Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
2,494 vulnerabilities · highest exploit probability first
- CVE-2009-0187Critical 9.3Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote attackers to execute arbitrary code via a crafted HTTP URL with a long host name, which is not properly handled when constructing a "Connecting" log message.orbitdownloader · orbit downloaderEPSS40%3 exploitsPublished Feb 26, 2009
- CVE-2009-0658High 7.8acroread: multiple JBIG2-related security flawsadobe · acrobatEPSS88%5 exploitsPublished Feb 19, 2009
- CVE-2008-6132Medium 6.8Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via the start_date parameter.brickhost · phpscheduleitEPSS26%3 exploitsPublished Feb 13, 2009
- CVE-2009-0546Critical 9.3Stack-based buffer overflow in NewsGator FeedDemon 2.7 and earlier allows user-assisted remote attackers to execute arbitrary code via a long text attribute in an outline element in a .opml file.newsgator · feeddemonEPSS37%3 exploitsPublished Feb 12, 2009
- CVE-2009-0545Critical 10.0cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action.zeroshell · zeroshellEPSS90%1 exploitPublished Feb 12, 2009
- CVE-2009-0542High 7.5SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" (percent) character in the username, which introduces a "'" (single quote) character during variable substitution by mod_sql.proftpd project · proftpdEPSS74%2 exploitsPublished Feb 12, 2009
- CVE-2009-0075Critical 9.3Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to CFunctionPointer and the appending of document objects, aka "Uninitialized…microsoft · internet explorerEPSS85%3 exploitsPublished Feb 10, 2009
- CVE-2009-0478Medium 5.0Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service via an HTTP request with an invalid version number, which triggers a reachable assertion in (1) HttpMsg.c and (2) HttpStatusLine.c.squid · squidEPSS72%1 exploitPublished Feb 8, 2009
- CVE-2009-0476Critical 9.3Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedia Soft audio components for .NET, allows remote attackers to execute arbitrary code via a long string in a playlist (.pls) file, as originally reported for…multimediasoft · audio dj studio for .netEPSS37%7 exploitsPublished Feb 8, 2009
- CVE-2009-0184Critical 9.3Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allow remote attackers to execute arbitrary code via (1) a long file name within a torrent file, (2) a long tracker URL in a torrent file, or (3) a long…free download manager · free download managerEPSS28%3 exploitsPublished Feb 3, 2009
- CVE-2009-0183Critical 10.0Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute arbitrary code via a long Authorization header in an HTTP request.free download manager · free download managerEPSS67%2 exploitsPublished Feb 3, 2009
- CVE-2009-0323Critical 10.0Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrary code via (1) a long type parameter in an input tag, which is not properly handled by the EndOfXmlAttributeValue function; (2) an "HTML GI" in a start tag,…w3 · amayaEPSS62%2 exploitsPublished Jan 28, 2009
- CVE-2009-0182High 8.8Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line.vuplayer · vuplayerEPSS48%4 exploitsPublished Jan 20, 2009
- CVE-2008-4388Critical 9.3The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods.symantec · appstream clientEPSS38%2 exploitsPublished Jan 20, 2009
- CVE-2009-0133Critical 10.0Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Index file" field, possibly a related issue to CVE-2006-0564.microsoft · html help workshopEPSS67%7 exploitsPublished Jan 15, 2009
- CVE-2008-5457Critical 10.0Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via…oracle · bea product suiteEPSS61%3 exploitsPublished Jan 14, 2009
- CVE-2008-5444Critical 10.0Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5448 and CVE-2008-5449.oracle · secure backupEPSS61%2 exploitsPublished Jan 13, 2009
- CVE-2009-0043Critical 10.0The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors.ca · service level managementEPSS53%1 exploitPublished Jan 8, 2009
- CVE-2008-0067Critical 10.0Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program,…hp · openview network node managerEPSS63%2 exploitsPublished Jan 8, 2009
- CVE-2008-5711Critical 9.3Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value.facebook · photouploaderEPSS33%3 exploitsPublished Dec 24, 2008
- CVE-2008-5664Critical 9.3Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows remote attackers to execute arbitrary code via a crafted playlist (PLA) file.realtek · realtek media playerEPSS36%2 exploitsPublished Dec 18, 2008
- CVE-2008-5081Medium 5.0The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.avahi · avahiEPSS59%1 exploitPublished Dec 17, 2008
- CVE-2008-5499Critical 9.3flash-plugin: Linux-specific code execution flaw via crafted SWF fileadobe · flash player for linuxEPSS79%2 exploitsPublished Dec 17, 2008
- CVE-2008-5492Critical 9.3Heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OCX Control allows remote attackers to execute arbitrary code via a long first argument to the OpenPDF method.verypdf · verydoc pdf viewerEPSS35%3 exploitsPublished Dec 12, 2008
- CVE-2008-4844Critical 9.3Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via DSO bindings involving (1) an XML Island, (2) XML DSOs, or (3) Tabular…microsoft · internet explorerEPSS67%2 exploitsPublished Dec 11, 2008
- CVE-2008-5416Critical 9.0Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 Desktop Engine (WMSDE) on Windows Server 2003 SP1 and SP2; and Windows Internal…microsoft · sql serverEPSS87%4 exploitsPublished Dec 10, 2008
- CVE-2008-4255Critical 9.3Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, and Office Project 2003 SP3 and 2007 Gold…microsoft · projectEPSS54%1 exploitPublished Dec 10, 2008
- CVE-2008-5405Critical 9.3Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier, allows remote attackers to execute arbitrary code via an RDP file containing a long string.oxid · cain and abelEPSS47%3 exploitsPublished Dec 10, 2008
- CVE-2008-5353Critical 10.0OpenJDK calendar object deserialization allows privilege escalation (6734167)sun · jdkEPSS86%5 exploitsPublished Dec 4, 2008
- CVE-2008-5180Medium 5.3Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service (memory consumption) via a large number of SIP INVITE requests, which trigger the creation of many sessions.microsoft · office communicatorEPSS68%3 exploitsPublished Nov 20, 2008
- CVE-2008-5159Critical 10.0Integer overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to cause a denial of service (crash) via a large string length argument, which triggers memory corruption.clientsoftware · wincome mpd totalEPSS60%3 exploitsPublished Nov 18, 2008
- CVE-2008-5053Critical 10.0PHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader (com_rssreader) 1.0 component for Joomla!joomla · com rssreaderEPSS64%1 exploitPublished Nov 13, 2008
- CVE-2008-4037Critical 9.3Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka…microsoft · windows 2000EPSS59%3 exploitsPublished Nov 12, 2008
- CVE-2008-5036Critical 9.3Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText (rt) subtitle file, related to the ParseRealText function in modules/demux/subtitle.c.videolan · vlc media playerEPSS41%3 exploitsPublished Nov 10, 2008
- CVE-2008-5002Critical 9.3Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilkat Crypt ActiveX Component allows remote attackers to create and overwrite arbitrary files via the WriteFile method.chilkat software · chilkat crypt activex controlEPSS41%2 exploitsPublished Nov 10, 2008
- CVE-2008-4922Critical 9.3Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll) allows remote attackers to execute arbitrary code via a long (1) ImageURL property, and possibly the (2) Mode, (3) Page, or (4) Zoom properties.djvu · activex control for microsoft office 2000EPSS33%2 exploitsPublished Nov 4, 2008
- CVE-2008-4779Critical 10.0Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash) or execute arbitrary code via a long filename in a .zip file.tguzip · tguzipEPSS65%3 exploitsPublished Oct 29, 2008
- CVE-2008-4696Medium 4.3Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier (aka the "optional fragment"), which is not properly escaped before storage in the History Search database (aka…opera · operaEPSS46%3 exploitsPublished Oct 23, 2008
- CVE-2008-4687Critical 9.0mantis: code execution by registered users via sort parameter to manage_proj_page.phpmantis · mantisEPSS67%3 exploitsPublished Oct 22, 2008
- CVE-2008-4654Critical 9.3Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value.videolan · vlc media playerEPSS58%4 exploitsPublished Oct 22, 2008
- CVE-2008-4556Critical 10.0Stack-based buffer overflow in the adm_build_path function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted request.sun · solarisEPSS70%3 exploitsPublished Oct 14, 2008
- CVE-2008-4008Critical 10.0Unspecified vulnerability in the WebLogic Server Plugins for Apache component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, and 6.1 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.oracle · bea product suiteEPSS56%2 exploitsPublished Oct 14, 2008
- CVE-2008-4397Critical 10.0Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a ..broadcom · arcserve backupEPSS81%2 exploitsPublished Oct 14, 2008
- CVE-2008-4385Critical 9.3Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of arbitrary programs via by specifiying a malicious website argument to the Init method in (1) a certain ActiveX control (sysreqlab2.cab,…systemrequirementslab · system requirements labEPSS38%2 exploitsPublished Oct 14, 2008
- CVE-2008-4384Critical 9.3Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods.iseemedia · lpviewerEPSS29%2 exploitsPublished Oct 7, 2008
- CVE-2008-4449Critical 9.3Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIVMSG message.mirc · mircEPSS39%2 exploitsPublished Oct 6, 2008
- CVE-2008-4546Medium 4.3flash-plugin: crash caused by SWF files with different SWF versions obtained from the same URLadobe · flash playerEPSS66%1 exploitPublished Oct 2, 2008
- CVE-2008-4322Critical 10.0Stack-based buffer overflow in RealFlex Technologies Ltd.realflex technologies ltd · realwin serverEPSS65%2 exploitsPublished Sep 29, 2008
- CVE-2008-4193Critical 10.0Stack-based buffer overflow in SecurityGateway.dll in Alt-N Technologies SecurityGateway 1.0.1 allows remote attackers to execute arbitrary code via a long username parameter.alt-n · securitygatewayEPSS75%2 exploitsPublished Sep 24, 2008
- CVE-2008-3013Critical 9.3gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital…microsoft · digital image suiteEPSS52%1 exploitPublished Sep 10, 2008
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2009-0187 | Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote attackers to execute arbitrary code via a crafted HTTP URL with a long host name, which is not properly handled when constructing a "Connecting" log message. orbitdownloader · orbit downloader | Critical 9.3 | 40% | 3 exploits | |
| CVE-2009-0658 | acroread: multiple JBIG2-related security flaws adobe · acrobat | High 7.8 | 88% | 5 exploits | |
| CVE-2008-6132 | Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via the start_date parameter. brickhost · phpscheduleit | Medium 6.8 | 26% | 3 exploits | |
| CVE-2009-0546 | Stack-based buffer overflow in NewsGator FeedDemon 2.7 and earlier allows user-assisted remote attackers to execute arbitrary code via a long text attribute in an outline element in a .opml file. newsgator · feeddemon | Critical 9.3 | 37% | 3 exploits | |
| CVE-2009-0545 | cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action. zeroshell · zeroshell | Critical 10.0 | 90% | 1 exploit | |
| CVE-2009-0542 | SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" (percent) character in the username, which introduces a "'" (single quote) character during variable substitution by mod_sql. proftpd project · proftpd | High 7.5 | 74% | 2 exploits | |
| CVE-2009-0075 | Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to CFunctionPointer and the appending of document objects, aka "Uninitialized… microsoft · internet explorer | Critical 9.3 | 85% | 3 exploits | |
| CVE-2009-0478 | Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service via an HTTP request with an invalid version number, which triggers a reachable assertion in (1) HttpMsg.c and (2) HttpStatusLine.c. squid · squid | Medium 5.0 | 72% | 1 exploit | |
| CVE-2009-0476 | Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedia Soft audio components for .NET, allows remote attackers to execute arbitrary code via a long string in a playlist (.pls) file, as originally reported for… multimediasoft · audio dj studio for .net | Critical 9.3 | 37% | 7 exploits | |
| CVE-2009-0184 | Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allow remote attackers to execute arbitrary code via (1) a long file name within a torrent file, (2) a long tracker URL in a torrent file, or (3) a long… free download manager · free download manager | Critical 9.3 | 28% | 3 exploits | |
| CVE-2009-0183 | Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute arbitrary code via a long Authorization header in an HTTP request. free download manager · free download manager | Critical 10.0 | 67% | 2 exploits | |
| CVE-2009-0323 | Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrary code via (1) a long type parameter in an input tag, which is not properly handled by the EndOfXmlAttributeValue function; (2) an "HTML GI" in a start tag,… w3 · amaya | Critical 10.0 | 62% | 2 exploits | |
| CVE-2009-0182 | Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line. vuplayer · vuplayer | High 8.8 | 48% | 4 exploits | |
| CVE-2008-4388 | The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods. symantec · appstream client | Critical 9.3 | 38% | 2 exploits | |
| CVE-2009-0133 | Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Index file" field, possibly a related issue to CVE-2006-0564. microsoft · html help workshop | Critical 10.0 | 67% | 7 exploits | |
| CVE-2008-5457 | Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via… oracle · bea product suite | Critical 10.0 | 61% | 3 exploits | |
| CVE-2008-5444 | Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5448 and CVE-2008-5449. oracle · secure backup | Critical 10.0 | 61% | 2 exploits | |
| CVE-2009-0043 | The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors. ca · service level management | Critical 10.0 | 53% | 1 exploit | |
| CVE-2008-0067 | Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program,… hp · openview network node manager | Critical 10.0 | 63% | 2 exploits | |
| CVE-2008-5711 | Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value. facebook · photouploader | Critical 9.3 | 33% | 3 exploits | |
| CVE-2008-5664 | Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows remote attackers to execute arbitrary code via a crafted playlist (PLA) file. realtek · realtek media player | Critical 9.3 | 36% | 2 exploits | |
| CVE-2008-5081 | The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure. avahi · avahi | Medium 5.0 | 59% | 1 exploit | |
| CVE-2008-5499 | flash-plugin: Linux-specific code execution flaw via crafted SWF file adobe · flash player for linux | Critical 9.3 | 79% | 2 exploits | |
| CVE-2008-5492 | Heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OCX Control allows remote attackers to execute arbitrary code via a long first argument to the OpenPDF method. verypdf · verydoc pdf viewer | Critical 9.3 | 35% | 3 exploits | |
| CVE-2008-4844 | Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via DSO bindings involving (1) an XML Island, (2) XML DSOs, or (3) Tabular… microsoft · internet explorer | Critical 9.3 | 67% | 2 exploits | |
| CVE-2008-5416 | Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 Desktop Engine (WMSDE) on Windows Server 2003 SP1 and SP2; and Windows Internal… microsoft · sql server | Critical 9.0 | 87% | 4 exploits | |
| CVE-2008-4255 | Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, and Office Project 2003 SP3 and 2007 Gold… microsoft · project | Critical 9.3 | 54% | 1 exploit | |
| CVE-2008-5405 | Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier, allows remote attackers to execute arbitrary code via an RDP file containing a long string. oxid · cain and abel | Critical 9.3 | 47% | 3 exploits | |
| CVE-2008-5353 | OpenJDK calendar object deserialization allows privilege escalation (6734167) sun · jdk | Critical 10.0 | 86% | 5 exploits | |
| CVE-2008-5180 | Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service (memory consumption) via a large number of SIP INVITE requests, which trigger the creation of many sessions. microsoft · office communicator | Medium 5.3 | 68% | 3 exploits | |
| CVE-2008-5159 | Integer overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to cause a denial of service (crash) via a large string length argument, which triggers memory corruption. clientsoftware · wincome mpd total | Critical 10.0 | 60% | 3 exploits | |
| CVE-2008-5053 | PHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader (com_rssreader) 1.0 component for Joomla! joomla · com rssreader | Critical 10.0 | 64% | 1 exploit | |
| CVE-2008-4037 | Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka… microsoft · windows 2000 | Critical 9.3 | 59% | 3 exploits | |
| CVE-2008-5036 | Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText (rt) subtitle file, related to the ParseRealText function in modules/demux/subtitle.c. videolan · vlc media player | Critical 9.3 | 41% | 3 exploits | |
| CVE-2008-5002 | Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilkat Crypt ActiveX Component allows remote attackers to create and overwrite arbitrary files via the WriteFile method. chilkat software · chilkat crypt activex control | Critical 9.3 | 41% | 2 exploits | |
| CVE-2008-4922 | Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll) allows remote attackers to execute arbitrary code via a long (1) ImageURL property, and possibly the (2) Mode, (3) Page, or (4) Zoom properties. djvu · activex control for microsoft office 2000 | Critical 9.3 | 33% | 2 exploits | |
| CVE-2008-4779 | Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash) or execute arbitrary code via a long filename in a .zip file. tguzip · tguzip | Critical 10.0 | 65% | 3 exploits | |
| CVE-2008-4696 | Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier (aka the "optional fragment"), which is not properly escaped before storage in the History Search database (aka… opera · opera | Medium 4.3 | 46% | 3 exploits | |
| CVE-2008-4687 | mantis: code execution by registered users via sort parameter to manage_proj_page.php mantis · mantis | Critical 9.0 | 67% | 3 exploits | |
| CVE-2008-4654 | Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value. videolan · vlc media player | Critical 9.3 | 58% | 4 exploits | |
| CVE-2008-4556 | Stack-based buffer overflow in the adm_build_path function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted request. sun · solaris | Critical 10.0 | 70% | 3 exploits | |
| CVE-2008-4008 | Unspecified vulnerability in the WebLogic Server Plugins for Apache component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, and 6.1 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. oracle · bea product suite | Critical 10.0 | 56% | 2 exploits | |
| CVE-2008-4397 | Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a .. broadcom · arcserve backup | Critical 10.0 | 81% | 2 exploits | |
| CVE-2008-4385 | Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of arbitrary programs via by specifiying a malicious website argument to the Init method in (1) a certain ActiveX control (sysreqlab2.cab,… systemrequirementslab · system requirements lab | Critical 9.3 | 38% | 2 exploits | |
| CVE-2008-4384 | Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods. iseemedia · lpviewer | Critical 9.3 | 29% | 2 exploits | |
| CVE-2008-4449 | Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIVMSG message. mirc · mirc | Critical 9.3 | 39% | 2 exploits | |
| CVE-2008-4546 | flash-plugin: crash caused by SWF files with different SWF versions obtained from the same URL adobe · flash player | Medium 4.3 | 66% | 1 exploit | |
| CVE-2008-4322 | Stack-based buffer overflow in RealFlex Technologies Ltd. realflex technologies ltd · realwin server | Critical 10.0 | 65% | 2 exploits | |
| CVE-2008-4193 | Stack-based buffer overflow in SecurityGateway.dll in Alt-N Technologies SecurityGateway 1.0.1 allows remote attackers to execute arbitrary code via a long username parameter. alt-n · securitygateway | Critical 10.0 | 75% | 2 exploits | |
| CVE-2008-3013 | gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital… microsoft · digital image suite | Critical 9.3 | 52% | 1 exploit |
Showing 1,901–1,950 of 2,494
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.