Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
2,494 vulnerabilities · highest exploit probability first
- CVE-2009-3068Critical 9.3Unrestricted file upload vulnerability in the RoboHelpServer Servlet (robohelp/server) in Adobe RoboHelp Server 8 allows remote attackers to execute arbitrary code by uploading a Java Archive (.jsp) file during a PUBLISH action, then accessing it via a direct request to the file…adobe · robohelp serverEPSS78%3 exploitsPublished Sep 4, 2009
- CVE-2009-2521Medium 5.0Stack consumption vulnerability in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows remote authenticated users to cause a denial of service (daemon crash) via a list (ls) -R command containing a wildcard that references a subdirectory,…microsoft · internet information servicesEPSS82%2 exploitsPublished Sep 4, 2009
- CVE-2009-3023Critical 9.0Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbitrary code via a crafted NLST (NAME LIST) command that uses wildcards, leading to memory corruption, aka "IIS FTP Service RCE and…microsoft · internet information serverEPSS91%6 exploitsPublished Aug 31, 2009
- CVE-2009-2765High 8.3httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a cgi-bin/ URI.dd-wrt · dd-wrtEPSS83%4 exploitsPublished Aug 14, 2009
- CVE-2009-1534Critical 9.3Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and Visual Studio .NET 2003 SP1 allows remote attackers to execute arbitrary code via crafted property…microsoft · officeEPSS52%2 exploitsPublished Aug 12, 2009
- CVE-2009-2727Critical 9.3Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0 through 6.1.3, when the rpc.ttdbserver daemon is enabled in /etc/inetd.conf, allows remote attackers to execute arbitrary…ibm · aixEPSS27%2 exploitsPublished Aug 10, 2009
- CVE-2008-6898Critical 9.3Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long argument to the Get method and other unspecified methods.saschart · sascam webcam serverEPSS32%3 exploitsPublished Aug 5, 2009
- CVE-2009-2650Critical 9.3Heap-based buffer overflow in Sorcerer Software MultiMedia Jukebox 4.0 Build 020124 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted (1) .m3u or possibly (2) .pst file.sorcerersoftware · multimedia jukeboxEPSS31%4 exploitsPublished Jul 30, 2009
- CVE-2009-2566Critical 9.3Stack-based buffer overflow in TFM MMPlayer 2.0, and possibly 2.0.0.30, allows remote attackers to execute arbitrary code via a long string in a playlist (.m3u) file.tfm · mmplayerEPSS31%2 exploitsPublished Jul 21, 2009
- CVE-2009-2484Critical 9.3Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long…videolan · vlc media playerEPSS35%3 exploitsPublished Jul 16, 2009
- CVE-2009-2485Critical 9.3Stack-based buffer overflow in HT-MP3Player 1.0 allows remote attackers to execute arbitrary code via a long string in a .ht3 file.tingan · ht-mp3playerEPSS58%4 exploitsPublished Jul 16, 2009
- CVE-2009-1136Critical 9.3The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet…microsoft · isa serverEPSS62%3 exploitsPublished Jul 15, 2009
- CVE-2009-1978Critical 9.0Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.oracle · secure backupEPSS65%1 exploitPublished Jul 14, 2009
- CVE-2009-1977Critical 10.0Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.oracle · secure backupEPSS73%1 exploitPublished Jul 14, 2009
- CVE-2009-2477Critical 9.3firefox 3.5 various flawsmozilla · firefoxEPSS43%5 exploitsPublished Jul 14, 2009
- CVE-2009-2335Medium 5.3WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.wordpress · wordpressEPSS85%1 exploitPublished Jul 10, 2009
- CVE-2009-2265High 7.5moin: embedded fckeditor multiple directory traversal vulnsfckeditor · fckeditorEPSS84%3 exploitsPublished Jul 3, 2009
- CVE-2009-2261Critical 9.3PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .zip archive with a .txt file whose name contains | (pipe) characters and a command.giorgio tani · peazipEPSS41%3 exploitsPublished Jun 30, 2009
- CVE-2009-2227Critical 10.0Stack-based buffer overflow in B Labs Bopup Communication Server 3.2.26.5460 allows remote attackers to execute arbitrary code via a crafted request to TCP port 19810.blabsoft · bopup communication serverEPSS69%4 exploitsPublished Jun 26, 2009
- CVE-2009-1394Critical 9.3Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote attackers to execute arbitrary code by sending a long malformed string over the PlughNTCommand named pipe.motorola · timbuktu proEPSS33%2 exploitsPublished Jun 26, 2009
- CVE-2009-2288High 7.5nagios: remote code execution via statuswml.cgi CGI scriptnagios · nagiosEPSS83%4 exploitsPublished Jun 18, 2009
- CVE-2009-2011Critical 9.3Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a plug-in for Firefox, does not restrict access to the shell.execute JavaScript API method, which allows remote attackers to execute arbitrary commands via a…dxstudio · dx studio playerEPSS40%2 exploitsPublished Jun 16, 2009
- CVE-2009-1122High 7.5The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication, and possibly read or create files, via a crafted HTTP request, aka "IIS 5.0 WebDAV Authentication…microsoft · internet information servicesEPSS98%1 exploitPublished Jun 10, 2009
- CVE-2009-1535High 7.5The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI-based protection mechanisms, and list folders or read, create, or modify files, via a %c0%af (Unicode / character) at an arbitrary position in the URI, as…microsoft · internet information servicesEPSS98%2 exploitsPublished Jun 10, 2009
- CVE-2009-1955High 7.5The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document…apache · apr-utilEPSS53%1 exploitPublished Jun 8, 2009
- CVE-2009-1943Critical 10.0Stack-based buffer overflow in the IKE service (ireIke.exe) in SafeNet SoftRemote before 10.8.6 allows remote attackers to execute arbitrary code via a long request to UDP port 62514.safenet-inc · softremoteEPSS72%2 exploitsPublished Jun 5, 2009
- CVE-2008-6825Medium 6.8Directory traversal vulnerability in user/index.php in Fonality trixbox CE 2.6.1 and earlier allows remote attackers to include and execute arbitrary files via a ..trixbox · trixboxEPSS20%3 exploitsPublished Jun 5, 2009
- CVE-2009-1386Medium 5.0ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.openssl · opensslEPSS80%1 exploitPublished Jun 4, 2009
- CVE-2009-0950Critical 9.3Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an itms: URL with a long URL component after a colon.apple · itunesEPSS29%3 exploitsPublished Jun 2, 2009
- CVE-2009-1831Critical 9.3The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow.nullsoft · winampEPSS36%2 exploitsPublished May 29, 2009
- CVE-2009-1730Critical 10.0Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read or modify arbitrary files via directory traversal sequences in the (1) GET or (2) PUT command.netmechanica · netdecision tftp serverEPSS55%2 exploitsPublished May 20, 2009
- CVE-2009-1641Critical 9.3Multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file.mini-stream · ripperEPSS31%1 exploitPublished May 15, 2009
- CVE-2009-0714High 7.2Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Express and Express SSE 3.x before build 47065, and Express and Express SSE 4.x before build 46537, allows remote attackers to cause a denial of service (application…hp · data protector expressEPSS52%2 exploitsPublished May 14, 2009
- CVE-2009-1612Critical 9.3Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009.baofeng · stormEPSS33%2 exploitsPublished May 11, 2009
- CVE-2008-4828Critical 10.0Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, and 5.4.0.0 through 5.4.1.96, and the TSM Express client 5.3.3.0 through…ibm · tivoli storage manager clientEPSS71%2 exploitsPublished May 5, 2009
- CVE-2009-1430Critical 9.3Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV)…symantec · antivirusEPSS55%2 exploitsPublished Apr 29, 2009
- CVE-2009-1429Critical 10.0The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1…symantec · antivirusEPSS88%3 exploitsPublished Apr 29, 2009
- CVE-2009-1350Critical 10.0Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute arbitrary code by establishing an IPC$ connection to the XTIERRPCPIPE named pipe, and sending RPC messages that trigger a dereference of an arbitrary pointer.novell · netidentity client1.2.3EPSS66%2 exploitsPublished Apr 21, 2009
- CVE-2008-4830Critical 9.3Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 Patch 5 (KWEDIT.DLL 7100.1.1.43) allows remote attackers to (1) overwrite arbitrary files via the SaveDocumentAs method or (2) read or execute arbitrary files…sap · sap guiEPSS28%2 exploitsPublished Apr 16, 2009
- CVE-2007-2238Critical 9.3Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft Intelligent Application Gateway (IAG) before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the (1) CheckForUpdates or (2)…microsoft · intelligent application gateway 2007EPSS46%2 exploitsPublished Apr 16, 2009
- CVE-2009-1185High 7.2udev: Uncheck origin of NETLINK messagesudev project · udevEPSS81%4 exploitsPublished Apr 15, 2009
- CVE-2009-1260Critical 9.3Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted (1) CCD or (2) IMG file.ezbsystems · ultraisoEPSS43%2 exploitsPublished Apr 7, 2009
- CVE-2007-4475Critical 9.3Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute arbitrary code via a long argument to the SaveViewToSessionFile method.sap · sapguiEPSS40%3 exploitsPublished Apr 1, 2009
- CVE-2009-0215Critical 9.3Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors.ibm · access support activex controlEPSS36%2 exploitsPublished Mar 25, 2009
- CVE-2009-0920High 7.5Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long OvOSLocale cookie, a variant of CVE-2008-0067.hp · network node managerEPSS75%2 exploitsPublished Mar 24, 2009
- CVE-2008-6508High 7.5Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to bypass authentication and access the admin interface via a ..igniterealtime · openfireEPSS84%2 exploitsPublished Mar 23, 2009
- CVE-2009-1029Critical 9.3Stack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to execute arbitrary code via a long Date header, related to Imap.dll.poppeeper · pop peeperEPSS32%4 exploitsPublished Mar 19, 2009
- CVE-2009-1028Critical 9.3Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file.edisys · ezip wizardEPSS33%3 exploitsPublished Mar 19, 2009
- CVE-2009-0880Medium 6.8Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to load and execute arbitrary local DLL code via a ..ibm · directorEPSS32%4 exploitsPublished Mar 12, 2009
- CVE-2009-0837Critical 10.0Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary code via a long (1) relative path or (2) absolute path in the filename argument in an action, as demonstrated by the "Open/Execute a file"…foxit · reader3.0EPSS76%3 exploitsPublished Mar 10, 2009
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2009-3068 | Unrestricted file upload vulnerability in the RoboHelpServer Servlet (robohelp/server) in Adobe RoboHelp Server 8 allows remote attackers to execute arbitrary code by uploading a Java Archive (.jsp) file during a PUBLISH action, then accessing it via a direct request to the file… adobe · robohelp server | Critical 9.3 | 78% | 3 exploits | |
| CVE-2009-2521 | Stack consumption vulnerability in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows remote authenticated users to cause a denial of service (daemon crash) via a list (ls) -R command containing a wildcard that references a subdirectory,… microsoft · internet information services | Medium 5.0 | 82% | 2 exploits | |
| CVE-2009-3023 | Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbitrary code via a crafted NLST (NAME LIST) command that uses wildcards, leading to memory corruption, aka "IIS FTP Service RCE and… microsoft · internet information server | Critical 9.0 | 91% | 6 exploits | |
| CVE-2009-2765 | httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a cgi-bin/ URI. dd-wrt · dd-wrt | High 8.3 | 83% | 4 exploits | |
| CVE-2009-1534 | Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and Visual Studio .NET 2003 SP1 allows remote attackers to execute arbitrary code via crafted property… microsoft · office | Critical 9.3 | 52% | 2 exploits | |
| CVE-2009-2727 | Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0 through 6.1.3, when the rpc.ttdbserver daemon is enabled in /etc/inetd.conf, allows remote attackers to execute arbitrary… ibm · aix | Critical 9.3 | 27% | 2 exploits | |
| CVE-2008-6898 | Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long argument to the Get method and other unspecified methods. saschart · sascam webcam server | Critical 9.3 | 32% | 3 exploits | |
| CVE-2009-2650 | Heap-based buffer overflow in Sorcerer Software MultiMedia Jukebox 4.0 Build 020124 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted (1) .m3u or possibly (2) .pst file. sorcerersoftware · multimedia jukebox | Critical 9.3 | 31% | 4 exploits | |
| CVE-2009-2566 | Stack-based buffer overflow in TFM MMPlayer 2.0, and possibly 2.0.0.30, allows remote attackers to execute arbitrary code via a long string in a playlist (.m3u) file. tfm · mmplayer | Critical 9.3 | 31% | 2 exploits | |
| CVE-2009-2484 | Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long… videolan · vlc media player | Critical 9.3 | 35% | 3 exploits | |
| CVE-2009-2485 | Stack-based buffer overflow in HT-MP3Player 1.0 allows remote attackers to execute arbitrary code via a long string in a .ht3 file. tingan · ht-mp3player | Critical 9.3 | 58% | 4 exploits | |
| CVE-2009-1136 | The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet… microsoft · isa server | Critical 9.3 | 62% | 3 exploits | |
| CVE-2009-1978 | Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. oracle · secure backup | Critical 9.0 | 65% | 1 exploit | |
| CVE-2009-1977 | Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. oracle · secure backup | Critical 10.0 | 73% | 1 exploit | |
| CVE-2009-2477 | firefox 3.5 various flaws mozilla · firefox | Critical 9.3 | 43% | 5 exploits | |
| CVE-2009-2335 | WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. wordpress · wordpress | Medium 5.3 | 85% | 1 exploit | |
| CVE-2009-2265 | moin: embedded fckeditor multiple directory traversal vulns fckeditor · fckeditor | High 7.5 | 84% | 3 exploits | |
| CVE-2009-2261 | PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .zip archive with a .txt file whose name contains | (pipe) characters and a command. giorgio tani · peazip | Critical 9.3 | 41% | 3 exploits | |
| CVE-2009-2227 | Stack-based buffer overflow in B Labs Bopup Communication Server 3.2.26.5460 allows remote attackers to execute arbitrary code via a crafted request to TCP port 19810. blabsoft · bopup communication server | Critical 10.0 | 69% | 4 exploits | |
| CVE-2009-1394 | Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote attackers to execute arbitrary code by sending a long malformed string over the PlughNTCommand named pipe. motorola · timbuktu pro | Critical 9.3 | 33% | 2 exploits | |
| CVE-2009-2288 | nagios: remote code execution via statuswml.cgi CGI script nagios · nagios | High 7.5 | 83% | 4 exploits | |
| CVE-2009-2011 | Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a plug-in for Firefox, does not restrict access to the shell.execute JavaScript API method, which allows remote attackers to execute arbitrary commands via a… dxstudio · dx studio player | Critical 9.3 | 40% | 2 exploits | |
| CVE-2009-1122 | The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication, and possibly read or create files, via a crafted HTTP request, aka "IIS 5.0 WebDAV Authentication… microsoft · internet information services | High 7.5 | 98% | 1 exploit | |
| CVE-2009-1535 | The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI-based protection mechanisms, and list folders or read, create, or modify files, via a %c0%af (Unicode / character) at an arbitrary position in the URI, as… microsoft · internet information services | High 7.5 | 98% | 2 exploits | |
| CVE-2009-1955 | The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document… apache · apr-util | High 7.5 | 53% | 1 exploit | |
| CVE-2009-1943 | Stack-based buffer overflow in the IKE service (ireIke.exe) in SafeNet SoftRemote before 10.8.6 allows remote attackers to execute arbitrary code via a long request to UDP port 62514. safenet-inc · softremote | Critical 10.0 | 72% | 2 exploits | |
| CVE-2008-6825 | Directory traversal vulnerability in user/index.php in Fonality trixbox CE 2.6.1 and earlier allows remote attackers to include and execute arbitrary files via a .. trixbox · trixbox | Medium 6.8 | 20% | 3 exploits | |
| CVE-2009-1386 | ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello. openssl · openssl | Medium 5.0 | 80% | 1 exploit | |
| CVE-2009-0950 | Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an itms: URL with a long URL component after a colon. apple · itunes | Critical 9.3 | 29% | 3 exploits | |
| CVE-2009-1831 | The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow. nullsoft · winamp | Critical 9.3 | 36% | 2 exploits | |
| CVE-2009-1730 | Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read or modify arbitrary files via directory traversal sequences in the (1) GET or (2) PUT command. netmechanica · netdecision tftp server | Critical 10.0 | 55% | 2 exploits | |
| CVE-2009-1641 | Multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file. mini-stream · ripper | Critical 9.3 | 31% | 1 exploit | |
| CVE-2009-0714 | Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Express and Express SSE 3.x before build 47065, and Express and Express SSE 4.x before build 46537, allows remote attackers to cause a denial of service (application… hp · data protector express | High 7.2 | 52% | 2 exploits | |
| CVE-2009-1612 | Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. baofeng · storm | Critical 9.3 | 33% | 2 exploits | |
| CVE-2008-4828 | Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, and 5.4.0.0 through 5.4.1.96, and the TSM Express client 5.3.3.0 through… ibm · tivoli storage manager client | Critical 10.0 | 71% | 2 exploits | |
| CVE-2009-1430 | Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV)… symantec · antivirus | Critical 9.3 | 55% | 2 exploits | |
| CVE-2009-1429 | The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1… symantec · antivirus | Critical 10.0 | 88% | 3 exploits | |
| CVE-2009-1350 | Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute arbitrary code by establishing an IPC$ connection to the XTIERRPCPIPE named pipe, and sending RPC messages that trigger a dereference of an arbitrary pointer. novell · netidentity client1.2.3 | Critical 10.0 | 66% | 2 exploits | |
| CVE-2008-4830 | Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 Patch 5 (KWEDIT.DLL 7100.1.1.43) allows remote attackers to (1) overwrite arbitrary files via the SaveDocumentAs method or (2) read or execute arbitrary files… sap · sap gui | Critical 9.3 | 28% | 2 exploits | |
| CVE-2007-2238 | Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft Intelligent Application Gateway (IAG) before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the (1) CheckForUpdates or (2)… microsoft · intelligent application gateway 2007 | Critical 9.3 | 46% | 2 exploits | |
| CVE-2009-1185 | udev: Uncheck origin of NETLINK messages udev project · udev | High 7.2 | 81% | 4 exploits | |
| CVE-2009-1260 | Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted (1) CCD or (2) IMG file. ezbsystems · ultraiso | Critical 9.3 | 43% | 2 exploits | |
| CVE-2007-4475 | Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute arbitrary code via a long argument to the SaveViewToSessionFile method. sap · sapgui | Critical 9.3 | 40% | 3 exploits | |
| CVE-2009-0215 | Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors. ibm · access support activex control | Critical 9.3 | 36% | 2 exploits | |
| CVE-2009-0920 | Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long OvOSLocale cookie, a variant of CVE-2008-0067. hp · network node manager | High 7.5 | 75% | 2 exploits | |
| CVE-2008-6508 | Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to bypass authentication and access the admin interface via a .. igniterealtime · openfire | High 7.5 | 84% | 2 exploits | |
| CVE-2009-1029 | Stack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to execute arbitrary code via a long Date header, related to Imap.dll. poppeeper · pop peeper | Critical 9.3 | 32% | 4 exploits | |
| CVE-2009-1028 | Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file. edisys · ezip wizard | Critical 9.3 | 33% | 3 exploits | |
| CVE-2009-0880 | Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to load and execute arbitrary local DLL code via a .. ibm · director | Medium 6.8 | 32% | 4 exploits | |
| CVE-2009-0837 | Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary code via a long (1) relative path or (2) absolute path in the filename argument in an action, as demonstrated by the "Open/Execute a file"… foxit · reader3.0 | Critical 10.0 | 76% | 3 exploits |
Showing 1,851–1,900 of 2,494
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.