 | Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the id parameter to ADMIN/mailqueue.spl. watchguard · xcs | Medium 6.5 | 59% | 5 exploits | |
| CVE-2015-2997 | SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an invalid value in the accountid parameter to getAgentLogFile, as demonstrated by a large directory traversal sequence, which reveals the installation path in an error message. sysaid · sysaid | Medium 5.0 | 57% | 2 exploits | |
| CVE-2015-2995 | The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote attackers to upload and execute arbitrary files via a NULL byte after the extension, as demonstrated by a .war%00 file. sysaid · sysaid | Medium 6.8 | 34% | 4 exploits | |
| CVE-2015-2994 | Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators to execute arbitrary code by uploading a file with a .jsp extension, then accessing it via a direct request to the file in icons/user_photo/. sysaid · sysaid | Medium 6.5 | 50% | 4 exploits | |
| CVE-2015-1397 | SQL injection vulnerability in the getCsvFile function in the Mage_Adminhtml_Block_Widget_Grid class in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allows remote administrators to execute arbitrary SQL commands via the popularity[field_expr]… magento · magento | Medium 6.5 | 56% | 1 exploit | |
| CVE-2015-2295 | Cross-site request forgery (CSRF) vulnerability in system_firmware_restorefullbackup.php in the WebGUI in pfSense before 2.2.1 allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary files via the deletefile parameter. netgate · pfsense | Medium 6.8 | 66% | 2 exploits |
Showing 101–150 of 401
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.