Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 19, 2026
890 vulnerabilities · highest exploit probability first
- CVE-2020-11108High 8.8The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files.pi-hole · pi-holeEPSS78%8 exploitsPublished May 11, 2020
- CVE-2020-12109High 8.8Certain TP-Link devices allow Command Injection.tp-link · nc200 firmwareEPSS74%3 exploitsPublished May 4, 2020
- CVE-2020-7351High 8.8An OS Command Injection vulnerability in the endpoint_devicemap.php component of Fonality Trixbox Community Edition allows an attacker to execute commands on the underlying operating system as the "asterisk" user.netfortris · trixboxEPSS65%2 exploitsPublished May 1, 2020
- CVE-2019-19699High 7.2There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at…centreon · centreonEPSS28%2 exploitsPublished Apr 6, 2020
- CVE-2020-10884High 8.8This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers.tp-link · ac1750 firmwareEPSS22%3 exploitsPublished Mar 25, 2020
- CVE-2020-10882High 8.8This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers.tp-link · ac1750 firmwareEPSS41%3 exploitsPublished Mar 25, 2020
- CVE-2020-10808High 8.8Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup Backup Listing Endpoint.vestacp · vesta control panelEPSS78%3 exploitsPublished Mar 22, 2020
- CVE-2020-10173High 8.8Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi.comtrend · vr-3033 firmwareEPSS77%1 exploitPublished Mar 5, 2020
- CVE-2019-20501High 7.8D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in the Web interface, using shell metacharacters in the admin.cgi?action=upgrade firmwareRestore or firmwareServerip parameter.dlink · dwl-2600ap firmwareEPSS90%1 exploitPublished Mar 5, 2020
- CVE-2019-20499High 7.8D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_restore configRestore or configServerip parameter.dlink · dwl-2600ap firmwareEPSS95%3 exploitsPublished Mar 5, 2020
- CVE-2020-8813High 8.8graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege.cacti · cactiEPSS74%3 exploitsPublished Feb 22, 2020
- CVE-2013-2097High 7.8ZPanel through 10.1.0 has Remote Command Executionzpanel project · zpanelEPSS26%5 exploitsPublished Feb 12, 2020
- CVE-2020-0668High 7.8An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'.microsoft · windows 10EPSS26%3 exploitsPublished Feb 11, 2020
- CVE-2014-7863High 7.5The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager before 11.9 build 11912, OpManager 8 through 11.5 build 11400, and IT360 10.5 and earlier does not properly restrict access, which allows remote attackers and remote authenticated users…zohocorp · manageengine applications managerEPSS83%2 exploitsPublished Feb 8, 2020
- CVE-2014-5468High 8.8A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cfm to specify a malicious PNG file, which could let a remote malicious user obtain sensitive information or execute arbitrary code.getrailo · railoEPSS53%4 exploitsPublished Feb 7, 2020
- CVE-2013-3629High 8.8ISPConfig 3.0.5.2 has Arbitrary PHP Code Executionispconfig · ispconfigEPSS43%3 exploitsPublished Feb 7, 2020
- CVE-2013-3628High 8.8Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerabilityzabbix · zabbixEPSS67%2 exploitsPublished Feb 7, 2020
- CVE-2013-3591High 8.8vTiger CRM 5.3 and 5.4: 'files' Upload Folder Arbitrary PHP Code Execution Vulnerabilityvtiger · vtiger crmEPSS43%3 exploitsPublished Feb 7, 2020
- CVE-2020-8654High 8.8An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the /module/module_frame/index.php autodiscovery.php target field.eyesofnetwork · eyesofnetworkEPSS92%6 exploitsPublished Feb 6, 2020
- CVE-2013-3568High 8.8Cross-site request forgery (CSRF) vulnerability in Cisco Linksys WRT110 allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors.cisco · linksys wrt110 firmwareEPSS25%3 exploitsPublished Feb 6, 2020
- CVE-2015-6000High 8.8Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger/actions/CompanyDetailsSave.php in Vtiger CRM 6.3.0 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an…vtiger · vtiger crmEPSS40%3 exploitsPublished Feb 6, 2020
- CVE-2020-7246High 8.8A remote code execution (RCE) vulnerability exists in qdPM 9.1 and earlier.qdpm · qdpmEPSS83%9 exploitsPublished Jan 21, 2020
- CVE-2014-6039High 7.5ManageEngine EventLog Analyzer version 7 through 9.9 build 9002 has a Credentials Disclosure Vulnerability.zohocorp · manageengine eventlog analyzerEPSS69%2 exploitsPublished Jan 13, 2020
- CVE-2014-6038High 7.5Zoho ManageEngine EventLog Analyzer versions 7 through 9.9 build 9002 have a database Information Disclosure Vulnerability.zohocorp · manageengine eventlog analyzerEPSS73%2 exploitsPublished Jan 13, 2020
- CVE-2015-4553High 8.8A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell.dedecms · dedecmsEPSS57%2 exploitsPublished Jan 6, 2020
- CVE-2019-19509High 8.8A remote authenticated user can directly execute system commands by sending a GET request to ajaxArchiveFiles.php because the path parameter is passed to the exec function without filtering, which can lead to command execution.rconfig · rconfigEPSS72%8 exploitsPublished Jan 6, 2020
- CVE-2013-1391High 7.5Authentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV, Hachi CCTV, NoVus CCTV, and Well-Vision Inc DVR systems allows a remote attacker to retrieve the device configuration.hachi · hv-04rd pro firmwareEPSS76%1 exploitPublished Oct 30, 2019
- CVE-2019-16663High 8.8An attacker can directly execute system commands by sending a GET request to search.crud.php because the catCommand parameter is passed to the exec function without filtering, which can lead to command execution.rconfig · rconfigEPSS85%2 exploitsPublished Oct 28, 2019
- CVE-2019-18371High 7.5An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable.mi · millet router 3g firmwareEPSS56%1 exploitPublished Oct 23, 2019
- CVE-2019-14287High 8.8In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID.sudo project · sudoEPSS64%1 exploitPublished Oct 17, 2019
- CVE-2019-16667High 8.8diag_command.php in pfSense 2.4.4-p3 allows CSRF via the txtCommand or txtRecallBuffer field, as demonstrated by executing OS commands.netgate · pfsenseEPSS55%1 exploitPublished Sep 26, 2019
- CVE-2015-9406High 7.5Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an attacker to read arbitrary files via a ..mtheme-unus project · mtheme-unusEPSS55%1 exploitPublished Sep 20, 2019
- CVE-2019-10669High 7.2There is a command injection vulnerability in html/includes/graphs/device/collectd.inc.php where user supplied parameters are filtered with the mysqli_escape_real_string function.librenms · librenmsEPSS81%3 exploitsPublished Sep 9, 2019
- CVE-2019-16113High 8.8Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg file name, and then this PHP code can write other PHP code to a ../ pathname.bludit · bluditEPSS78%8 exploitsPublished Sep 8, 2019
- CVE-2019-1936High 7.2A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an authenticated, remote attacker to execute arbitrary commands on the underlying Linux…cisco · ucs directorEPSS39%3 exploitsPublished Aug 21, 2019
- CVE-2019-14530High 8.8An attacker can download any file (that is readable by the user www-data) from server storage.open-emr · openemrEPSS66%5 exploitsPublished Aug 13, 2019
- CVE-2019-10267High 8.8An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50.ahsay · cloud backup suiteEPSS75%5 exploitsPublished Jul 26, 2019
- CVE-2019-14241High 7.5HAProxy through 2.0.2 allows attackers to cause a denial of service (ha_panic) via vectors related to htx_manage_client_side_cookies in proto_htx.c.haproxy · haproxyEPSS70%1 exploitPublished Jul 22, 2019
- CVE-2019-14205High 7.5A Local File Inclusion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for WordPress allows remote attackers to retrieve arbitrary files via the $REQUEST['adaptive-images-settings']['source_file'] parameter in adaptive-images-script.php.nevma · adaptive imagesEPSS63%1 exploitPublished Jul 21, 2019
- CVE-2018-15812High 7.5Insufficient Entropy in DotNetNukednnsoftware · dotnetnukeEPSS47%2 exploitsPublished Jul 5, 2019
- CVE-2018-18326High 7.5Insufficient Entropy in DotNetNukednnsoftware · dotnetnukeEPSS54%2 exploitsPublished Jul 5, 2019
- CVE-2019-7254High 7.5Linear eMerge E3-Series devices allow File Inclusion.nortekcontrol · linear emerge elite firmwareEPSS82%2 exploitsPublished Jul 2, 2019
- CVE-2019-7232High 8.8The ABB IDAL HTTP server is vulnerable to a buffer overflow when a long Host header is sent in a web request.abb · pb610 panel builder 600 firmwareEPSS52%1 exploitPublished Jun 24, 2019
- CVE-2019-11409High 8.8app/operator_panel/exec.php in the Operator Panel module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validation that allows authenticated non-administrative attackers to execute commands on the host.fusionpbx · fusionpbxEPSS87%4 exploitsPublished Jun 17, 2019
- CVE-2019-12181High 8.8A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux.solarwinds · serv-u ftp serverEPSS65%6 exploitsPublished Jun 17, 2019
- CVE-2019-12840High 8.8In Webmin through 1.910, any user authorized to the "Package Updates" module can execute arbitrary commands with root privileges via the data parameter to update.cgi.webmin · webminEPSS77%2 exploitsPublished Jun 15, 2019
- CVE-2019-12276High 7.5A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEncryptController in GrandNode 4.40 allows remote, unauthenticated attackers to retrieve arbitrary files on the web server via specially crafted LetsEncrypt/Index?fileName= HTTP requests.grandnode · grandnodeEPSS57%1 exploitPublished Jun 5, 2019
- CVE-2019-12169High 8.8ATutor 2.2.4 allows Arbitrary File Upload and Directory Traversal, resulting in remote code execution via a ".." pathname in a ZIP archive to the mods/_core/languages/language_import.php (aka Import New Language) or mods/_standard/patcher/index_admin.php (aka Patcher) component.atutor · atutorEPSS72%4 exploitsPublished Jun 3, 2019
- CVE-2019-0227High 7.5Server Side Request Forgery in Apache Axisapache · axisEPSS92%1 exploitPublished May 14, 2019
- CVE-2019-11600High 8.1A SQL injection vulnerability in the activities API in OpenProject before 8.3.2 allows a remote attacker to execute arbitrary SQL commands via the id parameter.openproject · openprojectEPSS80%2 exploitsPublished May 13, 2019
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-11108 | The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. pi-hole · pi-hole | High 8.8 | 78% | 8 exploits | |
| CVE-2020-12109 | Certain TP-Link devices allow Command Injection. tp-link · nc200 firmware | High 8.8 | 74% | 3 exploits | |
| CVE-2020-7351 | An OS Command Injection vulnerability in the endpoint_devicemap.php component of Fonality Trixbox Community Edition allows an attacker to execute commands on the underlying operating system as the "asterisk" user. netfortris · trixbox | High 8.8 | 65% | 2 exploits | |
| CVE-2019-19699 | There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at… centreon · centreon | High 7.2 | 28% | 2 exploits | |
| CVE-2020-10884 | This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. tp-link · ac1750 firmware | High 8.8 | 22% | 3 exploits | |
| CVE-2020-10882 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. tp-link · ac1750 firmware | High 8.8 | 41% | 3 exploits | |
| CVE-2020-10808 | Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup Backup Listing Endpoint. vestacp · vesta control panel | High 8.8 | 78% | 3 exploits | |
| CVE-2020-10173 | Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi. comtrend · vr-3033 firmware | High 8.8 | 77% | 1 exploit | |
| CVE-2019-20501 | D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in the Web interface, using shell metacharacters in the admin.cgi?action=upgrade firmwareRestore or firmwareServerip parameter. dlink · dwl-2600ap firmware | High 7.8 | 90% | 1 exploit | |
| CVE-2019-20499 | D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_restore configRestore or configServerip parameter. dlink · dwl-2600ap firmware | High 7.8 | 95% | 3 exploits | |
| CVE-2020-8813 | graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege. cacti · cacti | High 8.8 | 74% | 3 exploits | |
| CVE-2013-2097 | ZPanel through 10.1.0 has Remote Command Execution zpanel project · zpanel | High 7.8 | 26% | 5 exploits | |
| CVE-2020-0668 | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. microsoft · windows 10 | High 7.8 | 26% | 3 exploits | |
| CVE-2014-7863 | The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager before 11.9 build 11912, OpManager 8 through 11.5 build 11400, and IT360 10.5 and earlier does not properly restrict access, which allows remote attackers and remote authenticated users… zohocorp · manageengine applications manager | High 7.5 | 83% | 2 exploits | |
| CVE-2014-5468 | A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cfm to specify a malicious PNG file, which could let a remote malicious user obtain sensitive information or execute arbitrary code. getrailo · railo | High 8.8 | 53% | 4 exploits | |
| CVE-2013-3629 | ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution ispconfig · ispconfig | High 8.8 | 43% | 3 exploits | |
| CVE-2013-3628 | Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerability zabbix · zabbix | High 8.8 | 67% | 2 exploits | |
| CVE-2013-3591 | vTiger CRM 5.3 and 5.4: 'files' Upload Folder Arbitrary PHP Code Execution Vulnerability vtiger · vtiger crm | High 8.8 | 43% | 3 exploits | |
| CVE-2020-8654 | An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the /module/module_frame/index.php autodiscovery.php target field. eyesofnetwork · eyesofnetwork | High 8.8 | 92% | 6 exploits | |
| CVE-2013-3568 | Cross-site request forgery (CSRF) vulnerability in Cisco Linksys WRT110 allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors. cisco · linksys wrt110 firmware | High 8.8 | 25% | 3 exploits | |
| CVE-2015-6000 | Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger/actions/CompanyDetailsSave.php in Vtiger CRM 6.3.0 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an… vtiger · vtiger crm | High 8.8 | 40% | 3 exploits | |
| CVE-2020-7246 | A remote code execution (RCE) vulnerability exists in qdPM 9.1 and earlier. qdpm · qdpm | High 8.8 | 83% | 9 exploits | |
| CVE-2014-6039 | ManageEngine EventLog Analyzer version 7 through 9.9 build 9002 has a Credentials Disclosure Vulnerability. zohocorp · manageengine eventlog analyzer | High 7.5 | 69% | 2 exploits | |
| CVE-2014-6038 | Zoho ManageEngine EventLog Analyzer versions 7 through 9.9 build 9002 have a database Information Disclosure Vulnerability. zohocorp · manageengine eventlog analyzer | High 7.5 | 73% | 2 exploits | |
| CVE-2015-4553 | A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell. dedecms · dedecms | High 8.8 | 57% | 2 exploits | |
| CVE-2019-19509 | A remote authenticated user can directly execute system commands by sending a GET request to ajaxArchiveFiles.php because the path parameter is passed to the exec function without filtering, which can lead to command execution. rconfig · rconfig | High 8.8 | 72% | 8 exploits | |
| CVE-2013-1391 | Authentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV, Hachi CCTV, NoVus CCTV, and Well-Vision Inc DVR systems allows a remote attacker to retrieve the device configuration. hachi · hv-04rd pro firmware | High 7.5 | 76% | 1 exploit | |
| CVE-2019-16663 | An attacker can directly execute system commands by sending a GET request to search.crud.php because the catCommand parameter is passed to the exec function without filtering, which can lead to command execution. rconfig · rconfig | High 8.8 | 85% | 2 exploits | |
| CVE-2019-18371 | An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. mi · millet router 3g firmware | High 7.5 | 56% | 1 exploit | |
| CVE-2019-14287 | In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. sudo project · sudo | High 8.8 | 64% | 1 exploit | |
| CVE-2019-16667 | diag_command.php in pfSense 2.4.4-p3 allows CSRF via the txtCommand or txtRecallBuffer field, as demonstrated by executing OS commands. netgate · pfsense | High 8.8 | 55% | 1 exploit | |
| CVE-2015-9406 | Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an attacker to read arbitrary files via a .. mtheme-unus project · mtheme-unus | High 7.5 | 55% | 1 exploit | |
| CVE-2019-10669 | There is a command injection vulnerability in html/includes/graphs/device/collectd.inc.php where user supplied parameters are filtered with the mysqli_escape_real_string function. librenms · librenms | High 7.2 | 81% | 3 exploits | |
| CVE-2019-16113 | Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg file name, and then this PHP code can write other PHP code to a ../ pathname. bludit · bludit | High 8.8 | 78% | 8 exploits | |
| CVE-2019-1936 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an authenticated, remote attacker to execute arbitrary commands on the underlying Linux… cisco · ucs director | High 7.2 | 39% | 3 exploits | |
| CVE-2019-14530 | An attacker can download any file (that is readable by the user www-data) from server storage. open-emr · openemr | High 8.8 | 66% | 5 exploits | |
| CVE-2019-10267 | An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. ahsay · cloud backup suite | High 8.8 | 75% | 5 exploits | |
| CVE-2019-14241 | HAProxy through 2.0.2 allows attackers to cause a denial of service (ha_panic) via vectors related to htx_manage_client_side_cookies in proto_htx.c. haproxy · haproxy | High 7.5 | 70% | 1 exploit | |
| CVE-2019-14205 | A Local File Inclusion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for WordPress allows remote attackers to retrieve arbitrary files via the $REQUEST['adaptive-images-settings']['source_file'] parameter in adaptive-images-script.php. nevma · adaptive images | High 7.5 | 63% | 1 exploit | |
| CVE-2018-15812 | Insufficient Entropy in DotNetNuke dnnsoftware · dotnetnuke | High 7.5 | 47% | 2 exploits | |
| CVE-2018-18326 | Insufficient Entropy in DotNetNuke dnnsoftware · dotnetnuke | High 7.5 | 54% | 2 exploits | |
| CVE-2019-7254 | Linear eMerge E3-Series devices allow File Inclusion. nortekcontrol · linear emerge elite firmware | High 7.5 | 82% | 2 exploits | |
| CVE-2019-7232 | The ABB IDAL HTTP server is vulnerable to a buffer overflow when a long Host header is sent in a web request. abb · pb610 panel builder 600 firmware | High 8.8 | 52% | 1 exploit | |
| CVE-2019-11409 | app/operator_panel/exec.php in the Operator Panel module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validation that allows authenticated non-administrative attackers to execute commands on the host. fusionpbx · fusionpbx | High 8.8 | 87% | 4 exploits | |
| CVE-2019-12181 | A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux. solarwinds · serv-u ftp server | High 8.8 | 65% | 6 exploits | |
| CVE-2019-12840 | In Webmin through 1.910, any user authorized to the "Package Updates" module can execute arbitrary commands with root privileges via the data parameter to update.cgi. webmin · webmin | High 8.8 | 77% | 2 exploits | |
| CVE-2019-12276 | A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEncryptController in GrandNode 4.40 allows remote, unauthenticated attackers to retrieve arbitrary files on the web server via specially crafted LetsEncrypt/Index?fileName= HTTP requests. grandnode · grandnode | High 7.5 | 57% | 1 exploit | |
| CVE-2019-12169 | ATutor 2.2.4 allows Arbitrary File Upload and Directory Traversal, resulting in remote code execution via a ".." pathname in a ZIP archive to the mods/_core/languages/language_import.php (aka Import New Language) or mods/_standard/patcher/index_admin.php (aka Patcher) component. atutor · atutor | High 8.8 | 72% | 4 exploits | |
| CVE-2019-0227 | Server Side Request Forgery in Apache Axis apache · axis | High 7.5 | 92% | 1 exploit | |
| CVE-2019-11600 | A SQL injection vulnerability in the activities API in OpenProject before 8.3.2 allows a remote attacker to execute arbitrary SQL commands via the id parameter. openproject · openproject | High 8.1 | 80% | 2 exploits |
Showing 251–300 of 890
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.