Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 19, 2026
1,192 vulnerabilities · highest exploit probability first
- CVE-2021-32305Critical 9.8WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter.websvn · websvnEPSS87%2 exploitsPublished May 18, 2021
- CVE-2015-0235Critical 10.0Heap-based buffer overflow in the nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."gnu · glibcEPSS95%8 exploitsPublished May 5, 2021
- CVE-2021-3287Critical 9.8Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class.zohocorp · manageengine opmanagerEPSS51%2 exploitsPublished Apr 26, 2021
- CVE-2019-0230Critical 9.8struts2: possible RCE due to forced double OGNL evaluation when evaluated on raw user input in tag attributesapache · strutsEPSS97%4 exploitsPublished Apr 21, 2021
- CVE-2011-2523Critical 9.8vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.vsftpd project · vsftpdEPSS96%3 exploitsPublished Apr 13, 2021
- CVE-2021-21425Critical 9.8In versions 1.10.7 and earlier, an unauthenticated user can execute some methods of administrator controller without needing any credentials.getgrav · grav-plugin-adminEPSS81%2 exploitsPublished Apr 7, 2021
- CVE-2021-26295Critical 9.8Apache OFBiz has unsafe deserialization prior to 17.12.06.apache · ofbizEPSS98%2 exploitsPublished Mar 22, 2021
- CVE-2021-21978Critical 9.8VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability.vmware · view plannerEPSS99%2 exploitsPublished Mar 5, 2021
- CVE-2021-27670Critical 9.8Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter.appspace · appspaceEPSS61%1 exploitPublished Feb 24, 2021
- CVE-2021-26747Critical 9.8Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution.netis-systems · wf2411 firmwareEPSS55%1 exploitPublished Feb 18, 2021
- CVE-2021-21307Critical 9.8In Lucee Admin before versions 5.3.7.47, 5.3.6.68 or 5.3.5.96 there is an unauthenticated remote code exploit.lucee · lucee serverEPSS89%3 exploitsPublished Feb 11, 2021
- CVE-2021-22652Critical 9.8Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attacker to change the configuration and obtain code execution.advantech · iviewEPSS37%2 exploitsPublished Feb 11, 2021
- CVE-2020-28871Critical 9.8Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute arbitrary code on the server-side via an insecure file upload.monitorr · monitorrEPSS86%3 exploitsPublished Feb 9, 2021
- CVE-2021-3122Critical 9.8CMCAgent in NCR Command Center Agent 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter (within an XML document sent to port 8089) that enables the remote, unauthenticated execution of an arbitrary command as SYSTEM, as exploited in the wild in 2020…ncr · command center agentEPSS87%1 exploitPublished Feb 7, 2021
- CVE-2020-28653Critical 9.8Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution via the Smart Update Manager (SUM) servlet.zohocorp · manageengine opmanagerEPSS79%2 exploitsPublished Feb 3, 2021
- CVE-2021-3378Critical 9.8FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a "Content-Type: image/png" header to Config/SaveUploadedHotspotLogoFile and then visiting Assets/temp/hotspot/img/logohotspot.asp.fortilogger · fortiloggerEPSS98%5 exploitsPublished Feb 1, 2021
- CVE-2020-35131Critical 9.8Cockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Remote Command Execution via registerCriteriaFunction in lib/MongoLite/Database.php, as demonstrated by values in JSON data to the /auth/check or /auth/requestreset URI.agentejo · cockpitEPSS50%1 exploitPublished Jan 8, 2021
- CVE-2018-10933Critical 9.1libssh - security updatelibssh · libsshEPSS92%3 exploitsPublished Jan 8, 2021
- CVE-2020-35848Critical 9.8Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function.agentejo · cockpitEPSS75%2 exploitsPublished Dec 29, 2020
- CVE-2020-35847Critical 9.8Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function.agentejo · cockpitEPSS98%4 exploitsPublished Dec 29, 2020
- CVE-2020-35846Critical 9.8Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function.agentejo · cockpitEPSS93%2 exploitsPublished Dec 29, 2020
- CVE-2020-35729Critical 9.8KLog Server 2.4.1 allows OS command injection via shell metacharacters in the actions/authenticate.php user parameter.klogserver · klog serverEPSS88%8 exploitsPublished Dec 27, 2020
- CVE-2020-28188Critical 9.8Remote Command Execution (RCE) vulnerability in TerraMaster TOS <= 4.2.06 allow remote unauthenticated attackers to inject OS commands via /include/makecvs.php in Event parameter.terra-master · tosEPSS96%1 exploitPublished Dec 24, 2020
- CVE-2020-35665Critical 9.8An unauthenticated command-execution vulnerability exists in TerraMaster TOS through 4.2.06 via shell metacharacters in the Event parameter in include/makecvs.php during CSV creation.terra-master · terramaster operating systemEPSS78%2 exploitsPublished Dec 23, 2020
- CVE-2020-7200Critical 9.8A potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6.hp · systems insight managerEPSS82%2 exploitsPublished Dec 18, 2020
- CVE-2020-17132Critical 9.1Microsoft Exchange Remote Code Execution Vulnerabilitymicrosoft · exchange serverEPSS90%1 exploitPublished Dec 9, 2020
- CVE-2020-29597Critical 9.8IncomCMS 2.0 has a modules/uploader/showcase/script.php insecure file upload vulnerability.incomcms project · incomcmsEPSS71%3 exploitsPublished Dec 7, 2020
- CVE-2020-11984Critical 9.8Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCEapache · http serverEPSS90%1 exploitPublished Dec 4, 2020
- CVE-2020-29279Critical 9.8PHP remote file inclusion in the assign_resume_tpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 allows remote code execution.74cms · 74cmsEPSS53%1 exploitPublished Dec 2, 2020
- CVE-2020-24719Critical 9.8Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack.couchbase · couchbase serverEPSS23%1 exploitPublished Nov 12, 2020
- CVE-2020-28347Critical 9.8tdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to execute arbitrary code via the slave_mac parameter.tp-link · ac1750 firmwareEPSS75%5 exploitsPublished Nov 8, 2020
- CVE-2020-24881Critical 9.8SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning.enhancesoft · osticketEPSS73%2 exploitsPublished Nov 2, 2020
- CVE-2020-11854Critical 9.8Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) vulnerability in Micro Focus products products Operation Bridge Manager, Operation Bridge (containerized) and Application Performance…microfocus · application performance managementEPSS74%1 exploitPublished Oct 27, 2020
- CVE-2020-11698Critical 9.8Improper input sanitization of the parameter community on the page snmp-x.php would allow a remote attacker to inject commands into the file snmpd.conf that would allow executing commands on the target server.titanhq · spamtitanEPSS73%4 exploitsPublished Sep 17, 2020
- CVE-2020-24186Critical 10.0A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allows unauthenticated users to upload any type of file, including PHP files via the wmuUploadFiles AJAX action.gvectors · wpdiscuzEPSS95%6 exploitsPublished Aug 24, 2020
- CVE-2020-17456Critical 9.8SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi page.seowonintech · slc-130 firmwareEPSS74%1 exploitPublished Aug 19, 2020
- CVE-2020-17506Critical 9.8Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQL injection of the apikey parameter in fw.login.php.articatech · web proxyEPSS94%4 exploitsPublished Aug 12, 2020
- CVE-2020-7357Critical 9.9Cayin CMS suffers from an authenticated OS semi-blind command injection vulnerability using default credentials.cayintech · cmsEPSS32%1 exploitPublished Aug 6, 2020
- CVE-2020-13151Critical 9.8Aerospike Community Edition 4.9.0.5 allows for unauthenticated submission and execution of user-defined functions (UDFs), written in Lua, as part of a database query.aerospike · aerospike serverEPSS87%4 exploitsPublished Aug 5, 2020
- CVE-2020-15922Critical 9.8There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges.midasolutions · eframeworkEPSS57%2 exploitsPublished Jul 23, 2020
- CVE-2020-15920Critical 9.8There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges.midasolutions · eframeworkEPSS98%4 exploitsPublished Jul 23, 2020
- CVE-2020-15893Critical 9.8An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02.dlink · dir-816l firmwareEPSS21%1 exploitPublished Jul 22, 2020
- CVE-2020-13382Critical 9.1openSIS through 7.4 has Incorrect Access Control.os4ed · opensisEPSS53%3 exploitsPublished Jul 1, 2020
- CVE-2020-13381Critical 9.8openSIS through 7.4 allows SQL Injection.os4ed · opensisEPSS59%2 exploitsPublished Jul 1, 2020
- CVE-2020-13160Critical 9.8AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution.anydesk · anydeskEPSS81%4 exploitsPublished Jun 9, 2020
- CVE-2020-12800Critical 9.8The drag-and-drop-multiple-file-upload-contact-form-7 plugin before 1.3.3.3 for WordPress allows Unrestricted File Upload and remote code execution by setting supported_type to php% and uploading a .php% file.codedropz · drag and drop multiple file upload - contact form 7EPSS79%2 exploitsPublished Jun 8, 2020
- CVE-2020-10546Critical 9.8rConfig 3.9.4 and previous versions has unauthenticated compliancepolicies.inc.php SQL injection.rconfig · rconfigEPSS87%1 exploitPublished Jun 4, 2020
- CVE-2020-7115Critical 9.8The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass.arubanetworks · clearpass policy managerEPSS65%2 exploitsPublished Jun 3, 2020
- CVE-2020-8606Critical 9.8A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to bypass authentication on affected installations of Trend Micro InterScan Web Security Virtual Appliance.trendmicro · interscan web security virtual applianceEPSS73%3 exploitsPublished May 27, 2020
- CVE-2020-13167Critical 9.8Netsweeper through 6.4.3 allows unauthenticated remote code execution because webadmin/tools/unixlogin.php (with certain Referer headers) launches a command line with client-supplied parameters, and allows injection of shell metacharacters.netsweeper · netsweeperEPSS95%1 exploitPublished May 19, 2020
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-32305 | WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter. websvn · websvn | Critical 9.8 | 87% | 2 exploits | |
| CVE-2015-0235 | Heap-based buffer overflow in the nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST." gnu · glibc | Critical 10.0 | 95% | 8 exploits | |
| CVE-2021-3287 | Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class. zohocorp · manageengine opmanager | Critical 9.8 | 51% | 2 exploits | |
| CVE-2019-0230 | struts2: possible RCE due to forced double OGNL evaluation when evaluated on raw user input in tag attributes apache · struts | Critical 9.8 | 97% | 4 exploits | |
| CVE-2011-2523 | vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp. vsftpd project · vsftpd | Critical 9.8 | 96% | 3 exploits | |
| CVE-2021-21425 | In versions 1.10.7 and earlier, an unauthenticated user can execute some methods of administrator controller without needing any credentials. getgrav · grav-plugin-admin | Critical 9.8 | 81% | 2 exploits | |
| CVE-2021-26295 | Apache OFBiz has unsafe deserialization prior to 17.12.06. apache · ofbiz | Critical 9.8 | 98% | 2 exploits | |
| CVE-2021-21978 | VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability. vmware · view planner | Critical 9.8 | 99% | 2 exploits | |
| CVE-2021-27670 | Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter. appspace · appspace | Critical 9.8 | 61% | 1 exploit | |
| CVE-2021-26747 | Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution. netis-systems · wf2411 firmware | Critical 9.8 | 55% | 1 exploit | |
| CVE-2021-21307 | In Lucee Admin before versions 5.3.7.47, 5.3.6.68 or 5.3.5.96 there is an unauthenticated remote code exploit. lucee · lucee server | Critical 9.8 | 89% | 3 exploits | |
| CVE-2021-22652 | Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attacker to change the configuration and obtain code execution. advantech · iview | Critical 9.8 | 37% | 2 exploits | |
| CVE-2020-28871 | Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute arbitrary code on the server-side via an insecure file upload. monitorr · monitorr | Critical 9.8 | 86% | 3 exploits | |
| CVE-2021-3122 | CMCAgent in NCR Command Center Agent 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter (within an XML document sent to port 8089) that enables the remote, unauthenticated execution of an arbitrary command as SYSTEM, as exploited in the wild in 2020… ncr · command center agent | Critical 9.8 | 87% | 1 exploit | |
| CVE-2020-28653 | Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution via the Smart Update Manager (SUM) servlet. zohocorp · manageengine opmanager | Critical 9.8 | 79% | 2 exploits | |
| CVE-2021-3378 | FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a "Content-Type: image/png" header to Config/SaveUploadedHotspotLogoFile and then visiting Assets/temp/hotspot/img/logohotspot.asp. fortilogger · fortilogger | Critical 9.8 | 98% | 5 exploits | |
| CVE-2020-35131 | Cockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Remote Command Execution via registerCriteriaFunction in lib/MongoLite/Database.php, as demonstrated by values in JSON data to the /auth/check or /auth/requestreset URI. agentejo · cockpit | Critical 9.8 | 50% | 1 exploit | |
| CVE-2018-10933 | libssh - security update libssh · libssh | Critical 9.1 | 92% | 3 exploits | |
| CVE-2020-35848 | Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function. agentejo · cockpit | Critical 9.8 | 75% | 2 exploits | |
| CVE-2020-35847 | Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function. agentejo · cockpit | Critical 9.8 | 98% | 4 exploits | |
| CVE-2020-35846 | Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function. agentejo · cockpit | Critical 9.8 | 93% | 2 exploits | |
| CVE-2020-35729 | KLog Server 2.4.1 allows OS command injection via shell metacharacters in the actions/authenticate.php user parameter. klogserver · klog server | Critical 9.8 | 88% | 8 exploits | |
| CVE-2020-28188 | Remote Command Execution (RCE) vulnerability in TerraMaster TOS <= 4.2.06 allow remote unauthenticated attackers to inject OS commands via /include/makecvs.php in Event parameter. terra-master · tos | Critical 9.8 | 96% | 1 exploit | |
| CVE-2020-35665 | An unauthenticated command-execution vulnerability exists in TerraMaster TOS through 4.2.06 via shell metacharacters in the Event parameter in include/makecvs.php during CSV creation. terra-master · terramaster operating system | Critical 9.8 | 78% | 2 exploits | |
| CVE-2020-7200 | A potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6. hp · systems insight manager | Critical 9.8 | 82% | 2 exploits | |
| CVE-2020-17132 | Microsoft Exchange Remote Code Execution Vulnerability microsoft · exchange server | Critical 9.1 | 90% | 1 exploit | |
| CVE-2020-29597 | IncomCMS 2.0 has a modules/uploader/showcase/script.php insecure file upload vulnerability. incomcms project · incomcms | Critical 9.8 | 71% | 3 exploits | |
| CVE-2020-11984 | Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE apache · http server | Critical 9.8 | 90% | 1 exploit | |
| CVE-2020-29279 | PHP remote file inclusion in the assign_resume_tpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 allows remote code execution. 74cms · 74cms | Critical 9.8 | 53% | 1 exploit | |
| CVE-2020-24719 | Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack. couchbase · couchbase server | Critical 9.8 | 23% | 1 exploit | |
| CVE-2020-28347 | tdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to execute arbitrary code via the slave_mac parameter. tp-link · ac1750 firmware | Critical 9.8 | 75% | 5 exploits | |
| CVE-2020-24881 | SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning. enhancesoft · osticket | Critical 9.8 | 73% | 2 exploits | |
| CVE-2020-11854 | Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) vulnerability in Micro Focus products products Operation Bridge Manager, Operation Bridge (containerized) and Application Performance… microfocus · application performance management | Critical 9.8 | 74% | 1 exploit | |
| CVE-2020-11698 | Improper input sanitization of the parameter community on the page snmp-x.php would allow a remote attacker to inject commands into the file snmpd.conf that would allow executing commands on the target server. titanhq · spamtitan | Critical 9.8 | 73% | 4 exploits | |
| CVE-2020-24186 | A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allows unauthenticated users to upload any type of file, including PHP files via the wmuUploadFiles AJAX action. gvectors · wpdiscuz | Critical 10.0 | 95% | 6 exploits | |
| CVE-2020-17456 | SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi page. seowonintech · slc-130 firmware | Critical 9.8 | 74% | 1 exploit | |
| CVE-2020-17506 | Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQL injection of the apikey parameter in fw.login.php. articatech · web proxy | Critical 9.8 | 94% | 4 exploits | |
| CVE-2020-7357 | Cayin CMS suffers from an authenticated OS semi-blind command injection vulnerability using default credentials. cayintech · cms | Critical 9.9 | 32% | 1 exploit | |
| CVE-2020-13151 | Aerospike Community Edition 4.9.0.5 allows for unauthenticated submission and execution of user-defined functions (UDFs), written in Lua, as part of a database query. aerospike · aerospike server | Critical 9.8 | 87% | 4 exploits | |
| CVE-2020-15922 | There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. midasolutions · eframework | Critical 9.8 | 57% | 2 exploits | |
| CVE-2020-15920 | There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. midasolutions · eframework | Critical 9.8 | 98% | 4 exploits | |
| CVE-2020-15893 | An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. dlink · dir-816l firmware | Critical 9.8 | 21% | 1 exploit | |
| CVE-2020-13382 | openSIS through 7.4 has Incorrect Access Control. os4ed · opensis | Critical 9.1 | 53% | 3 exploits | |
| CVE-2020-13381 | openSIS through 7.4 allows SQL Injection. os4ed · opensis | Critical 9.8 | 59% | 2 exploits | |
| CVE-2020-13160 | AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution. anydesk · anydesk | Critical 9.8 | 81% | 4 exploits | |
| CVE-2020-12800 | The drag-and-drop-multiple-file-upload-contact-form-7 plugin before 1.3.3.3 for WordPress allows Unrestricted File Upload and remote code execution by setting supported_type to php% and uploading a .php% file. codedropz · drag and drop multiple file upload - contact form 7 | Critical 9.8 | 79% | 2 exploits | |
| CVE-2020-10546 | rConfig 3.9.4 and previous versions has unauthenticated compliancepolicies.inc.php SQL injection. rconfig · rconfig | Critical 9.8 | 87% | 1 exploit | |
| CVE-2020-7115 | The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass. arubanetworks · clearpass policy manager | Critical 9.8 | 65% | 2 exploits | |
| CVE-2020-8606 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to bypass authentication on affected installations of Trend Micro InterScan Web Security Virtual Appliance. trendmicro · interscan web security virtual appliance | Critical 9.8 | 73% | 3 exploits | |
| CVE-2020-13167 | Netsweeper through 6.4.3 allows unauthenticated remote code execution because webadmin/tools/unixlogin.php (with certain Referer headers) launches a command line with client-supplied parameters, and allows injection of shell metacharacters. netsweeper · netsweeper | Critical 9.8 | 95% | 1 exploit |
Showing 251–300 of 1,192
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.