Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Emerging

Emerging Threats, Before They Hit KEV.

Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.

Synced hourly · figures as of Oct 20, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
2,494 vulnerabilities · highest exploit probability first
  • CVE-2013-4786High 7.5
    freeipmi: Leakage of password hashes via RAKP authentication
    intel · intelligent platform management interface
    EPSS79%
    1 exploit
    Published Jul 8, 2013
  • CVE-2013-3563High 7.5
    Stack-based buffer overflow in db_netserver in Lianja SQL Server before 1.0.0RC5.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted string to TCP port 8001.
    lianja · lianja sql server
    EPSS49%
    3 exploits
    Published Jul 4, 2013
  • CVE-2013-2343Critical 10.0
    Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1510.
    hp · lefthand virtual san appliance hydra
    EPSS62%
    2 exploits
    Published Jul 2, 2013
  • CVE-2013-2460Critical 9.3
    OpenJDK: tracing insufficient access checks (Serviceability, 8010209)
    oracle · jre
    EPSS70%
    2 exploits
    Published Jun 18, 2013
  • CVE-2013-3520High 7.5
    VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary code via unspecified vectors.
    vmware · vcenter chargeback manager
    EPSS56%
    2 exploits
    Published Jun 17, 2013
  • CVE-2013-3576Critical 9.0
    ginkgosnmp.inc in HP System Management Homepage (SMH) allows remote authenticated users to execute arbitrary commands via shell metacharacters in the PATH_INFO to smhutil/snmpchp.php.en.
    hp · system management homepage
    EPSS67%
    2 exploits
    Published Jun 14, 2013
  • CVE-2013-4074Medium 5.0
    The dissect_capwap_data function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 incorrectly uses a -1 data value to represent an error condition, which allows remote attackers to cause a denial of service…
    wireshark · wireshark
    EPSS61%
    3 exploits
    Published Jun 9, 2013
  • CVE-2013-2121Medium 6.0
    Foreman: app/controllers/bookmarks_controller.rb remote code execution
    theforeman · foreman
    EPSS25%
    3 exploits
    Published Jun 7, 2013
  • CVE-2013-2333Critical 10.0
    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1680.
    hp · storage data protector
    EPSS90%
    2 exploits
    Published Jun 6, 2013
  • CVE-2013-0136High 8.5
    Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow remote authenticated users to upload and execute arbitrary programs, read arbitrary files, or cause a denial of service (file deletion or renaming) via (1)…
    mutiny · mutiny
    EPSS40%
    2 exploits
    Published Jun 1, 2013
  • CVE-2013-1017Critical 9.3
    Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted dref atoms in a movie file.
    apple · quicktime
    EPSS33%
    3 exploits
    Published May 24, 2013
  • CVE-2013-2730Critical 10.0
    acroread: multiple code execution flaws (APSB13-15)
    adobe · acrobat
    EPSS79%
    2 exploits
    Published May 14, 2013
  • CVE-2013-3522Medium 6.5
    SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlier allows remote authenticated users to execute arbitrary SQL commands via the nodeid parameter.
    vbulletin · vbulletin
    EPSS27%
    4 exploits
    Published May 10, 2013
  • CVE-2013-3336Medium 5.0
    Unspecified vulnerability in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to read arbitrary files via unknown vectors.
    adobe · coldfusion
    EPSS74%
    1 exploit
    Published May 9, 2013
  • CVE-2013-3502Medium 6.5
    monarch_scan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary commands, and consequently obtain sensitive information, by leveraging a JOSSO SSO cookie.
    gwos · groundwork monitor
    EPSS54%
    2 exploits
    Published May 8, 2013
  • CVE-2013-0726Critical 9.3
    Stack-based buffer overflow in the ERM_convert_to_correct_webpath function in ermapper_u.dll in ERDAS ER Viewer before 13.00.0001 allows remote attackers to execute arbitrary code via a crafted pathname in an ERS file.
    hexagon · erdas er viewer
    EPSS28%
    2 exploits
    Published May 5, 2013
  • CVE-2013-1884Medium 5.0
    The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (segmentation fault and crash) via a log REPORT request with an invalid limit, which triggers an access of an uninitialized variable.
    apache · subversion
    EPSS51%
    1 exploit
    Published May 2, 2013
  • CVE-2013-1847Medium 5.0
    The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an anonymous LOCK for a URL that does not exist.
    apache · subversion
    EPSS51%
    1 exploit
    Published May 2, 2013
  • CVE-2012-5946Critical 9.3
    Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via a long TabCaption string.
    ibm · spss samplepower
    EPSS34%
    2 exploits
    Published Apr 30, 2013
  • CVE-2013-1428Medium 6.5
    Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote authenticated peers to cause a denial of service (crash) or possibly execute arbitrary code via a large TCP packet.
    tinc-vpn · tinc
    EPSS61%
    2 exploits
    Published Apr 26, 2013
  • CVE-2013-3238Medium 6.0
    phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a /e\x00 sequence, which is not properly handled before making a preg_replace function call within the "Replace table prefix" feature.
    phpmyadmin · phpmyadmin
    EPSS29%
    3 exploits
    Published Apr 26, 2013
  • CVE-2013-1559Medium 4.0
    Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote authenticated users to affect availability via unknown vectors related to Content Server.
    oracle · fusion middleware
    EPSS59%
    2 exploits
    Published Apr 17, 2013
  • CVE-2013-1488Critical 10.0
    OpenJDK: JDBC driver manager improper toString calls (CanSecWest 2013, Libraries, 8009814)
    oracle · jre
    EPSS87%
    2 exploits
    Published Apr 16, 2013
  • CVE-2013-1080Critical 10.0
    The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform authentication for zenworks/jsp/index.jsp, which allows remote attackers to conduct directory traversal attacks, and consequently upload and execute arbitrary…
    novell · zenworks configuration management
    EPSS77%
    2 exploits
    Published Mar 29, 2013
  • CVE-2013-1892Medium 6.0
    MongoDB: Server Side JavaScript Includes allow Remote Code Execution
    mongodb · mongodb
    EPSS45%
    3 exploits
    Published Mar 24, 2013
  • CVE-2013-0232High 7.5
    includes/functions.php in ZoneMinder Video Server 1.24.0, 1.25.0, and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) runState parameter in the packageControl function; or (2) key or (3) command parameter in the…
    zoneminder · zoneminder
    EPSS48%
    2 exploits
    Published Mar 20, 2013
  • CVE-2013-2492Medium 6.8
    Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windows allows remote attackers to execute arbitrary code via a crafted packet to TCP port 3050, related to a missing size check during extraction of a group number…
    firebirdsql · firebird
    EPSS42%
    3 exploits
    Published Mar 15, 2013
  • CVE-2013-1469Medium 4.0
    Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a ..
    piwigo · piwigo
    EPSS56%
    4 exploits
    Published Mar 13, 2013
  • CVE-2013-1081High 7.5
    Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management (ZMM) 2.6.1 and 2.7.0 allows remote attackers to include and execute arbitrary local files via the language parameter.
    novell · zenworks mobile management
    EPSS68%
    2 exploits
    Published Mar 11, 2013
  • CVE-2012-5201Critical 10.0
    Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1611.
    hp · intelligent management center
    EPSS64%
    2 exploits
    Published Mar 9, 2013
  • CVE-2013-1493Critical 10.0
    OpenJDK: CMM malformed raster memory corruption (2D, 8007675)
    oracle · jdk
    EPSS86%
    2 exploits
    Published Mar 4, 2013
  • CVE-2013-0108Medium 6.8
    An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager (aka CPO-M) Station R100; and HMIWeb Browser client packages allows remote attackers to…
    honeywell · enterprise buildings integrator
    EPSS27%
    2 exploits
    Published Feb 24, 2013
  • CVE-2012-6275Critical 10.0
    Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impact via (1) the filename header in an SCH request or (2) the userid component in a DUPF request.
    bigantsoft · bigant im message server
    EPSS46%
    2 exploits
    Published Feb 24, 2013
  • CVE-2012-6274Medium 5.0
    BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors.
    bigantsoft · bigant im message server
    EPSS47%
    2 exploits
    Published Feb 24, 2013
  • CVE-2012-4705Critical 10.0
    Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving a crafted pathname.
    3s-software · codesys gateway-server
    EPSS65%
    2 exploits
    Published Feb 24, 2013
  • CVE-2012-0439Critical 9.3
    An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code via (1) a pointer argument to the SetEngine method or (2) an XPItem pointer argument to an unspecified method.
    novell · groupwise
    EPSS39%
    2 exploits
    Published Feb 24, 2013
  • CVE-2012-4711Critical 10.0
    Buffer overflow in kingMess.exe 65.20.2003.10300 in WellinTech KingView 6.52, kingMess.exe 65.20.2003.10400 in KingView 6.53, and kingMess.exe 65.50.2011.18049 in KingView 6.55 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…
    wellintech · kingview
    EPSS61%
    2 exploits
    Published Feb 15, 2013
  • CVE-2013-0025Critical 9.3
    Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer SLayoutRun Use After Free Vulnerability."
    microsoft · internet explorer
    EPSS56%
    3 exploits
    Published Feb 13, 2013
  • CVE-2013-0634Critical 9.3
    flash-plugin: multiple code execution flaws (APSB13-04)
    adobe · flash player
    EPSS78%
    2 exploits
    Published Feb 7, 2013
  • CVE-2013-0229High 7.8
    The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attackers to cause a denial of service (service crash) via a crafted request that triggers a buffer over-read.
    miniupnp project · miniupnpd
    EPSS76%
    2 exploits
    Published Jan 31, 2013
  • CVE-2013-0230Critical 10.0
    Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method.
    miniupnp project · miniupnpd
    EPSS69%
    5 exploits
    Published Jan 31, 2013
  • CVE-2012-6530High 7.1
    Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled, allows remote authenticated users with the create folder permission to execute arbitrary code via a crafted request.
    sysax · multi server
    EPSS46%
    5 exploits
    Published Jan 31, 2013
  • CVE-2012-5958Critical 10.0
    libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)
    libupnp project · libupnp
    EPSS83%
    3 exploits
    Published Jan 29, 2013
  • CVE-2012-5959Critical 10.0
    libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)
    portable sdk for upnp project · portable sdk for upnp
    EPSS76%
    1 exploit
    Published Jan 29, 2013
  • CVE-2012-4914Critical 9.3
    Stack-based buffer overflow in the reader in CoolPDF 3.0.2.256 allows remote attackers to execute arbitrary code via a PDF document with a crafted stream.
    coolpdf · coolpdf
    EPSS28%
    3 exploits
    Published Jan 26, 2013
  • CVE-2013-0209High 7.5
    lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x through 4.38 does not require authentication for requests to database-migration functions, which allows remote attackers to conduct eval injection and SQL injection attacks via crafted parameters, as demonstrated…
    sixapart · movable type
    EPSS45%
    2 exploits
    Published Jan 22, 2013
  • CVE-2012-6096High 7.5
    Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, 1.7.x before 1.7.4, and 1.8.x before 1.8.4, might allow remote attackers to execute arbitrary code via a long (1) host_name variable (host…
    icinga · icinga
    EPSS66%
    5 exploits
    Published Jan 22, 2013
  • CVE-2013-0928Critical 9.3
    The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary commands via a DCP "run command" operation.
    emc · alphastor
    EPSS34%
    2 exploits
    Published Jan 21, 2013
  • CVE-2013-0758Critical 9.3
    Mozilla: Chrome Object Wrapper (COW) bypass through plugin objects (MFSA 2013-15)
    mozilla · firefox
    EPSS73%
    3 exploits
    Published Jan 8, 2013
  • CVE-2013-0757Critical 9.3
    Mozilla: Chrome Object Wrapper (COW) bypass through changing prototype (MFSA 2013-14)
    mozilla · firefox
    EPSS61%
    3 exploits
    Published Jan 8, 2013
Showing 1,451–1,500 of 2,494

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.

Figures as of Oct 20, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.