Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Emerging

Emerging Threats, Before They Hit KEV.

Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.

Synced hourly · figures as of Oct 20, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
2,494 vulnerabilities · highest exploit probability first
  • CVE-2008-3008Critical 9.3
    Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote attackers to execute arbitrary code via a long first argument to the GetDetailsString method, aka "Windows Media Encoder Buffer Overrun…
    microsoft · windows media encoder
    EPSS56%
    2 exploits
    Published Sep 10, 2008
  • CVE-2007-5348Critical 9.3
    Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8,…
    microsoft · digital image suite
    EPSS53%
    1 exploit
    Published Sep 10, 2008
  • CVE-2008-3922Critical 9.3
    awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences in the sort parameter, which is used by the multisort function when dynamically creating an anonymous PHP function.
    telartis bv · awstats totals
    EPSS53%
    2 exploits
    Published Sep 4, 2008
  • CVE-2008-3878Critical 9.3
    Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the HttpUpload method.
    ultrashareware · ultra office control
    EPSS36%
    2 exploits
    Published Sep 2, 2008
  • CVE-2007-1682Critical 9.3
    Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute arbitrary code via unspecified calls to the (1) BuildPath, (2) GetDriveName, (3) DriveExists, or (4) DeleteFile method.
    softartisans · xfile
    EPSS30%
    2 exploits
    Published Aug 27, 2008
  • CVE-2008-3704Critical 9.3
    Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows…
    microsoft · visual basic
    EPSS56%
    2 exploits
    Published Aug 18, 2008
  • CVE-2008-3558Critical 9.3
    Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before 20.2008.2606.4919 allows remote attackers to execute arbitrary code via a long argument to the NewObject method.
    cisco · webex meeting manager
    EPSS65%
    2 exploits
    Published Aug 8, 2008
  • CVE-2008-3656High 7.8
    ruby: WEBrick DoS vulnerability (CPU consumption)
    ruby-lang · ruby
    EPSS70%
    1 exploit
    Published Aug 8, 2008
  • CVE-2008-3257Critical 10.0
    Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP…
    bea systems · weblogic server
    EPSS84%
    2 exploits
    Published Jul 22, 2008
  • CVE-2008-1447Medium 6.8
    The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses…
    isc · bind
    EPSS95%
    3 exploits
    Published Jul 8, 2008
  • CVE-2008-2463Medium 6.8
    The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document…
    microsoft · office snapshot viewer activex
    EPSS59%
    3 exploits
    Published Jul 7, 2008
  • CVE-2008-2908Critical 9.3
    Multiple stack-based buffer overflows in a certain ActiveX control in ienipp.ocx in Novell iPrint Client for Windows before 4.36 allow remote attackers to execute arbitrary code via a long value of the (1) operation, (2) printer-url, or (3) target-frame parameter.
    novell · iprint client
    EPSS35%
    2 exploits
    Published Jun 30, 2008
  • CVE-2008-2789High 7.5
    SQL injection vulnerability in pages/index.php in BASIC-CMS allows remote attackers to execute arbitrary SQL commands via the page_id parameter.
    basic-cms · basic-cms
    EPSS23%
    1 exploit
    Published Jun 20, 2008
  • CVE-2008-2639High 7.6
    Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows remote attackers to execute arbitrary code via a long string in the second application packet in a TCP session on port 20222.
    citect · citectfacilities
    EPSS78%
    2 exploits
    Published Jun 16, 2008
  • CVE-2008-2703Critical 10.0
    Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow remote attackers to execute arbitrary code via "spoofed server responses" that contain a long string after the NM_A_SZ_TRANSACTION_ID field name.
    novell · groupwise messenger
    EPSS61%
    3 exploits
    Published Jun 13, 2008
  • CVE-2008-2683Critical 9.3
    The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to force the download and storage of arbitrary files by specifying the origin URL in the first argument to the DownloadImageFileURL method, and the local filename in…
    black ice · barcode sdk
    EPSS35%
    3 exploits
    Published Jun 12, 2008
  • CVE-2008-0960Critical 10.0
    SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 through 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3RC1 and 7.3RC2;…
    juniper · session and resource control
    EPSS69%
    1 exploit
    Published Jun 10, 2008
  • CVE-2008-2551Critical 9.3
    The DownloaderActiveX Control (DownloaderActiveX.ocx) in Icona SpA C6 Messenger 1.0.0.1 allows remote attackers to force the download and execution of arbitrary files via a URL in the propDownloadUrl parameter with the propPostDownloadAction parameter set to "run."
    icona · instant messenger
    EPSS47%
    2 exploits
    Published Jun 4, 2008
  • CVE-2008-1661Critical 10.0
    Stack-based buffer overflow in DoubleTake.exe in HP StorageWorks Storage Mirroring (SWSM) before 4.5 SP2 allows remote attackers to execute arbitrary code via a crafted encoded authentication request.
    hp · storageworks storage mirroring
    EPSS69%
    3 exploits
    Published Jun 4, 2008
  • CVE-2008-1105High 7.5
    Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.
    samba · samba
    EPSS69%
    1 exploit
    Published May 29, 2008
  • CVE-2008-2499High 7.5
    Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code via a crafted URL.
    ibm · lotus sametime
    EPSS77%
    3 exploits
    Published May 29, 2008
  • CVE-2008-2158Critical 10.0
    Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1 for Windows allow remote attackers to execute arbitrary code via crafted TCP packets to port 41025.
    emc corporation · alphastor
    EPSS58%
    2 exploits
    Published May 29, 2008
  • CVE-2008-0955Critical 9.3
    Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote attackers to execute arbitrary code via a long CacheFolder property value.
    creative · creative software autoupdate engine
    EPSS41%
    2 exploits
    Published May 29, 2008
  • CVE-2008-2549Medium 4.3
    acroread: crash and possible code execution
    adobe · acrobat reader
    EPSS53%
    1 exploit
    Published May 29, 2008
  • CVE-2008-2240Critical 10.0
    Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long Accept-Language HTTP header.
    ibm · lotus domino
    EPSS65%
    2 exploits
    Published May 22, 2008
  • CVE-2008-2286High 7.5
    SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via unspecified string fields in a notification packet.
    symantec · altiris deployment solution
    EPSS33%
    2 exploits
    Published May 18, 2008
  • CVE-2008-2168Medium 4.3
    Cross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page.
    apache · http server
    EPSS55%
    1 exploit
    Published May 13, 2008
  • CVE-2008-0166High 7.5
    OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which makes it easier for remote attackers to conduct brute force guessing attacks against cryptographic keys.
    openssl · openssl
    EPSS71%
    3 exploits
    Published May 13, 2008
  • CVE-2008-2161Critical 10.0
    Buffer overflow in TFTP Server SP 1.4 and 1.5 on Windows, and possibly other versions, allows remote attackers to execute arbitrary code via a long TFTP error packet.
    tftp · tftp server sp
    EPSS65%
    1 exploit
    Published May 12, 2008
  • CVE-2008-1914Critical 10.0
    Stack-based buffer overflow in the AntServer module (AntServer.exe) in BigAnt IM Server in BigAnt Messenger 2.2 allows remote attackers to execute arbitrary code via a long URI in a request to TCP port 6080.
    bigantsoft · bigant messenger
    EPSS74%
    6 exploits
    Published Apr 22, 2008
  • CVE-2008-1898Critical 9.3
    A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 and 2007, allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via an invalid WksPictureInterface property value, which…
    microsoft · office
    EPSS52%
    2 exploits
    Published Apr 21, 2008
  • CVE-2008-0320Critical 9.3
    openoffice.org: OLE files parsing heap overflows
    openoffice · openoffice.org
    EPSS57%
    2 exploits
    Published Apr 17, 2008
  • CVE-2008-1724Critical 9.3
    Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX control in vcst_en.dll 1.0.0.5 in Tumbleweed SecureTransport Server before 4.6.1 Hotfix 20 allows remote attackers to execute arbitrary code via a long remoteFile…
    tumbleweed · securetransport server app
    EPSS35%
    2 exploits
    Published Apr 11, 2008
  • CVE-2008-1083High 8.1
    Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF or WMF image file with a malformed header that triggers…
    microsoft · windows 2000
    EPSS57%
    1 exploit
    Published Apr 8, 2008
  • CVE-2008-1697Critical 10.0
    Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.53, 7.51, and earlier allows remote attackers to execute arbitrary code via a long URI in an HTTP request processed by ovas.exe, as demonstrated by a certain topology/homeBaseView request.
    hp · openview network node manager
    EPSS74%
    2 exploits
    Published Apr 8, 2008
  • CVE-2007-6019Critical 9.3
    Flash Player input validation error
    adobe · flash
    EPSS60%
    1 exploit
    Published Apr 8, 2008
  • CVE-2007-4620Critical 9.0
    Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and…
    broadcom · anti-virus for the enterprise
    EPSS52%
    2 exploits
    Published Apr 7, 2008
  • CVE-2008-1602Critical 10.0
    Stack-based buffer overflow in Orbit downloader 2.6.3 and 2.6.4 allows remote attackers to execute arbitrary code via a long download URL, which is not properly handled during Unicode conversion for a balloon notification after a download has failed.
    orbit downloader · orbit downloader
    EPSS67%
    2 exploits
    Published Apr 6, 2008
  • CVE-2008-0311Critical 9.3
    Stack-based buffer overflow in the PGMWebHandler::parse_request function in the StarTeam Multicast Service component (STMulticastService) 6.4 in Borland CaliberRM 2006 allows remote attackers to execute arbitrary code via a large HTTP request.
    borland · caliberrm
    EPSS31%
    2 exploits
    Published Apr 6, 2008
  • CVE-2008-1611Critical 10.0
    Stack-based buffer overflow in TFTP Server SP 1.4 for Windows allows remote attackers to cause a denial of service or execute arbitrary code via a long filename in a read or write request.
    tftp-server · winagents tftp server
    EPSS68%
    3 exploits
    Published Apr 1, 2008
  • CVE-2008-1610High 7.5
    Stack-based buffer overflow in TallSoft Quick TFTP Server Pro 2.1 allows remote attackers to cause a denial of service or execute arbitrary code via a long mode field in a read or write request.
    tallsoft quick · tftp server pro
    EPSS54%
    3 exploits
    Published Apr 1, 2008
  • CVE-2008-0926High 7.5
    The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on client-side authentication, which allows remote attackers to bypass authentication via requests for /SOAP URIs, and cause a denial of service (daemon shutdown) or…
    novell · edirectory
    EPSS58%
    1 exploit
    Published Mar 28, 2008
  • CVE-2008-1562Medium 5.0
    The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet, a different vulnerability than CVE-2006-5740.
    wireshark · wireshark
    EPSS51%
    1 exploit
    Published Mar 28, 2008
  • CVE-2008-1491Critical 10.0
    Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 and 2.0.0.24 allows remote attackers to execute arbitrary code via a long string to TCP port 623.
    asus · remote console
    EPSS70%
    2 exploits
    Published Mar 25, 2008
  • CVE-2008-1472Critical 9.3
    Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including BrightStor ARCserve Backup R11.5, Desktop Management Suite r11.1 through r11.2, and Unicenter products r11.1 through r11.2, allows remote attackers to execute…
    computer associates · desktop management suite
    EPSS40%
    2 exploits
    Published Mar 24, 2008
  • CVE-2008-1365Medium 6.4
    Stack-based buffer overflow in Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long encrypted password, which…
    trend micro · officescan corporate edition
    EPSS51%
    3 exploits
    Published Mar 17, 2008
  • CVE-2008-1358Medium 6.5
    Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to execute arbitrary code via a FETCH command with a long BODY.
    altn · mdaemon
    EPSS57%
    2 exploits
    Published Mar 17, 2008
  • CVE-2008-1117Critical 10.0
    Directory traversal vulnerability in the Notes (aka Flash Notes or instant messages) feature in tb2ftp.dll in Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, allows remote attackers to upload files to arbitrary locations via a destination filename with a \…
    netopia · timbuktu pro
    EPSS69%
    2 exploits
    Published Mar 14, 2008
  • CVE-2008-0532Critical 10.0
    Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control Server (ACS) for Windows and ACS Solution Engine allow remote attackers to execute arbitrary code via a long argument located immediately after…
    cisco · acs for windows
    EPSS57%
    1 exploit
    Published Mar 14, 2008
  • CVE-2008-1309Critical 9.3
    The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, RealPlayer 10.5 before build 6.0.12.1675, and RealPlayer 11 before 11.0.3 build 6.0.14.806 does not properly manage memory for the (1) Console or (2) Controls…
    realnetworks · realplayer
    EPSS46%
    3 exploits
    Published Mar 12, 2008
Showing 1,951–2,000 of 2,494

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.

Figures as of Oct 20, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.