Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Emerging

Emerging Threats, Before They Hit KEV.

Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.

Synced hourly · figures as of Oct 19, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
401 vulnerabilities · highest exploit probability first
  • CVE-2011-0522Medium 6.8
    The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.c) in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a subtitle with an opening "" in…
    videolan · vlc media player
    EPSS52%
    2 exploits
    Published Feb 7, 2011
  • CVE-2011-0049Medium 5.0
    Directory traversal vulnerability in the _list_file_get function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote attackers to read arbitrary files via ..
    mj2 · majordomo 2
    EPSS95%
    1 exploit
    Published Feb 3, 2011
  • CVE-2010-4052Medium 5.0
    Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (resource exhaustion) via a regular expression containing adjacent…
    gnu · glibc
    EPSS51%
    2 exploits
    Published Jan 13, 2011
  • CVE-2010-4094Medium 5.0
    The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN account, which makes it easier for remote attackers to execute arbitrary code by leveraging access to the manager role.
    ibm · rational quality manager
    EPSS64%
    3 exploits
    Published Oct 26, 2010
  • CVE-2010-3332Medium 6.4
    Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Services (IIS), provides detailed error codes during decryption attempts, which allows remote attackers to decrypt and modify encrypted View…
    microsoft · .net framework
    EPSS68%
    3 exploits
    Published Sep 22, 2010
  • CVE-2010-1899Medium 4.3
    Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0, and 7.5 allows remote attackers to cause a denial of service (daemon outage) via a crafted request, related to asp.dll, aka "IIS Repeated Parameter Request…
    microsoft · internet information services
    EPSS57%
    1 exploit
    Published Sep 15, 2010
  • CVE-2010-1870Medium 5.0
    The OGNL extensive expression evaluation capability in XWork in Struts 2.0.0 through 2.1.8.1, as used in Atlassian Fisheye, Crucible, and possibly other products, uses a permissive whitelist, which allows remote attackers to modify server-side context objects and bypass the "#"…
    apache · struts
    EPSS92%
    4 exploits
    Published Aug 17, 2010
  • CVE-2010-0904Medium 5.0
    Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to affect integrity via unknown vectors.
    oracle · secure backup
    EPSS51%
    2 exploits
    Published Jul 13, 2010
  • CVE-2010-1622Medium 6.0
    SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.
    springsource · spring framework
    EPSS52%
    2 exploits
    Published Jun 21, 2010
  • CVE-2010-2333Medium 5.0
    LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote attackers to read the source code of scripts via an HTTP request with a null byte followed by a .txt file extension.
    litespeedtech · litespeed web server
    EPSS60%
    2 exploits
    Published Jun 18, 2010
  • CVE-2010-2263Medium 5.0
    nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI.
    f5 · nginx
    EPSS72%
    4 exploits
    Published Jun 15, 2010
  • CVE-2010-2156Medium 5.0
    ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length client ID.
    isc · dhcp
    EPSS76%
    1 exploit
    Published Jun 7, 2010
  • CVE-2010-2115Medium 5.0
    SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new connections) via a crafted read request.
    solarwinds · tftp server
    EPSS56%
    2 exploits
    Published May 28, 2010
  • CVE-2010-1587Medium 5.0
    The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP source code via a // (slash slash) initial substring in a URI for (1) admin/index.jsp, (2) admin/queues.jsp, or (3) admin/topics.jsp.
    apache · activemq
    EPSS78%
    1 exploit
    Published Apr 28, 2010
  • CVE-2009-4498Medium 6.8
    The node_process_command function in Zabbix Server before 1.8 allows remote attackers to execute arbitrary commands via a crafted request.
    zabbix · zabbix
    EPSS32%
    3 exploits
    Published Dec 31, 2009
  • CVE-2009-3733Medium 5.0
    Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors.
    vmware · esx
    EPSS83%
    1 exploit
    Published Nov 2, 2009
  • CVE-2009-3591Medium 5.0
    Dopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a REQUESTJET message with an invalid location.
    ben webb · dopewars
    EPSS53%
    2 exploits
    Published Oct 8, 2009
  • CVE-2009-2521Medium 5.0
    Stack consumption vulnerability in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows remote authenticated users to cause a denial of service (daemon crash) via a list (ls) -R command containing a wildcard that references a subdirectory,…
    microsoft · internet information services
    EPSS82%
    2 exploits
    Published Sep 4, 2009
  • CVE-2009-2335Medium 5.3
    WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.
    wordpress · wordpress
    EPSS85%
    1 exploit
    Published Jul 10, 2009
  • CVE-2008-6825Medium 6.8
    Directory traversal vulnerability in user/index.php in Fonality trixbox CE 2.6.1 and earlier allows remote attackers to include and execute arbitrary files via a ..
    trixbox · trixbox
    EPSS20%
    3 exploits
    Published Jun 5, 2009
  • CVE-2009-1386Medium 5.0
    ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.
    openssl · openssl
    EPSS80%
    1 exploit
    Published Jun 4, 2009
  • CVE-2009-0880Medium 6.8
    Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to load and execute arbitrary local DLL code via a ..
    ibm · director
    EPSS32%
    4 exploits
    Published Mar 12, 2009
  • CVE-2008-6132Medium 6.8
    Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via the start_date parameter.
    brickhost · phpscheduleit
    EPSS26%
    3 exploits
    Published Feb 13, 2009
  • CVE-2009-0478Medium 5.0
    Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service via an HTTP request with an invalid version number, which triggers a reachable assertion in (1) HttpMsg.c and (2) HttpStatusLine.c.
    squid · squid
    EPSS72%
    1 exploit
    Published Feb 8, 2009
  • CVE-2008-5081Medium 5.0
    The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.
    avahi · avahi
    EPSS59%
    1 exploit
    Published Dec 17, 2008
  • CVE-2008-5180Medium 5.3
    Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service (memory consumption) via a large number of SIP INVITE requests, which trigger the creation of many sessions.
    microsoft · office communicator
    EPSS68%
    3 exploits
    Published Nov 20, 2008
  • CVE-2008-4696Medium 4.3
    Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier (aka the "optional fragment"), which is not properly escaped before storage in the History Search database (aka…
    opera · opera
    EPSS46%
    3 exploits
    Published Oct 23, 2008
  • CVE-2008-4546Medium 4.3
    flash-plugin: crash caused by SWF files with different SWF versions obtained from the same URL
    adobe · flash player
    EPSS66%
    1 exploit
    Published Oct 2, 2008
  • CVE-2008-1447Medium 6.8
    The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses…
    isc · bind
    EPSS95%
    3 exploits
    Published Jul 8, 2008
  • CVE-2008-2463Medium 6.8
    The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document…
    microsoft · office snapshot viewer activex
    EPSS59%
    3 exploits
    Published Jul 7, 2008
  • CVE-2008-2549Medium 4.3
    acroread: crash and possible code execution
    adobe · acrobat reader
    EPSS53%
    1 exploit
    Published May 29, 2008
  • CVE-2008-2168Medium 4.3
    Cross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page.
    apache · http server
    EPSS55%
    1 exploit
    Published May 13, 2008
  • CVE-2008-1562Medium 5.0
    The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet, a different vulnerability than CVE-2006-5740.
    wireshark · wireshark
    EPSS51%
    1 exploit
    Published Mar 28, 2008
  • CVE-2008-1365Medium 6.4
    Stack-based buffer overflow in Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long encrypted password, which…
    trend micro · officescan corporate edition
    EPSS51%
    3 exploits
    Published Mar 17, 2008
  • CVE-2008-1358Medium 6.5
    Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to execute arbitrary code via a FETCH command with a long BODY.
    altn · mdaemon
    EPSS57%
    2 exploits
    Published Mar 17, 2008
  • CVE-2008-0871Medium 6.8
    Multiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote attackers to execute arbitrary code via a (1) long password in an Authorization header to the HTTP service or a (2) large packet to the SMPP service.
    now · sms mms gateway
    EPSS33%
    2 exploits
    Published Feb 21, 2008
  • CVE-2008-0506Medium 6.8
    include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing method is configured, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) quality, (2) angle, or (3) clipval parameter…
    coppermine · coppermine photo gallery
    EPSS59%
    2 exploits
    Published Jan 31, 2008
  • CVE-2008-0492Medium 6.8
    Stack-based buffer overflow in the Persits.XUpload.2 ActiveX control in XUpload.ocx 3.0.0.4 and earlier in Persits XUpload 3.0 allows remote attackers to execute arbitrary code via a long argument to the AddFile method.
    persits · xupload
    EPSS30%
    2 exploits
    Published Jan 30, 2008
  • CVE-2008-0455Medium 4.3
    Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary web…
    apache · http server
    EPSS65%
    1 exploit
    Published Jan 25, 2008
  • CVE-2007-6203Medium 4.3
    Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a "413 Request Entity Too Large" error message, which might allow cross-site scripting (XSS) style attacks using web client components that can…
    apache · http server
    EPSS81%
    1 exploit
    Published Dec 3, 2007
  • CVE-2007-3898Medium 6.4
    The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers to spoof DNS replies, poison the DNS cache, and facilitate further attack vectors.
    microsoft · windows 2000
    EPSS52%
    2 exploits
    Published Nov 13, 2007
  • CVE-2007-4466Medium 6.8
    Multiple stack-based buffer overflows in Electronic Arts (EA) SnoopyCtrl ActiveX control (NPSnpy.dll) allow remote attackers to execute arbitrary code via unspecified methods and parameters.
    electronic arts · snoopyctrl
    EPSS31%
    2 exploits
    Published Oct 9, 2007
  • CVE-2007-5217Medium 6.8
    Stack-based buffer overflow in the ADM4 ActiveX control in adm4.dll in Altnet Download Manager 4.0.0.6, as used in (1) Kazaa 3.2.7 and (2) Grokster, allows remote attackers to execute arbitrary code via a long argument to the Install method.
    altnet · altnet download manager
    EPSS30%
    2 exploits
    Published Oct 4, 2007
  • CVE-2007-3386Medium 4.3
    tomcat host manager xss
    apache · tomcat
    EPSS59%
    1 exploit
    Published Aug 14, 2007
  • CVE-2007-3872Medium 6.8
    Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 for Windows, and possibly earlier versions, allow remote attackers to execute arbitrary code via certain crafted requests.
    hp · openview operations
    EPSS30%
    2 exploits
    Published Aug 9, 2007
  • CVE-2007-4006Medium 6.8
    Buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 has unknown impact and remote attack vectors, aka ZD-00000034.
    mike dubman · windows rsh daemon
    EPSS34%
    3 exploits
    Published Jul 25, 2007
  • CVE-2007-3925Medium 6.5
    Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command.
    ipswitch · imail server
    EPSS85%
    3 exploits
    Published Jul 20, 2007
  • CVE-2007-3314Medium 6.8
    Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 (English Trial), and 2.0 with Portable Executable Viewer 1.00 (English Trial), allows remote attackers to execute arbitrary code via a long PDB debug filename in a PE…
    altap · portable executable viewer
    EPSS43%
    2 exploits
    Published Jun 21, 2007
  • CVE-2007-3068Medium 6.8
    Stack-based buffer overflow in DVD X Player 4.1 Professional allows remote attackers to execute arbitrary code via a PLF playlist containing a long filename.
    dvd x studios · dvd x player
    EPSS33%
    4 exploits
    Published Jun 5, 2007
  • CVE-2007-2918Medium 6.8
    Multiple stack-based buffer overflows in ActiveX controls (1) VibeC in (a) vibecontrol.dll, (2) CallManager and (3) ViewerClient in (b) StarClient.dll, (4) ComLink in (c) uicomlink.dll, and (5) WebCamXMP in (d) wcamxmp.dll in Logitech VideoCall allow remote attackers to cause a…
    logitech · videocall
    EPSS34%
    2 exploits
    Published May 31, 2007
Showing 251–300 of 401

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.

Figures as of Oct 19, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.