Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
2,494 vulnerabilities · highest exploit probability first
- CVE-2010-0304High 7.5Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demonstrated using a stack-based buffer overflow to the…wireshark · wiresharkEPSS74%5 exploitsPublished Feb 3, 2010
- CVE-2009-4484High 7.5mysql: yaSSL certificate parsing buffer overflow (vulndisco)oracle · mysqlEPSS70%2 exploitsPublished Jan 25, 2010
- CVE-2010-0248High 8.1Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Object…microsoft · internet explorerEPSS53%2 exploitsPublished Jan 22, 2010
- CVE-2009-3999Critical 10.0Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter.hp · power managerEPSS72%2 exploitsPublished Jan 20, 2010
- CVE-2010-0361Critical 10.0Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long URI in an HTTP OPTIONS request.sun · java system web serverEPSS80%4 exploitsPublished Jan 20, 2010
- CVE-2010-0356Critical 9.3Stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control in MoviePlayer.ocx 6.8.0.0 in Viscom Software Movie Player Pro SDK ActiveX 6.8 allows remote attackers to execute arbitrary code via a long strFontName parameter to the DrawText method.viscomsoft · movie player pro sdk activexEPSS30%3 exploitsPublished Jan 18, 2010
- CVE-2009-3958Critical 10.0acroread: multiple code execution flaws (APSB10-02)adobe · acrobatEPSS53%1 exploitPublished Jan 12, 2010
- CVE-2009-4588Critical 9.3Heap-based buffer overflow in the WindsPlayerIE.View.1 ActiveX control in WindsPly.ocx 3.5.0.0 Beta, 3.0.0.5, and earlier in AwingSoft Awakening Web3D Player and Winds3D Viewer allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via…awingsoft · awakening winds3d playerEPSS32%3 exploitsPublished Jan 7, 2010
- CVE-2009-4502Critical 9.3The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote attackers to bypass the EnableRemoteCommands setting and execute arbitrary commands via shell metacharacters in the argument to net.tcp.listen.zabbix · zabbixEPSS22%3 exploitsPublished Dec 31, 2009
- CVE-2009-4498Medium 6.8The node_process_command function in Zabbix Server before 1.8 allows remote attackers to execute arbitrary commands via a crafted request.zabbix · zabbixEPSS32%3 exploitsPublished Dec 31, 2009
- CVE-2007-2280Critical 10.0Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via an MSG_PROTOCOL command with long arguments,…hp · openview storage data protectorEPSS60%2 exploitsPublished Dec 18, 2009
- CVE-2009-4179Critical 10.0Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Accept-Language header in an OVABverbose action.hp · openview network node managerEPSS67%3 exploitsPublished Dec 10, 2009
- CVE-2009-4178Critical 10.0Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long Topic parameter.hp · openview network node managerEPSS74%3 exploitsPublished Dec 10, 2009
- CVE-2009-3849Critical 10.0Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long Template parameter to nnmRptConfig.exe, related to the strcat function; or (2) a long Oid parameter to snmp.exe.hp · openview network node managerEPSS74%2 exploitsPublished Dec 10, 2009
- CVE-2009-4265Critical 9.3Stack-based buffer overflow in Ideal Administration 2009 9.7.1, and possibly other versions, allows remote attackers to execute arbitrary code via a long Computer value in an .ipj project file.pointdev · ideal administration 2009EPSS31%4 exploitsPublished Dec 10, 2009
- CVE-2009-3844Critical 10.0Stack-based buffer overflow in the OmniInet process in HP OpenView Data Protector Application Recovery Manager 5.50 and 6.0 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted MSG_PROTOCOL packet.hp · openview data protector application recovery managerEPSS74%3 exploitsPublished Dec 8, 2009
- CVE-2009-1569Critical 9.3Multiple stack-based buffer overflows in Novell iPrint Client 4.38, 5.30, and possibly other versions before 5.32 allow remote attackers to execute arbitrary code via vectors related to (1) Date and (2) Time.novell · iprintEPSS38%2 exploitsPublished Dec 8, 2009
- CVE-2009-1568Critical 9.3Stack-based buffer overflow in ienipp.ocx in Novell iPrint Client 5.30, and possibly other versions before 5.32, allows remote attackers to execute arbitrary code via a long target-frame parameter.novell · iprint clientEPSS32%2 exploitsPublished Dec 8, 2009
- CVE-2009-4225Critical 9.3Stack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust PestPatrol allows remote attackers to execute arbitrary code via a long argument to the Initialize method.ca · etrust pestpatrole ppctl.dll activexEPSS31%2 exploitsPublished Dec 8, 2009
- CVE-2009-4223High 7.5PHP remote file inclusion vulnerability in adm/krgourl.php in KR-Web 1.1b2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter.gianni tommasi · kr-php web content serverEPSS55%2 exploitsPublished Dec 7, 2009
- CVE-2009-4195Critical 9.3Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execute arbitrary code via a long DSC comment in an Encapsulated PostScript (.eps) file.adobe · illustratorEPSS71%4 exploitsPublished Dec 4, 2009
- CVE-2009-4189Critical 10.0HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet…hp · operations managerEPSS79%3 exploitsPublished Dec 3, 2009
- CVE-2009-4188Critical 10.0HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat…hp · operations dashboardEPSS69%4 exploitsPublished Dec 3, 2009
- CVE-2009-3672Critical 9.3Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory that (1) were not properly initialized or (2) are deleted, which allows remote attackers to execute arbitrary code via vectors involving a call to the getElementsByTagName method for the STYLE tag…microsoft · internet explorerEPSS72%2 exploitsPublished Dec 2, 2009
- CVE-2009-3033Critical 9.3Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment Solution 6.9.x, Altiris Notification Server 6.0.x, and Management Platform 7.0.x allows remote…symantec · altiris deployment solutionEPSS40%2 exploitsPublished Nov 25, 2009
- CVE-2009-3843Critical 10.0HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the…hp · operations managerEPSS79%3 exploitsPublished Nov 23, 2009
- CVE-2009-4006Critical 10.0Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other versions before 9.1.0.0 allows remote attackers to execute arbitrary code via a long hexadecimal string.solarwinds · serv-u file serverEPSS83%2 exploitsPublished Nov 20, 2009
- CVE-2009-3976Critical 9.3Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service (application crash) or execute arbitrary code via a long 220 reply (aka connection greeting or welcome message).labtam-inc · proftpEPSS28%3 exploitsPublished Nov 18, 2009
- CVE-2009-3548High 7.5The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges.apache · tomcatEPSS79%4 exploitsPublished Nov 12, 2009
- CVE-2009-2685Critical 10.0Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers to execute arbitrary code via the Login variable.hp · power managerEPSS77%3 exploitsPublished Nov 6, 2009
- CVE-2009-3853Critical 9.3Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7, 5.4 before 5.4.3, 5.5 before 5.5.2.2, and 6.1 before 6.1.0.2, and TSM Express 5.3.3.0 through 5.3.6.6, allows remote attackers to…ibm · tivoli storage managerEPSS37%2 exploitsPublished Nov 4, 2009
- CVE-2009-3031Critical 9.3Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSConsoleUtilities.dll in Symantec Altiris Notification Server (NS) 6.0 before R12, Deployment Server 6.8 and 6.9 in Symantec Altiris…symantec · altiris deployment solutionEPSS45%3 exploitsPublished Nov 3, 2009
- CVE-2009-3867Critical 9.3java-1.6.0-sun: Stack-based buffer overflow via a long file: URL argument (6854303)sun · jdkEPSS73%4 exploitsPublished Nov 3, 2009
- CVE-2009-3869Critical 9.3OpenJDK JRE AWT setDifflCM stack overflow (6872357)sun · jdkEPSS65%2 exploitsPublished Nov 3, 2009
- CVE-2009-3837Critical 9.3Stack-based buffer overflow in Eureka Email 2.2q allows remote POP3 servers to execute arbitrary code via a long error message.eureka-email · eureka emailEPSS32%4 exploitsPublished Nov 2, 2009
- CVE-2009-3733Medium 5.0Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors.vmware · esxEPSS83%1 exploitPublished Nov 2, 2009
- CVE-2009-1979Critical 10.0Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.oracle · database serverEPSS76%3 exploitsPublished Oct 22, 2009
- CVE-2009-4140High 8.8Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer, as used in Piwik 0.2.35 through 0.4.3, Woopra Analytics Plugin before 1.4.3.2, and possibly other products, when register_globals is enabled, allows remote…teethgrinder.co.uk · open flash chartEPSS76%8 exploitsPublished Oct 20, 2009
- CVE-2009-3711Critical 10.0Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.jasper · httpdxEPSS64%3 exploitsPublished Oct 16, 2009
- CVE-2009-3699Critical 10.0Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR string in the first argument to procedure 21 of rpc.cmsd.ibm · viosEPSS62%2 exploitsPublished Oct 15, 2009
- CVE-2009-2532Critical 10.0Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process the command value in an SMB Multi-Protocol Negotiate Request packet, which allows remote attackers to execute arbitrary code via a crafted SMBv2 packet to the…microsoft · windows server 2008EPSS62%2 exploitsPublished Oct 14, 2009
- CVE-2009-2526High 7.8Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 do not properly validate fields in SMBv2 packets, which allows remote attackers to cause a denial of service (infinite loop and system hang) via a crafted packet to the Server service, aka "SMBv2 Infinite…microsoft · windows vistaEPSS82%2 exploitsPublished Oct 14, 2009
- CVE-2009-3693Critical 9.3Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows remote attackers to create arbitrary files via \..hp · loadrunnerEPSS42%3 exploitsPublished Oct 13, 2009
- CVE-2009-2990Critical 9.3acroread: Multiple arbitrary code execution fixes in 8.1.7 (APSB09-15)adobe · acrobatEPSS69%3 exploitsPublished Oct 13, 2009
- CVE-2009-3591Medium 5.0Dopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a REQUESTJET message with an invalid location.ben webb · dopewarsEPSS53%2 exploitsPublished Oct 8, 2009
- CVE-2009-3429Critical 9.3Stack-based buffer overflow in Pirate Radio Destiny Media Player 1.61 allows remote attackers to execute arbitrary code via a long string in a .pls playlist file.pirateradio · destiny media playerEPSS35%7 exploitsPublished Sep 25, 2009
- CVE-2009-3214Critical 9.3Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code via a crafted Slideshow project (.psh) file, related to the (1) cell[n].images[m].image and (2) cell[n].sound.file fields.photodex · proshow goldEPSS31%4 exploitsPublished Sep 16, 2009
- CVE-2009-2629High 7.5Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests.f5 · nginxEPSS75%1 exploitPublished Sep 15, 2009
- CVE-2008-7232Critical 10.0Buffer overflow in the report function in xtacacsd 4.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted CONNECT TACACS command.netplex-tech · xtacacsdEPSS25%2 exploitsPublished Sep 14, 2009
- CVE-2009-3103Critical 10.0Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an & (ampersand)…microsoft · windows server 2008EPSS92%7 exploitsPublished Sep 8, 2009
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2010-0304 | Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demonstrated using a stack-based buffer overflow to the… wireshark · wireshark | High 7.5 | 74% | 5 exploits | |
| CVE-2009-4484 | mysql: yaSSL certificate parsing buffer overflow (vulndisco) oracle · mysql | High 7.5 | 70% | 2 exploits | |
| CVE-2010-0248 | Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Object… microsoft · internet explorer | High 8.1 | 53% | 2 exploits | |
| CVE-2009-3999 | Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter. hp · power manager | Critical 10.0 | 72% | 2 exploits | |
| CVE-2010-0361 | Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long URI in an HTTP OPTIONS request. sun · java system web server | Critical 10.0 | 80% | 4 exploits | |
| CVE-2010-0356 | Stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control in MoviePlayer.ocx 6.8.0.0 in Viscom Software Movie Player Pro SDK ActiveX 6.8 allows remote attackers to execute arbitrary code via a long strFontName parameter to the DrawText method. viscomsoft · movie player pro sdk activex | Critical 9.3 | 30% | 3 exploits | |
| CVE-2009-3958 | acroread: multiple code execution flaws (APSB10-02) adobe · acrobat | Critical 10.0 | 53% | 1 exploit | |
| CVE-2009-4588 | Heap-based buffer overflow in the WindsPlayerIE.View.1 ActiveX control in WindsPly.ocx 3.5.0.0 Beta, 3.0.0.5, and earlier in AwingSoft Awakening Web3D Player and Winds3D Viewer allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via… awingsoft · awakening winds3d player | Critical 9.3 | 32% | 3 exploits | |
| CVE-2009-4502 | The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote attackers to bypass the EnableRemoteCommands setting and execute arbitrary commands via shell metacharacters in the argument to net.tcp.listen. zabbix · zabbix | Critical 9.3 | 22% | 3 exploits | |
| CVE-2009-4498 | The node_process_command function in Zabbix Server before 1.8 allows remote attackers to execute arbitrary commands via a crafted request. zabbix · zabbix | Medium 6.8 | 32% | 3 exploits | |
| CVE-2007-2280 | Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via an MSG_PROTOCOL command with long arguments,… hp · openview storage data protector | Critical 10.0 | 60% | 2 exploits | |
| CVE-2009-4179 | Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Accept-Language header in an OVABverbose action. hp · openview network node manager | Critical 10.0 | 67% | 3 exploits | |
| CVE-2009-4178 | Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long Topic parameter. hp · openview network node manager | Critical 10.0 | 74% | 3 exploits | |
| CVE-2009-3849 | Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long Template parameter to nnmRptConfig.exe, related to the strcat function; or (2) a long Oid parameter to snmp.exe. hp · openview network node manager | Critical 10.0 | 74% | 2 exploits | |
| CVE-2009-4265 | Stack-based buffer overflow in Ideal Administration 2009 9.7.1, and possibly other versions, allows remote attackers to execute arbitrary code via a long Computer value in an .ipj project file. pointdev · ideal administration 2009 | Critical 9.3 | 31% | 4 exploits | |
| CVE-2009-3844 | Stack-based buffer overflow in the OmniInet process in HP OpenView Data Protector Application Recovery Manager 5.50 and 6.0 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted MSG_PROTOCOL packet. hp · openview data protector application recovery manager | Critical 10.0 | 74% | 3 exploits | |
| CVE-2009-1569 | Multiple stack-based buffer overflows in Novell iPrint Client 4.38, 5.30, and possibly other versions before 5.32 allow remote attackers to execute arbitrary code via vectors related to (1) Date and (2) Time. novell · iprint | Critical 9.3 | 38% | 2 exploits | |
| CVE-2009-1568 | Stack-based buffer overflow in ienipp.ocx in Novell iPrint Client 5.30, and possibly other versions before 5.32, allows remote attackers to execute arbitrary code via a long target-frame parameter. novell · iprint client | Critical 9.3 | 32% | 2 exploits | |
| CVE-2009-4225 | Stack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust PestPatrol allows remote attackers to execute arbitrary code via a long argument to the Initialize method. ca · etrust pestpatrole ppctl.dll activex | Critical 9.3 | 31% | 2 exploits | |
| CVE-2009-4223 | PHP remote file inclusion vulnerability in adm/krgourl.php in KR-Web 1.1b2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter. gianni tommasi · kr-php web content server | High 7.5 | 55% | 2 exploits | |
| CVE-2009-4195 | Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execute arbitrary code via a long DSC comment in an Encapsulated PostScript (.eps) file. adobe · illustrator | Critical 9.3 | 71% | 4 exploits | |
| CVE-2009-4189 | HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet… hp · operations manager | Critical 10.0 | 79% | 3 exploits | |
| CVE-2009-4188 | HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat… hp · operations dashboard | Critical 10.0 | 69% | 4 exploits | |
| CVE-2009-3672 | Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory that (1) were not properly initialized or (2) are deleted, which allows remote attackers to execute arbitrary code via vectors involving a call to the getElementsByTagName method for the STYLE tag… microsoft · internet explorer | Critical 9.3 | 72% | 2 exploits | |
| CVE-2009-3033 | Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment Solution 6.9.x, Altiris Notification Server 6.0.x, and Management Platform 7.0.x allows remote… symantec · altiris deployment solution | Critical 9.3 | 40% | 2 exploits | |
| CVE-2009-3843 | HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the… hp · operations manager | Critical 10.0 | 79% | 3 exploits | |
| CVE-2009-4006 | Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other versions before 9.1.0.0 allows remote attackers to execute arbitrary code via a long hexadecimal string. solarwinds · serv-u file server | Critical 10.0 | 83% | 2 exploits | |
| CVE-2009-3976 | Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service (application crash) or execute arbitrary code via a long 220 reply (aka connection greeting or welcome message). labtam-inc · proftp | Critical 9.3 | 28% | 3 exploits | |
| CVE-2009-3548 | The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges. apache · tomcat | High 7.5 | 79% | 4 exploits | |
| CVE-2009-2685 | Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers to execute arbitrary code via the Login variable. hp · power manager | Critical 10.0 | 77% | 3 exploits | |
| CVE-2009-3853 | Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7, 5.4 before 5.4.3, 5.5 before 5.5.2.2, and 6.1 before 6.1.0.2, and TSM Express 5.3.3.0 through 5.3.6.6, allows remote attackers to… ibm · tivoli storage manager | Critical 9.3 | 37% | 2 exploits | |
| CVE-2009-3031 | Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSConsoleUtilities.dll in Symantec Altiris Notification Server (NS) 6.0 before R12, Deployment Server 6.8 and 6.9 in Symantec Altiris… symantec · altiris deployment solution | Critical 9.3 | 45% | 3 exploits | |
| CVE-2009-3867 | java-1.6.0-sun: Stack-based buffer overflow via a long file: URL argument (6854303) sun · jdk | Critical 9.3 | 73% | 4 exploits | |
| CVE-2009-3869 | OpenJDK JRE AWT setDifflCM stack overflow (6872357) sun · jdk | Critical 9.3 | 65% | 2 exploits | |
| CVE-2009-3837 | Stack-based buffer overflow in Eureka Email 2.2q allows remote POP3 servers to execute arbitrary code via a long error message. eureka-email · eureka email | Critical 9.3 | 32% | 4 exploits | |
| CVE-2009-3733 | Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors. vmware · esx | Medium 5.0 | 83% | 1 exploit | |
| CVE-2009-1979 | Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. oracle · database server | Critical 10.0 | 76% | 3 exploits | |
| CVE-2009-4140 | Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer, as used in Piwik 0.2.35 through 0.4.3, Woopra Analytics Plugin before 1.4.3.2, and possibly other products, when register_globals is enabled, allows remote… teethgrinder.co.uk · open flash chart | High 8.8 | 76% | 8 exploits | |
| CVE-2009-3711 | Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request. jasper · httpdx | Critical 10.0 | 64% | 3 exploits | |
| CVE-2009-3699 | Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR string in the first argument to procedure 21 of rpc.cmsd. ibm · vios | Critical 10.0 | 62% | 2 exploits | |
| CVE-2009-2532 | Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process the command value in an SMB Multi-Protocol Negotiate Request packet, which allows remote attackers to execute arbitrary code via a crafted SMBv2 packet to the… microsoft · windows server 2008 | Critical 10.0 | 62% | 2 exploits | |
| CVE-2009-2526 | Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 do not properly validate fields in SMBv2 packets, which allows remote attackers to cause a denial of service (infinite loop and system hang) via a crafted packet to the Server service, aka "SMBv2 Infinite… microsoft · windows vista | High 7.8 | 82% | 2 exploits | |
| CVE-2009-3693 | Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows remote attackers to create arbitrary files via \.. hp · loadrunner | Critical 9.3 | 42% | 3 exploits | |
| CVE-2009-2990 | acroread: Multiple arbitrary code execution fixes in 8.1.7 (APSB09-15) adobe · acrobat | Critical 9.3 | 69% | 3 exploits | |
| CVE-2009-3591 | Dopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a REQUESTJET message with an invalid location. ben webb · dopewars | Medium 5.0 | 53% | 2 exploits | |
| CVE-2009-3429 | Stack-based buffer overflow in Pirate Radio Destiny Media Player 1.61 allows remote attackers to execute arbitrary code via a long string in a .pls playlist file. pirateradio · destiny media player | Critical 9.3 | 35% | 7 exploits | |
| CVE-2009-3214 | Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code via a crafted Slideshow project (.psh) file, related to the (1) cell[n].images[m].image and (2) cell[n].sound.file fields. photodex · proshow gold | Critical 9.3 | 31% | 4 exploits | |
| CVE-2009-2629 | Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests. f5 · nginx | High 7.5 | 75% | 1 exploit | |
| CVE-2008-7232 | Buffer overflow in the report function in xtacacsd 4.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted CONNECT TACACS command. netplex-tech · xtacacsd | Critical 10.0 | 25% | 2 exploits | |
| CVE-2009-3103 | Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an & (ampersand)… microsoft · windows server 2008 | Critical 10.0 | 92% | 7 exploits |
Showing 1,801–1,850 of 2,494
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.