Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 19, 2026
401 vulnerabilities · highest exploit probability first
- CVE-2014-9708Medium 5.0Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demonstrated by "Range: x=,".embedthis · appwebEPSS56%2 exploitsPublished Mar 31, 2015
- CVE-2015-0802Medium 5.0Mozilla: Windows can retain access to privileged content on navigation to unprivileged pages (MFSA 2015-42)mozilla · firefoxEPSS67%3 exploitsPublished Mar 31, 2015
- CVE-2015-0816Medium 5.0Mozilla: resource: // documents can load privileged pages (MFSA 2015-33)mozilla · firefoxEPSS67%2 exploitsPublished Mar 31, 2015
- CVE-2014-6593Medium 4.0Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.oracle · jrockitEPSS66%1 exploitPublished Feb 24, 2015
- CVE-2015-0923Medium 5.0The ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1 allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference within an…ektron · ektron content management systemEPSS22%1 exploitPublished Feb 14, 2015
- CVE-2015-0072Medium 4.3Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy and inject arbitrary web script or HTML via vectors involving an IFRAME element that triggers a redirect, a second IFRAME element that…microsoft · internet explorerEPSS72%1 exploitPublished Feb 7, 2015
- CVE-2014-100015Medium 6.4Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a ..solidworks · product data managementEPSS57%6 exploitsPublished Jan 13, 2015
- CVE-2014-100002Medium 5.0Directory traversal vulnerability in ManageEngine SupportCenter Plus 7.9 before 7917 allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the attach parameter to WorkOrder.do in the file attachment for a new ticket.zohocorp · manageengine supportcenter plusEPSS60%2 exploitsPublished Jan 13, 2015
- CVE-2014-7285Medium 6.5The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting command strings into unspecified PHP scripts.symantec · web gatewayEPSS50%2 exploitsPublished Dec 17, 2014
- CVE-2014-6034Medium 5.0Directory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe.FileCollector servlet in ZOHO ManageEngine OpManager 8.8 through 11.3, Social IT Plus 11.0, and IT360 10.4 and earlier allows remote attackers or remote authenticated users to write to…zohocorp · manageengine opmanagerEPSS79%3 exploitsPublished Dec 4, 2014
- CVE-2014-5446Medium 5.0Directory traversal vulnerability in the DisplayChartPDF servlet in ZOHO ManageEngine Netflow Analyzer 8.6 through 10.2 and IT360 10.3 allows remote attackers and remote authenticated users to read arbitrary files via a ..zohocorp · manageengine netflow analyzerEPSS55%2 exploitsPublished Dec 4, 2014
- CVE-2014-5445Medium 5.0Multiple absolute path traversal vulnerabilities in ZOHO ManageEngine Netflow Analyzer 8.6 through 10.2 and IT360 10.3 allow remote attackers or remote authenticated users to read arbitrary files via a full pathname in the schFilePath parameter to the (1) CSVServlet or (2)…zohocorp · manageengine netflow analyzerEPSS98%2 exploitsPublished Dec 4, 2014
- CVE-2014-9034Medium 5.3wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to cause a denial of service (CPU consumption) via a long password that is improperly handled during hashing, a similar issue to…wordpress · wordpressEPSS83%2 exploitsPublished Nov 25, 2014
- CVE-2014-9016Medium 5.0The password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes (aka phpass) module 6.x-2.x before 6.x-2.1 for Drupal allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted request.drupal · drupalEPSS82%1 exploitPublished Nov 24, 2014
- CVE-2014-8998Medium 6.5lib/message.php in X7 Chat 2.0.0 through 2.0.5.1 allows remote authenticated users to execute arbitrary PHP code via a crafted HTTP header to index.php, which is processed by the preg_replace function with the eval switch.x7chat · x7 chatEPSS36%4 exploitsPublished Nov 20, 2014
- CVE-2014-8598Medium 6.4The XML Import/Export plugin in MantisBT 1.2.x does not restrict access, which allows remote attackers to (1) upload arbitrary XML files via the import page or (2) obtain sensitive information via the export page.mantisbt · mantisbtEPSS38%2 exploitsPublished Nov 18, 2014
- CVE-2014-2268Medium 5.0views/Index.php in the Install module in vTiger 6.0 before Security Patch 2 does not properly restrict access, which allows remote attackers to re-install the application via a request that sets the X-Requested-With HTTP header, as demonstrated by executing arbitrary PHP code…vtiger · vtiger crmEPSS31%3 exploitsPublished Nov 15, 2014
- CVE-2014-5377Medium 5.0ReadUsersFromMasterServlet in ManageEngine DeviceExpert before 5.9 build 5981 allows remote attackers to obtain user account credentials via a direct request.manageengine · device expertEPSS57%3 exploitsPublished Sep 4, 2014
- CVE-2014-5350Medium 5.0Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via a (1) ..bitdefender · gravityzoneEPSS64%1 exploitPublished Aug 19, 2014
- CVE-2014-0226Medium 6.8Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers…apache · http serverEPSS86%1 exploitPublished Jul 20, 2014
- CVE-2014-4977Medium 6.5Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) selectedUserGroup parameter in a create new user request to cgi-bin/admin.cgi or the (2) user_id parameter in the changeUnit…sonicwall · scrutinizerEPSS75%3 exploitsPublished Jul 16, 2014
- CVE-2013-7389Medium 4.3Multiple cross-site scripting (XSS) vulnerabilities in D-Link DIR-645 Router (Rev.dlink · dir-645EPSS28%3 exploitsPublished Jul 7, 2014
- CVE-2010-5299Medium 6.8Stack-based buffer overflow in MicroP 0.1.1.1600 allows remote attackers to execute arbitrary code via a crafted .mppl file.microp project · micropEPSS34%8 exploitsPublished May 22, 2014
- CVE-2013-4468Medium 6.5VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in the extension parameter in an OriginateVDRelogin action to manager_send.php.vicidial · vicidialEPSS32%3 exploitsPublished May 14, 2014
- CVE-2013-4490Medium 6.5The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the public key.gitlab · gitlabEPSS42%2 exploitsPublished May 13, 2014
- CVE-2014-2424Medium 4.0Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users to affect integrity via vectors related to CEP system.oracle · fusion middlewareEPSS48%2 exploitsPublished Apr 15, 2014
- CVE-2013-2641Medium 5.0Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read arbitrary files via the id parameter.sophos · web applianceEPSS71%1 exploitPublished Mar 18, 2014
- CVE-2013-4467Medium 6.5Multiple SQL injection vulnerabilities in the agent interface (agc/) in VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier allow (1) remote attackers to execute arbitrary SQL commands via the campaign variable in SCRIPT_multirecording_AJAX.php, (2)…vicidial · vicidialEPSS31%2 exploitsPublished Mar 11, 2014
- CVE-2014-2314Medium 4.3Directory traversal vulnerability in the Issue Collector plugin in Atlassian JIRA before 6.0.4 allows remote attackers to create arbitrary files via unspecified vectors.atlassian · jiraEPSS26%3 exploitsPublished Mar 9, 2014
- CVE-2012-6636Medium 6.8The Android API before 17 does not properly restrict the WebView.addJavascriptInterface method, which allows remote attackers to execute arbitrary methods of Java objects by using the Java Reflection API within crafted JavaScript code that is loaded into the WebView component in…google · android apiEPSS38%2 exploitsPublished Mar 3, 2014
- CVE-2013-5015Medium 6.5SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote authenticated users to…symantec · endpoint protection managerEPSS29%3 exploitsPublished Feb 14, 2014
- CVE-2014-0038Medium 6.9The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted timeout pointer parameter.linux · linux kernelEPSS35%5 exploitsPublished Feb 6, 2014
- CVE-2014-1610Medium 6.0MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF file upload support is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the page parameter to includes/media/DjVu.php; (2) the w…mediawiki · mediawikiEPSS43%3 exploitsPublished Jan 30, 2014
- CVE-2014-1683Medium 6.8The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in SkyBlueCanvas CMS before 1.1 r248-04, when the pid parameter is 4, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) name, (2) email, (3) subject, or…skybluecanvas · skybluecanvasEPSS31%3 exploitsPublished Jan 29, 2014
- CVE-2012-5192Medium 5.0Directory traversal vulnerability in gmap/view_overlay.php in Bitweaver 2.8.1 and earlier allows remote attackers to read arbitrary files via "''%2F" (dot dot encoded slash) sequences in the overlay_type parameter.bitweaver · bitweaverEPSS52%1 exploitPublished Jan 27, 2014
- CVE-2013-5880Medium 5.0Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.oracle · supply chain products suiteEPSS60%1 exploitPublished Jan 15, 2014
- CVE-2013-5877Medium 5.0Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.0, and 12.2.1 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.oracle · supply chain products suiteEPSS55%1 exploitPublished Jan 15, 2014
- CVE-2013-5795Medium 5.0Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.1, 12.2.2, and 12.2.3 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.oracle · supply chain products suiteEPSS59%1 exploitPublished Jan 15, 2014
- CVE-2013-5211Medium 5.0The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.ntp · ntpEPSS98%1 exploitPublished Jan 2, 2014
- CVE-2013-7091Medium 5.0Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zimbra 7.2.2 and 8.0.2 allows remote attackers to read arbitrary files via a ..synacor · zimbra collaboration suiteEPSS86%4 exploitsPublished Dec 13, 2013
- CVE-2013-5447Medium 6.8Stack-based buffer overflow in IBM Forms Viewer 4.x before 4.0.0.3 and 8.x before 8.0.1.1 allows remote attackers to execute arbitrary code via an XFDL form with a long fontname value.ibm · forms viewerEPSS34%2 exploitsPublished Dec 10, 2013
- CVE-2013-4212Medium 6.8Certain getText methods in the ActionSupport controller in Apache Roller before 5.0.2 allow remote attackers to execute arbitrary OGNL expressions via the first or second parameter, as demonstrated by the pageTitle parameter in the !getPageTitle sub-URL to roller-ui/login.rol,…apache · rollerEPSS81%3 exploitsPublished Dec 7, 2013
- CVE-2013-5576Medium 6.8administrator/components/com_media/helpers/media.php in the media manager in Joomla!joomla · joomla\!EPSS48%3 exploitsPublished Oct 9, 2013
- CVE-2013-4341Medium 4.3Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 allow remote attackers to inject arbitrary web script or HTML via a crafted blog link within an RSS feed.moodle · moodleEPSS22%3 exploitsPublished Sep 16, 2013
- CVE-2013-4124Medium 5.0Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.samba · sambaEPSS69%1 exploitPublished Aug 6, 2013
- CVE-2013-3763Medium 5.5Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 7.4.0 and 7.5.1.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2013-3764.oracle · fusion middlewareEPSS60%2 exploitsPublished Jul 17, 2013
- CVE-2013-4123Medium 5.0client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote attackers to cause a denial of service via a crafted port number in a HTTP Host header.squid-cache · squidEPSS80%1 exploitPublished Jul 13, 2013
- CVE-2013-4074Medium 5.0The dissect_capwap_data function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 incorrectly uses a -1 data value to represent an error condition, which allows remote attackers to cause a denial of service…wireshark · wiresharkEPSS61%3 exploitsPublished Jun 9, 2013
- CVE-2013-2121Medium 6.0Foreman: app/controllers/bookmarks_controller.rb remote code executiontheforeman · foremanEPSS25%3 exploitsPublished Jun 7, 2013
- CVE-2013-3522Medium 6.5SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlier allows remote authenticated users to execute arbitrary SQL commands via the nodeid parameter.vbulletin · vbulletinEPSS27%4 exploitsPublished May 10, 2013
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2014-9708 | Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demonstrated by "Range: x=,". embedthis · appweb | Medium 5.0 | 56% | 2 exploits | |
| CVE-2015-0802 | Mozilla: Windows can retain access to privileged content on navigation to unprivileged pages (MFSA 2015-42) mozilla · firefox | Medium 5.0 | 67% | 3 exploits | |
| CVE-2015-0816 | Mozilla: resource: // documents can load privileged pages (MFSA 2015-33) mozilla · firefox | Medium 5.0 | 67% | 2 exploits | |
| CVE-2014-6593 | Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. oracle · jrockit | Medium 4.0 | 66% | 1 exploit | |
| CVE-2015-0923 | The ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1 allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference within an… ektron · ektron content management system | Medium 5.0 | 22% | 1 exploit | |
| CVE-2015-0072 | Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy and inject arbitrary web script or HTML via vectors involving an IFRAME element that triggers a redirect, a second IFRAME element that… microsoft · internet explorer | Medium 4.3 | 72% | 1 exploit | |
| CVE-2014-100015 | Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. solidworks · product data management | Medium 6.4 | 57% | 6 exploits | |
| CVE-2014-100002 | Directory traversal vulnerability in ManageEngine SupportCenter Plus 7.9 before 7917 allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the attach parameter to WorkOrder.do in the file attachment for a new ticket. zohocorp · manageengine supportcenter plus | Medium 5.0 | 60% | 2 exploits | |
| CVE-2014-7285 | The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting command strings into unspecified PHP scripts. symantec · web gateway | Medium 6.5 | 50% | 2 exploits | |
| CVE-2014-6034 | Directory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe.FileCollector servlet in ZOHO ManageEngine OpManager 8.8 through 11.3, Social IT Plus 11.0, and IT360 10.4 and earlier allows remote attackers or remote authenticated users to write to… zohocorp · manageengine opmanager | Medium 5.0 | 79% | 3 exploits | |
| CVE-2014-5446 | Directory traversal vulnerability in the DisplayChartPDF servlet in ZOHO ManageEngine Netflow Analyzer 8.6 through 10.2 and IT360 10.3 allows remote attackers and remote authenticated users to read arbitrary files via a .. zohocorp · manageengine netflow analyzer | Medium 5.0 | 55% | 2 exploits | |
| CVE-2014-5445 | Multiple absolute path traversal vulnerabilities in ZOHO ManageEngine Netflow Analyzer 8.6 through 10.2 and IT360 10.3 allow remote attackers or remote authenticated users to read arbitrary files via a full pathname in the schFilePath parameter to the (1) CSVServlet or (2)… zohocorp · manageengine netflow analyzer | Medium 5.0 | 98% | 2 exploits | |
| CVE-2014-9034 | wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to cause a denial of service (CPU consumption) via a long password that is improperly handled during hashing, a similar issue to… wordpress · wordpress | Medium 5.3 | 83% | 2 exploits | |
| CVE-2014-9016 | The password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes (aka phpass) module 6.x-2.x before 6.x-2.1 for Drupal allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted request. drupal · drupal | Medium 5.0 | 82% | 1 exploit | |
| CVE-2014-8998 | lib/message.php in X7 Chat 2.0.0 through 2.0.5.1 allows remote authenticated users to execute arbitrary PHP code via a crafted HTTP header to index.php, which is processed by the preg_replace function with the eval switch. x7chat · x7 chat | Medium 6.5 | 36% | 4 exploits | |
| CVE-2014-8598 | The XML Import/Export plugin in MantisBT 1.2.x does not restrict access, which allows remote attackers to (1) upload arbitrary XML files via the import page or (2) obtain sensitive information via the export page. mantisbt · mantisbt | Medium 6.4 | 38% | 2 exploits | |
| CVE-2014-2268 | views/Index.php in the Install module in vTiger 6.0 before Security Patch 2 does not properly restrict access, which allows remote attackers to re-install the application via a request that sets the X-Requested-With HTTP header, as demonstrated by executing arbitrary PHP code… vtiger · vtiger crm | Medium 5.0 | 31% | 3 exploits | |
| CVE-2014-5377 | ReadUsersFromMasterServlet in ManageEngine DeviceExpert before 5.9 build 5981 allows remote attackers to obtain user account credentials via a direct request. manageengine · device expert | Medium 5.0 | 57% | 3 exploits | |
| CVE-2014-5350 | Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via a (1) .. bitdefender · gravityzone | Medium 5.0 | 64% | 1 exploit | |
| CVE-2014-0226 | Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers… apache · http server | Medium 6.8 | 86% | 1 exploit | |
| CVE-2014-4977 | Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) selectedUserGroup parameter in a create new user request to cgi-bin/admin.cgi or the (2) user_id parameter in the changeUnit… sonicwall · scrutinizer | Medium 6.5 | 75% | 3 exploits | |
| CVE-2013-7389 | Multiple cross-site scripting (XSS) vulnerabilities in D-Link DIR-645 Router (Rev. dlink · dir-645 | Medium 4.3 | 28% | 3 exploits | |
| CVE-2010-5299 | Stack-based buffer overflow in MicroP 0.1.1.1600 allows remote attackers to execute arbitrary code via a crafted .mppl file. microp project · microp | Medium 6.8 | 34% | 8 exploits | |
| CVE-2013-4468 | VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in the extension parameter in an OriginateVDRelogin action to manager_send.php. vicidial · vicidial | Medium 6.5 | 32% | 3 exploits | |
| CVE-2013-4490 | The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the public key. gitlab · gitlab | Medium 6.5 | 42% | 2 exploits | |
| CVE-2014-2424 | Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users to affect integrity via vectors related to CEP system. oracle · fusion middleware | Medium 4.0 | 48% | 2 exploits | |
| CVE-2013-2641 | Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read arbitrary files via the id parameter. sophos · web appliance | Medium 5.0 | 71% | 1 exploit | |
| CVE-2013-4467 | Multiple SQL injection vulnerabilities in the agent interface (agc/) in VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier allow (1) remote attackers to execute arbitrary SQL commands via the campaign variable in SCRIPT_multirecording_AJAX.php, (2)… vicidial · vicidial | Medium 6.5 | 31% | 2 exploits | |
| CVE-2014-2314 | Directory traversal vulnerability in the Issue Collector plugin in Atlassian JIRA before 6.0.4 allows remote attackers to create arbitrary files via unspecified vectors. atlassian · jira | Medium 4.3 | 26% | 3 exploits | |
| CVE-2012-6636 | The Android API before 17 does not properly restrict the WebView.addJavascriptInterface method, which allows remote attackers to execute arbitrary methods of Java objects by using the Java Reflection API within crafted JavaScript code that is loaded into the WebView component in… google · android api | Medium 6.8 | 38% | 2 exploits | |
| CVE-2013-5015 | SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote authenticated users to… symantec · endpoint protection manager | Medium 6.5 | 29% | 3 exploits | |
| CVE-2014-0038 | The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted timeout pointer parameter. linux · linux kernel | Medium 6.9 | 35% | 5 exploits | |
| CVE-2014-1610 | MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF file upload support is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the page parameter to includes/media/DjVu.php; (2) the w… mediawiki · mediawiki | Medium 6.0 | 43% | 3 exploits | |
| CVE-2014-1683 | The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in SkyBlueCanvas CMS before 1.1 r248-04, when the pid parameter is 4, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) name, (2) email, (3) subject, or… skybluecanvas · skybluecanvas | Medium 6.8 | 31% | 3 exploits | |
| CVE-2012-5192 | Directory traversal vulnerability in gmap/view_overlay.php in Bitweaver 2.8.1 and earlier allows remote attackers to read arbitrary files via "''%2F" (dot dot encoded slash) sequences in the overlay_type parameter. bitweaver · bitweaver | Medium 5.0 | 52% | 1 exploit | |
| CVE-2013-5880 | Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect confidentiality via unknown vectors related to DM Others. oracle · supply chain products suite | Medium 5.0 | 60% | 1 exploit | |
| CVE-2013-5877 | Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.0, and 12.2.1 allows remote attackers to affect confidentiality via unknown vectors related to DM Others. oracle · supply chain products suite | Medium 5.0 | 55% | 1 exploit | |
| CVE-2013-5795 | Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.1, 12.2.2, and 12.2.3 allows remote attackers to affect confidentiality via unknown vectors related to DM Others. oracle · supply chain products suite | Medium 5.0 | 59% | 1 exploit | |
| CVE-2013-5211 | The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013. ntp · ntp | Medium 5.0 | 98% | 1 exploit | |
| CVE-2013-7091 | Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zimbra 7.2.2 and 8.0.2 allows remote attackers to read arbitrary files via a .. synacor · zimbra collaboration suite | Medium 5.0 | 86% | 4 exploits | |
| CVE-2013-5447 | Stack-based buffer overflow in IBM Forms Viewer 4.x before 4.0.0.3 and 8.x before 8.0.1.1 allows remote attackers to execute arbitrary code via an XFDL form with a long fontname value. ibm · forms viewer | Medium 6.8 | 34% | 2 exploits | |
| CVE-2013-4212 | Certain getText methods in the ActionSupport controller in Apache Roller before 5.0.2 allow remote attackers to execute arbitrary OGNL expressions via the first or second parameter, as demonstrated by the pageTitle parameter in the !getPageTitle sub-URL to roller-ui/login.rol,… apache · roller | Medium 6.8 | 81% | 3 exploits | |
| CVE-2013-5576 | administrator/components/com_media/helpers/media.php in the media manager in Joomla! joomla · joomla\! | Medium 6.8 | 48% | 3 exploits | |
| CVE-2013-4341 | Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 allow remote attackers to inject arbitrary web script or HTML via a crafted blog link within an RSS feed. moodle · moodle | Medium 4.3 | 22% | 3 exploits | |
| CVE-2013-4124 | Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet. samba · samba | Medium 5.0 | 69% | 1 exploit | |
| CVE-2013-3763 | Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 7.4.0 and 7.5.1.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2013-3764. oracle · fusion middleware | Medium 5.5 | 60% | 2 exploits | |
| CVE-2013-4123 | client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote attackers to cause a denial of service via a crafted port number in a HTTP Host header. squid-cache · squid | Medium 5.0 | 80% | 1 exploit | |
| CVE-2013-4074 | The dissect_capwap_data function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 incorrectly uses a -1 data value to represent an error condition, which allows remote attackers to cause a denial of service… wireshark · wireshark | Medium 5.0 | 61% | 3 exploits | |
| CVE-2013-2121 | Foreman: app/controllers/bookmarks_controller.rb remote code execution theforeman · foreman | Medium 6.0 | 25% | 3 exploits | |
| CVE-2013-3522 | SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlier allows remote authenticated users to execute arbitrary SQL commands via the nodeid parameter. vbulletin · vbulletin | Medium 6.5 | 27% | 4 exploits |
Showing 151–200 of 401
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.