Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
2,493 vulnerabilities · highest exploit probability first
- CVE-2004-1172Critical 10.0Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9.1.4691 Hotfix 40, allows remote attackers to execute arbitrary code via a registration request with a long hostname.symantec veritas · backup execEPSS82%3 exploitsPublished Jan 10, 2005
- CVE-2004-1080Critical 10.0The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port…microsoft · windows 2000EPSS80%3 exploitsPublished Jan 10, 2005
- CVE-2004-1211Critical 10.0Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via long arguments to the (1) EXAMINE, (2) SUBSCRIBE, (3) STATUS, (4) APPEND, (5) CHECK, (6)…david harris · mercuryEPSS72%8 exploitsPublished Jan 10, 2005
- CVE-2004-1134Critical 10.0Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long query string.microsoft · w3who.dllEPSS72%2 exploitsPublished Jan 10, 2005
- CVE-2004-1135Medium 5.0Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service crash) via long (1) SITE, (2) XMKD, (3) MKD, and (4) RNFR commands.ipswitch · ws ftp serverEPSS50%3 exploitsPublished Jan 10, 2005
- CVE-2004-2687Critical 9.3distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server without authorization checks.apple · xcodeEPSS88%2 exploitsPublished Dec 31, 2004
- CVE-2004-1561High 7.5Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a large number of headers.icecast · icecastEPSS78%4 exploitsPublished Dec 31, 2004
- CVE-2004-1388High 7.5Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests containing format string specifiers that are not properly handled in syslog calls.berlios · gps daemonEPSS68%5 exploitsPublished Dec 31, 2004
- CVE-2004-1317High 7.5Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbitrary code via a long DNS command.EPSS60%3 exploitsPublished Dec 31, 2004
- CVE-2004-1520Medium 4.6Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE command.ipswitch · imailEPSS89%5 exploitsPublished Dec 31, 2004
- CVE-2004-2111High 8.5Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via a long filename.solarwinds · serv-u file serverEPSS87%6 exploitsPublished Dec 31, 2004
- CVE-2004-2466Medium 5.0chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username parameter, possibly due to a buffer overflow.efs software · easy chat serverEPSS75%4 exploitsPublished Dec 31, 2004
- CVE-2004-2271High 7.5Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.minishare · minimal http serverEPSS72%4 exploitsPublished Dec 31, 2004
- CVE-2004-1558High 7.5Multiple stack-based buffer overflows in YPOPs!ypops · ypopsEPSS71%4 exploitsPublished Dec 31, 2004
- CVE-2004-0567High 7.5The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 2003 does not properly validate the computer name value in a WINS packet, which allows remote attackers to execute…microsoft · windows 2000EPSS69%1 exploitPublished Dec 31, 2004
- CVE-2004-1050Critical 10.0Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML…microsoft · internet explorerEPSS67%1 exploitPublished Dec 31, 2004
- CVE-2004-2416High 7.5Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP GET request.youngzsoft · ccproxyEPSS61%2 exploitsPublished Dec 31, 2004
- CVE-2004-2115Medium 6.8Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the (1) action, (2) username, or (3) password parameters in an isqlplus request.oracle · http serverEPSS58%1 exploitPublished Dec 31, 2004
- CVE-2004-2074Medium 5.0Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string specifiers in the (1) PASS or (2) RETR commands.bolintech · dream ftp serverEPSS36%3 exploitsPublished Dec 31, 2004
- CVE-2004-2221High 7.5Buffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute arbitrary code via a long parameter in an HTTP GET request.mercantec · softcartEPSS35%3 exploitsPublished Dec 31, 2004
- CVE-2004-1373High 7.5Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via format string specifiers in a content URL, as demonstrated in the filename portion of a .mp3 file.nullsoft · shoutcast serverEPSS70%4 exploitsPublished Dec 23, 2004
- CVE-2004-1305Medium 5.0The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to…microsoft · windows 2000EPSS59%1 exploitPublished Dec 23, 2004
- CVE-2004-0842High 7.5Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain malformed Cascading Style Sheet (CSS) elements that trigger heap-based buffer overflows, as…microsoft · internet explorerEPSS57%1 exploitPublished Dec 23, 2004
- CVE-2004-0608Critical 10.0The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and earlier, Rune 107 and earlier, Tactical Ops 3.4.0 and earlier, Unreal 1 226f and earlier, Unreal II XMP…arush · devastationEPSS74%5 exploitsPublished Dec 6, 2004
- CVE-2004-0330Critical 10.0Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time zone argument to the MDTM command.solarwinds · serv-u file serverEPSS85%7 exploitsPublished Nov 23, 2004
- CVE-2004-0297Critical 10.0Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via an LDAP message with a large tag length.ipswitch · imailEPSS68%3 exploitsPublished Nov 23, 2004
- CVE-2004-0636Critical 10.0Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message.aol · instant messengerEPSS66%4 exploitsPublished Nov 23, 2004
- CVE-2004-0313Critical 10.0Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request, as demonstrated using a long (1) GET argument or (2) method name.psoproxy · psoproxy serverEPSS64%6 exploitsPublished Nov 23, 2004
- CVE-2004-0326Critical 10.0Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET request.proxy-pro · professional gatekeeperEPSS63%4 exploitsPublished Nov 23, 2004
- CVE-2004-1315High 7.5viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrases to highlight, which allows remote attackers to execute arbitrary PHP code by double-encoding the highlight value so that special characters are inserted into…phpbb group · phpbbEPSS73%5 exploitsPublished Nov 12, 2004
- CVE-2003-0718Medium 5.0The WebDAV Message Handler for Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows remote attackers to cause a denial of service (memory and CPU exhaustion, application crash) via a PROPFIND request with an XML message containing XML elements with a large number of…microsoft · internet information servicesEPSS88%1 exploitPublished Nov 3, 2004
- CVE-2004-0847Critical 9.8The Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass authentication for .aspx files in restricted directories via a request containing a (1) "\" (backslash) or (2) "%5C" (encoded backslash), aka "Path Validation Vulnerability."microsoft · asp.netEPSS76%1 exploitPublished Nov 3, 2004
- CVE-2004-0206High 7.5Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an…microsoft · windows 2000EPSS75%3 exploitsPublished Nov 3, 2004
- CVE-2004-0574Critical 10.0The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper…microsoft · exchange serverEPSS64%1 exploitPublished Nov 3, 2004
- CVE-2004-0575Critical 10.0Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an "unchecked buffer" and improper…microsoft · windows xpEPSS60%2 exploitsPublished Nov 3, 2004
- CVE-2004-0209Critical 10.0Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats that involve "an…microsoft · windows 2000EPSS57%1 exploitPublished Nov 3, 2004
- CVE-2004-1626Medium 5.0Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a long STOR command.code-crafters · ability serverEPSS67%3 exploitsPublished Oct 22, 2004
- CVE-2004-0751Medium 5.0The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault).apache · http serverEPSS72%1 exploitPublished Oct 20, 2004
- CVE-2004-0798High 7.5Buffer overflow in the _maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1 allows remote attackers to execute arbitrary code via a long instancename parameter.progress · whatsup goldEPSS63%3 exploitsPublished Oct 20, 2004
- CVE-2004-1638High 7.5Buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long (1) EHLO and possibly (2) HELO command.EPSS63%4 exploitsPublished Oct 16, 2004
- CVE-2004-1595High 7.5Buffer overflow in ShixxNote 6.net build 117 allows remote attackers to execute arbitrary code via a long font field.shixxnote · shixxnoteEPSS59%3 exploitsPublished Oct 13, 2004
- CVE-2004-0230Medium 5.0TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections,…juniper · junosEPSS80%7 exploitsPublished Aug 18, 2004
- CVE-2004-0493Medium 6.4The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of…apache · http serverEPSS85%2 exploitsPublished Aug 6, 2004
- CVE-2004-0541Critical 10.0Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary code via a long password ("pass" variable).national science foundation · squid web proxy cacheEPSS71%3 exploitsPublished Aug 6, 2004
- CVE-2004-0204High 7.5Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows…businessobjects · crystal enterpriseEPSS72%1 exploitPublished Aug 6, 2004
- CVE-2004-0212Critical 10.0Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters, as demonstrated using Internet Explorer and accessing a…microsoft · windows 2000EPSS64%2 exploitsPublished Aug 6, 2004
- CVE-2004-0549Critical 10.0The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine (MSHTML), as used in Internet Explorer 6, allows remote attackers to execute arbitrary code in the Local Security context by using the showModalDialog method and modifying the location to execute code…microsoft · internet explorerEPSS61%1 exploitPublished Aug 6, 2004
- CVE-2004-0597Critical 10.0Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or…greg roelofs · libpngEPSS82%3 exploitsPublished Aug 4, 2004
- CVE-2004-0735High 7.5Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b and earlier, and (3) Spearhead 2.15 and earlier, when playing on a Local Area Network (LAN), allows remote attackers to execute arbitrary code via vectors such as (1) the getinfo…electronic arts · medal of honor allied assaultEPSS62%4 exploitsPublished Jul 27, 2004
- CVE-2004-0695High 7.5Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbitrary code via a long FTP command.4d · webstarEPSS38%3 exploitsPublished Jul 27, 2004
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2004-1172 | Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9.1.4691 Hotfix 40, allows remote attackers to execute arbitrary code via a registration request with a long hostname. symantec veritas · backup exec | Critical 10.0 | 82% | 3 exploits | |
| CVE-2004-1080 | The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port… microsoft · windows 2000 | Critical 10.0 | 80% | 3 exploits | |
| CVE-2004-1211 | Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via long arguments to the (1) EXAMINE, (2) SUBSCRIBE, (3) STATUS, (4) APPEND, (5) CHECK, (6)… david harris · mercury | Critical 10.0 | 72% | 8 exploits | |
| CVE-2004-1134 | Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long query string. microsoft · w3who.dll | Critical 10.0 | 72% | 2 exploits | |
| CVE-2004-1135 | Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service crash) via long (1) SITE, (2) XMKD, (3) MKD, and (4) RNFR commands. ipswitch · ws ftp server | Medium 5.0 | 50% | 3 exploits | |
| CVE-2004-2687 | distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server without authorization checks. apple · xcode | Critical 9.3 | 88% | 2 exploits | |
| CVE-2004-1561 | Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a large number of headers. icecast · icecast | High 7.5 | 78% | 4 exploits | |
| CVE-2004-1388 | Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests containing format string specifiers that are not properly handled in syslog calls. berlios · gps daemon | High 7.5 | 68% | 5 exploits | |
| CVE-2004-1317 | Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbitrary code via a long DNS command. | High 7.5 | 60% | 3 exploits | |
| CVE-2004-1520 | Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE command. ipswitch · imail | Medium 4.6 | 89% | 5 exploits | |
| CVE-2004-2111 | Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via a long filename. solarwinds · serv-u file server | High 8.5 | 87% | 6 exploits | |
| CVE-2004-2466 | chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username parameter, possibly due to a buffer overflow. efs software · easy chat server | Medium 5.0 | 75% | 4 exploits | |
| CVE-2004-2271 | Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request. minishare · minimal http server | High 7.5 | 72% | 4 exploits | |
| CVE-2004-1558 | Multiple stack-based buffer overflows in YPOPs! ypops · ypops | High 7.5 | 71% | 4 exploits | |
| CVE-2004-0567 | The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 2003 does not properly validate the computer name value in a WINS packet, which allows remote attackers to execute… microsoft · windows 2000 | High 7.5 | 69% | 1 exploit | |
| CVE-2004-1050 | Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML… microsoft · internet explorer | Critical 10.0 | 67% | 1 exploit | |
| CVE-2004-2416 | Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP GET request. youngzsoft · ccproxy | High 7.5 | 61% | 2 exploits | |
| CVE-2004-2115 | Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the (1) action, (2) username, or (3) password parameters in an isqlplus request. oracle · http server | Medium 6.8 | 58% | 1 exploit | |
| CVE-2004-2074 | Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string specifiers in the (1) PASS or (2) RETR commands. bolintech · dream ftp server | Medium 5.0 | 36% | 3 exploits | |
| CVE-2004-2221 | Buffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute arbitrary code via a long parameter in an HTTP GET request. mercantec · softcart | High 7.5 | 35% | 3 exploits | |
| CVE-2004-1373 | Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via format string specifiers in a content URL, as demonstrated in the filename portion of a .mp3 file. nullsoft · shoutcast server | High 7.5 | 70% | 4 exploits | |
| CVE-2004-1305 | The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to… microsoft · windows 2000 | Medium 5.0 | 59% | 1 exploit | |
| CVE-2004-0842 | Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain malformed Cascading Style Sheet (CSS) elements that trigger heap-based buffer overflows, as… microsoft · internet explorer | High 7.5 | 57% | 1 exploit | |
| CVE-2004-0608 | The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and earlier, Rune 107 and earlier, Tactical Ops 3.4.0 and earlier, Unreal 1 226f and earlier, Unreal II XMP… arush · devastation | Critical 10.0 | 74% | 5 exploits | |
| CVE-2004-0330 | Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time zone argument to the MDTM command. solarwinds · serv-u file server | Critical 10.0 | 85% | 7 exploits | |
| CVE-2004-0297 | Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via an LDAP message with a large tag length. ipswitch · imail | Critical 10.0 | 68% | 3 exploits | |
| CVE-2004-0636 | Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message. aol · instant messenger | Critical 10.0 | 66% | 4 exploits | |
| CVE-2004-0313 | Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request, as demonstrated using a long (1) GET argument or (2) method name. psoproxy · psoproxy server | Critical 10.0 | 64% | 6 exploits | |
| CVE-2004-0326 | Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET request. proxy-pro · professional gatekeeper | Critical 10.0 | 63% | 4 exploits | |
| CVE-2004-1315 | viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrases to highlight, which allows remote attackers to execute arbitrary PHP code by double-encoding the highlight value so that special characters are inserted into… phpbb group · phpbb | High 7.5 | 73% | 5 exploits | |
| CVE-2003-0718 | The WebDAV Message Handler for Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows remote attackers to cause a denial of service (memory and CPU exhaustion, application crash) via a PROPFIND request with an XML message containing XML elements with a large number of… microsoft · internet information services | Medium 5.0 | 88% | 1 exploit | |
| CVE-2004-0847 | The Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass authentication for .aspx files in restricted directories via a request containing a (1) "\" (backslash) or (2) "%5C" (encoded backslash), aka "Path Validation Vulnerability." microsoft · asp.net | Critical 9.8 | 76% | 1 exploit | |
| CVE-2004-0206 | Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an… microsoft · windows 2000 | High 7.5 | 75% | 3 exploits | |
| CVE-2004-0574 | The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper… microsoft · exchange server | Critical 10.0 | 64% | 1 exploit | |
| CVE-2004-0575 | Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an "unchecked buffer" and improper… microsoft · windows xp | Critical 10.0 | 60% | 2 exploits | |
| CVE-2004-0209 | Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats that involve "an… microsoft · windows 2000 | Critical 10.0 | 57% | 1 exploit | |
| CVE-2004-1626 | Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a long STOR command. code-crafters · ability server | Medium 5.0 | 67% | 3 exploits | |
| CVE-2004-0751 | The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault). apache · http server | Medium 5.0 | 72% | 1 exploit | |
| CVE-2004-0798 | Buffer overflow in the _maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1 allows remote attackers to execute arbitrary code via a long instancename parameter. progress · whatsup gold | High 7.5 | 63% | 3 exploits | |
| CVE-2004-1638 | Buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long (1) EHLO and possibly (2) HELO command. | High 7.5 | 63% | 4 exploits | |
| CVE-2004-1595 | Buffer overflow in ShixxNote 6.net build 117 allows remote attackers to execute arbitrary code via a long font field. shixxnote · shixxnote | High 7.5 | 59% | 3 exploits | |
| CVE-2004-0230 | TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections,… juniper · junos | Medium 5.0 | 80% | 7 exploits | |
| CVE-2004-0493 | The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of… apache · http server | Medium 6.4 | 85% | 2 exploits | |
| CVE-2004-0541 | Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary code via a long password ("pass" variable). national science foundation · squid web proxy cache | Critical 10.0 | 71% | 3 exploits | |
| CVE-2004-0204 | Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows… businessobjects · crystal enterprise | High 7.5 | 72% | 1 exploit | |
| CVE-2004-0212 | Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters, as demonstrated using Internet Explorer and accessing a… microsoft · windows 2000 | Critical 10.0 | 64% | 2 exploits | |
| CVE-2004-0549 | The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine (MSHTML), as used in Internet Explorer 6, allows remote attackers to execute arbitrary code in the Local Security context by using the showModalDialog method and modifying the location to execute code… microsoft · internet explorer | Critical 10.0 | 61% | 1 exploit | |
| CVE-2004-0597 | Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or… greg roelofs · libpng | Critical 10.0 | 82% | 3 exploits | |
| CVE-2004-0735 | Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b and earlier, and (3) Spearhead 2.15 and earlier, when playing on a Local Area Network (LAN), allows remote attackers to execute arbitrary code via vectors such as (1) the getinfo… electronic arts · medal of honor allied assault | High 7.5 | 62% | 4 exploits | |
| CVE-2004-0695 | Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbitrary code via a long FTP command. 4d · webstar | High 7.5 | 38% | 3 exploits |
Showing 2,301–2,350 of 2,493
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.