Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Emerging

Emerging Threats, Before They Hit KEV.

Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.

Synced hourly · figures as of Oct 20, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
2,493 vulnerabilities · highest exploit probability first
  • CVE-2005-1272High 7.5
    Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code via a long string sent to port (1) 6070 or (2) 6050.
    ca · brightstor arcserve backup
    EPSS66%
    3 exploits
    Published Aug 5, 2005
  • CVE-2005-2428Medium 5.0
    Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the HTML source to obtain sensitive information such as (1) the password hash in the HTTPPassword field,…
    ibm · lotus domino
    EPSS73%
    2 exploits
    Published Aug 3, 2005
  • CVE-2005-2373High 7.2
    Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long directory name to (1) LIST, (2) DELE or (3) RNFR commands.
    whitsoft development · slimftpd
    EPSS46%
    2 exploits
    Published Jul 26, 2005
  • CVE-2005-2297Medium 4.6
    Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to execute arbitrary code via a large javascript parameter.
    sybase · easerver
    EPSS74%
    2 exploits
    Published Jul 19, 2005
  • CVE-2005-2278High 7.2
    Stack-based buffer overflow in the IMAP daemon (imapd) in MailEnable Professional 1.54 allows remote authenticated users to execute arbitrary code via the status command with a long mailbox name.
    mailenable · mailenable professional
    EPSS85%
    2 exploits
    Published Jul 18, 2005
  • CVE-2005-2287Medium 5.0
    SoftiaCom wMailServer 1.0 and 2.0 allows remote attackers to cause a denial of service (application crash) via a large TCP packet with a leading space, possibly triggering a buffer overflow.
    softiacom · wmailserver
    EPSS57%
    4 exploits
    Published Jul 18, 2005
  • CVE-2005-2265Medium 5.0
    Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access violation and crash), and possibly execute arbitrary code, by calling InstallVersion.compareTo with an object instead of a string.
    mozilla · firefox
    EPSS68%
    3 exploits
    Published Jul 12, 2005
  • CVE-2005-2086High 7.5
    PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute arbitrary PHP code.
    phpbb group · phpbb
    EPSS85%
    3 exploits
    Published Jul 5, 2005
  • CVE-2005-2087Medium 5.0
    Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference…
    microsoft · internet explorer
    EPSS61%
    1 exploit
    Published Jul 5, 2005
  • CVE-2005-1921High 7.5
    Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7)…
    drupal · drupal
    EPSS79%
    6 exploits
    Published Jun 29, 2005
  • CVE-2005-0773High 7.5
    Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allows remote attackers to execute arbitrary code via a CONNECT_CLIENT_AUTH request with authentication method type 3 (Windows credentials) and…
    symantec veritas · backup exec
    EPSS86%
    2 exploits
    Published Jun 18, 2005
  • CVE-2005-1213High 7.5
    Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP servers to execute arbitrary code via a LIST response with a long second field.
    microsoft · outlook express
    EPSS74%
    3 exploits
    Published Jun 14, 2005
  • CVE-2005-1790Low 2.6
    Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Javascript BODY onload event that calls the window function, aka "Mismatched Document Object…
    microsoft · internet explorer
    EPSS83%
    2 exploits
    Published Jun 1, 2005
  • CVE-2005-1812Critical 10.0
    Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to execute arbitrary code via a long (1) filename or (2) transfer mode string in a Read Request (RRQ) or Write Request (WRQ) packet.
    futuresoft · tftp server 2000
    EPSS63%
    3 exploits
    Published Jun 1, 2005
  • CVE-2005-1815Medium 5.0
    Multiple buffer overflows in Hummingbird Connectivity inetD 10.0.0.1 and 9.0.0.4 allows attackers to cause a denial of service and possibly execute arbitrary code via (1) an FTP command with a long argument to FTPD (ftpdw.exe) or (2) a large amount of data to LPD (Lpdw.exe).
    hummingbird · connectivity
    EPSS47%
    2 exploits
    Published Jun 1, 2005
  • CVE-2005-0356Medium 5.0
    Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later…
    cisco · agent desktop
    EPSS83%
    1 exploit
    Published May 31, 2005
  • CVE-2005-1543High 7.5
    Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENworks 6.5 Desktop and Server Management, ZENworks for Desktops 4.x, ZENworks for Servers 3.x, and Remote Management allows remote attackers to execute arbitrary…
    novell · zenworks
    EPSS66%
    3 exploits
    Published May 25, 2005
  • CVE-2005-1415Critical 10.0
    Buffer overflow in GlobalSCAPE Secure FTP Server 3.0.2 allows remote authenticated users to execute arbitrary code via a long FTP command.
    globalscape · secure ftp server
    EPSS61%
    3 exploits
    Published May 3, 2005
  • CVE-2005-0059Critical 10.0
    Buffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers to execute arbitrary code via a crafted message.
    microsoft · windows 2000
    EPSS73%
    3 exploits
    Published May 2, 2005
  • CVE-2005-1348High 7.5
    Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to execute arbitrary code via a long HTTP Authorization header.
    mailenable · mailenable enterprise
    EPSS73%
    3 exploits
    Published May 2, 2005
  • CVE-2005-0353Critical 10.0
    Buffer overflow in the Sentinel LM (Lservnt) service in the Sentinel License Manager 7.2.0.2 allows remote attackers to execute arbitrary code by sending a large amount of data to UDP port 5093.
    safenet · sentinel license manager
    EPSS71%
    3 exploits
    Published May 2, 2005
  • CVE-2005-0045High 7.5
    The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to execute arbitrary code via Transaction responses containing (1) Trans or (2) Trans2 commands, aka the…
    microsoft · windows nt
    EPSS70%
    1 exploit
    Published May 2, 2005
  • CVE-2005-0260Critical 10.0
    Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote attackers to execute arbitrary code via a long packet to UDP port 41524, which is not properly handled in a recvfrom call.
    broadcom · brightstor arcserve backup
    EPSS70%
    2 exploits
    Published May 2, 2005
  • CVE-2005-0560High 7.5
    Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allows remote attackers to execute arbitrary code via a crafted X-LINK2STATE extended verb request to the SMTP port.
    microsoft · exchange server
    EPSS69%
    1 exploit
    Published May 2, 2005
  • CVE-2005-0043High 7.5
    Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files.
    apple · itunes
    EPSS69%
    3 exploits
    Published May 2, 2005
  • CVE-2005-0803Medium 5.0
    The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service (application crash) via a crafted Enhanced Metafile (EMF) file that causes invalid (1) end, (2) emreof, or (3) palent offsets to be used, aka "Enhanced Metafile…
    microsoft · windows 2000
    EPSS68%
    2 exploits
    Published May 2, 2005
  • CVE-2005-0491Critical 10.0
    Stack-based buffer overflow in Knox Arkeia Server Backup 5.3.x allows remote attackers to execute arbitrary code via a long type 77 request.
    knox software · arkeia server backup
    EPSS65%
    7 exploits
    Published May 2, 2005
  • CVE-2005-1323High 7.5
    Buffer overflow in NetFtpd for NetTerm 5.1.1 and earlier allows remote attackers to execute arbitrary code via a long USER command.
    intersoft · netterm
    EPSS63%
    3 exploits
    Published May 2, 2005
  • CVE-2005-0277Medium 5.0
    Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via (1) a long username in the USER command or (2) an FTP command that contains a long argument, such as cd,…
    3com · 3cdaemon
    EPSS62%
    4 exploits
    Published May 2, 2005
  • CVE-2005-0595High 7.5
    Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand parameter.
    working resources inc. · badblue
    EPSS60%
    3 exploits
    Published May 2, 2005
  • CVE-2005-0053High 7.5
    Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulnerability."
    microsoft · internet explorer
    EPSS60%
    1 exploit
    Published May 2, 2005
  • CVE-2005-0768Critical 10.0
    Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions before 5.0.7, allows remote attackers to execute arbitrary code via a long string to port 2380.
    goodtech systems · goodtech telnet server
    EPSS60%
    3 exploits
    Published May 2, 2005
  • CVE-2005-0554High 7.5
    Buffer overflow in the URL processor of Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL with a long hostname, aka "URL Parsing Memory Corruption Vulnerability."
    microsoft · internet explorer
    EPSS58%
    1 exploit
    Published May 2, 2005
  • CVE-2005-1009Critical 10.0
    Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or (2) local users to execute arbitrary code via a long Name entry in the…
    bakbone · netvault
    EPSS57%
    5 exploits
    Published May 2, 2005
  • CVE-2005-1018High 7.5
    Buffer overflow in the UniversalAgent for Computer Associates (CA) BrightStor ARCserve Backup allows remote authenticated users to cause a denial of service or execute arbitrary code via an agent request to TCP port 6050 with a large argument before the option field.
    ca · brightstor arcserve backup
    EPSS52%
    2 exploits
    Published May 2, 2005
  • CVE-2005-0553Medium 5.1
    Race condition in the memory management routines in the DHTML object processor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail, aka "DHTML Object Memory Corruption Vulnerability".
    microsoft · internet explorer
    EPSS51%
    1 exploit
    Published May 2, 2005
  • CVE-2005-0581Medium 4.6
    Multiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow remote attackers to execute arbitrary code via (1) certain long fields in the Checksum item in a GCR request, (2) a long IP address, hostname, or netmask values in a GCR request, (3) a…
    broadcom · license software
    EPSS46%
    7 exploits
    Published May 2, 2005
  • CVE-2005-0684Critical 10.0
    Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long file parameter after a percent ("%") sign or (2) a long Lock-Token string to the WebDAV functionality, which is…
    mysql · maxdb
    EPSS69%
    2 exploits
    Published Apr 25, 2005
  • CVE-2005-1099Critical 10.0
    Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is listening on a network interface, allow remote attackers to execute arbitrary code.
    salim gasmi · gld
    EPSS68%
    4 exploits
    Published Apr 12, 2005
  • CVE-2004-0790Medium 5.0
    Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the "blind connection-reset attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different…
    microsoft · windows 2000
    EPSS80%
    3 exploits
    Published Apr 12, 2005
  • CVE-2005-0555High 7.5
    Buffer overflow in the Content Advisor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a crafted Content Advisor file, aka "Content Advisor Memory Corruption Vulnerability."
    microsoft · internet explorer
    EPSS58%
    1 exploit
    Published Apr 12, 2005
  • CVE-2005-0478Medium 5.0
    Multiple buffer overflows in TrackerCam 5.12 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) an HTTP request with a long User-Agent header or (2) a long argument to an arbitrary PHP script.
    trackercam · trackercam
    EPSS66%
    2 exploits
    Published Mar 30, 2005
  • CVE-2004-1037Critical 10.0
    The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string.
    twiki · twiki
    EPSS62%
    3 exploits
    Published Mar 1, 2005
  • CVE-2005-0455Medium 5.1
    Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large…
    EPSS54%
    3 exploits
    Published Feb 24, 2005
  • CVE-2005-0511High 7.5
    misc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled, allows remote attackers to execute arbitrary PHP code via nested variables in the template parameter.
    jelsoft · vbulletin
    EPSS36%
    3 exploits
    Published Feb 21, 2005
  • CVE-2004-0942Medium 5.0
    Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters.
    apache · http server
    EPSS59%
    1 exploit
    Published Feb 9, 2005
  • CVE-2004-0964Critical 10.0
    Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file.
    zinf · zinf
    EPSS63%
    7 exploits
    Published Feb 9, 2005
  • CVE-2004-0932High 7.5
    McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the…
    mcafee · antivirus engine
    EPSS64%
    1 exploit
    Published Jan 27, 2005
  • CVE-2005-0308High 7.5
    Buffer overflow in the wsprintf function in W32Dasm 8.93 and earlier allows remote attackers to execute arbitrary code via a large import or export function name.
    ursoftware · w32dasm
    EPSS69%
    2 exploits
    Published Jan 24, 2005
  • CVE-2005-0116High 7.5
    AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacters in the configdir parameter to aswtats.pl.
    awstats · awstats
    EPSS75%
    5 exploits
    Published Jan 18, 2005
Showing 2,251–2,300 of 2,493

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.

Figures as of Oct 20, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.