Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 19, 2026
1,192 vulnerabilities · highest exploit probability first
- CVE-2020-13166Critical 9.8The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcoded (the same for all customers' installations) in web.config, and can be used to send serialized ASP code.mylittletools · mylittleadminEPSS78%3 exploitsPublished May 19, 2020
- CVE-2020-11532Critical 9.8Zoho ManageEngine DataSecurity Plus prior to 6.0.1 uses default admin credentials to communicate with a DataEngine Xnode server.zohocorp · manageengine datasecurity plusEPSS77%1 exploitPublished May 8, 2020
- CVE-2020-11530Critical 9.8A blind SQL injection vulnerability is present in Chop Slider 3, a WordPress plugin.idangero · chop sliderEPSS96%3 exploitsPublished May 8, 2020
- CVE-2020-12720Critical 9.8vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access control.vbulletin · vbulletinEPSS89%1 exploitPublished May 7, 2020
- CVE-2020-4429Critical 9.8IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrative account.ibm · data risk managerEPSS72%2 exploitsPublished May 7, 2020
- CVE-2020-3187Critical 9.1A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and obtain read and delete access to…cisco · firepower threat defenseEPSS97%2 exploitsPublished May 6, 2020
- CVE-2019-5620Critical 9.8ABB MicroSCADA Pro SYS600 version 9.3 suffers from an instance of CWE-306: Missing Authentication for Critical Function.hitachienergy · microscada pro sys600EPSS71%1 exploitPublished Apr 29, 2020
- CVE-2020-10915Critical 9.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.4587.veeam · oneEPSS87%1 exploitPublished Apr 22, 2020
- CVE-2020-10914Critical 9.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.4587.veeam · oneEPSS48%1 exploitPublished Apr 22, 2020
- CVE-2020-3250Critical 9.8Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device.cisco · ucs directorEPSS61%1 exploitPublished Apr 15, 2020
- CVE-2020-3243Critical 9.8Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device.cisco · ucs directorEPSS88%1 exploitPublished Apr 15, 2020
- CVE-2020-11455Critical 9.8LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php.limesurvey · limesurveyEPSS97%2 exploitsPublished Apr 1, 2020
- CVE-2020-10879Critical 9.8rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nodeId parameter is passed directly to the exec function without being escaped.rconfig · rconfigEPSS84%1 exploitPublished Mar 23, 2020
- CVE-2020-10220Critical 9.8The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter.rconfig · rconfigEPSS100%4 exploitsPublished Mar 7, 2020
- CVE-2016-10045Critical 9.8Remote code execution in PHPMailerphpmailer project · phpmailerEPSS98%5 exploitsPublished Mar 5, 2020
- CVE-2020-9465Critical 9.8The eonweb web interface is prone to a SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the user_id field in a cookie.eyesofnetwork · eyesofnetworkEPSS82%2 exploitsPublished Feb 28, 2020
- CVE-2020-8794Critical 9.8OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies.opensmtpd · opensmtpdEPSS89%4 exploitsPublished Feb 25, 2020
- CVE-2020-8012Critical 9.8CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (controller) component.broadcom · unified infrastructure managementEPSS77%4 exploitsPublished Feb 18, 2020
- CVE-2020-8010Critical 9.8CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot (controller) component.broadcom · unified infrastructure managementEPSS51%2 exploitsPublished Feb 18, 2020
- CVE-2014-7236Critical 9.1Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do/view/Main/WebHome.twiki · twikiEPSS56%3 exploitsPublished Feb 17, 2020
- CVE-2015-6922Critical 9.8Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before 9.1.0.9 does not properly require authentication, which allows remote attackers to bypass authentication and (1) add an administrative account via crafted…kaseya · virtual system administratorEPSS82%5 exploitsPublished Feb 17, 2020
- CVE-2020-8518Critical 9.8Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code execution.horde · groupwareEPSS72%3 exploitsPublished Feb 17, 2020
- CVE-2013-4211Critical 9.8A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, which could let a remote malicious user execute arbitrary PHP codeopenx · openxEPSS71%4 exploitsPublished Feb 14, 2020
- CVE-2020-7209Critical 9.8LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2.hp · linuxkiEPSS99%4 exploitsPublished Feb 12, 2020
- CVE-2011-4908Critical 9.8TinyBrowser plugin for Joomla!tiny · tinybrowserEPSS56%3 exploitsPublished Feb 12, 2020
- CVE-2013-2010Critical 9.8WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerabilityboldgrid · w3 total cacheEPSS74%4 exploitsPublished Feb 12, 2020
- CVE-2013-1359Critical 9.8An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0 via the skipSessionCheck parameter to the UMA…sonicwall · analyzerEPSS89%6 exploitsPublished Feb 11, 2020
- CVE-2013-0803Critical 9.8A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arbitrary code.polarbear cms project · polarbear cmsEPSS75%4 exploitsPublished Feb 11, 2020
- CVE-2020-8656Critical 9.8The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the username field to getApiKey in include/api_functions.php.eyesofnetwork · eyesofnetworkEPSS85%5 exploitsPublished Feb 6, 2020
- CVE-2020-8772Critical 9.8The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in iwp_mmb_set_request in init.php.revmakx · infinitewp clientEPSS88%1 exploitPublished Feb 6, 2020
- CVE-2020-6754Critical 9.8dotCMS before 5.2.4 is vulnerable to directory traversal, leading to incorrect access control.dotcms · dotcmsEPSS95%1 exploitPublished Feb 5, 2020
- CVE-2013-3215Critical 9.8vtiger CRM 5.4.0 and earlier contain an Authentication Bypass Vulnerability due to improper authentication validation in the validateSession function.vtiger · vtiger crmEPSS69%2 exploitsPublished Jan 29, 2020
- CVE-2019-20215Critical 9.8D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via a urn: to the M-SEARCH method in ssdpcgi() in /htdocs/cgibin, because HTTP_ST is mishandled.dlink · dir-859 firmwareEPSS75%3 exploitsPublished Jan 29, 2020
- CVE-2013-3214Critical 9.8vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'.vtiger · vtiger crmEPSS85%4 exploitsPublished Jan 28, 2020
- CVE-2014-8741Critical 9.8Directory traversal vulnerability in the GfdFileUploadServerlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to write to arbitrary files via unspecified vectors.lexmark · markvision enterpriseEPSS77%2 exploitsPublished Jan 27, 2020
- CVE-2013-7390Critical 9.8Unrestricted file upload vulnerability in AgentLogUploadServlet in ManageEngine DesktopCentral 7.x and 8.0.0 before build 80293 allows remote attackers to execute arbitrary code by uploading a file with a jsp extension, then accessing it via a direct request to the file in the…zohocorp · manageengine desktop centralEPSS75%4 exploitsPublished Jan 27, 2020
- CVE-2012-1495Critical 9.8install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter.webcalendar project · webcalendarEPSS80%5 exploitsPublished Jan 27, 2020
- CVE-2020-7980Critical 9.8Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI.intelliantech · aptus webEPSS83%3 exploitsPublished Jan 25, 2020
- CVE-2019-19844Critical 9.3Django Potential account hijack via password reset formdjangoproject · djangoEPSS54%1 exploitPublished Jan 16, 2020
- CVE-2020-0610Critical 9.8A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution…microsoft · windows server 2012EPSS68%Ransomware2 exploits1 actorPublished Jan 14, 2020
- CVE-2020-0609Critical 9.8A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution…microsoft · windows server 2012EPSS78%Ransomware2 exploits1 actorPublished Jan 14, 2020
- CVE-2012-4284Critical 9.8A Privilege Escalation vulnerability exists in Viscosity 1.4.1 on Mac OS X due to a path name validation issue in the setuid-set ViscosityHelper binary, which could let a remote malicious user execute arbitrary codesparklabs · viscosityEPSS70%5 exploitsPublished Jan 10, 2020
- CVE-2019-20361Critical 9.8There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to be passed to the database in the hash parameter (a blind SQL injection vulnerability).icegram · email subscribers \& newslettersEPSS85%2 exploitsPublished Jan 8, 2020
- CVE-2019-15976Critical 9.8Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device.cisco · data center network managerEPSS93%2 exploitsPublished Jan 6, 2020
- CVE-2019-15975Critical 9.8Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device.cisco · data center network managerEPSS96%2 exploitsPublished Jan 6, 2020
- CVE-2014-8516Critical 9.8Unrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors.cloudfastpath · netcharts serverEPSS82%3 exploitsPublished Jan 3, 2020
- CVE-2013-5743Critical 9.8Multiple SQL injection vulnerabilities in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.9rc1, and 2.1.x before 2.1.7.zabbix · zabbixEPSS80%2 exploitsPublished Dec 11, 2019
- CVE-2019-17270Critical 9.8Yachtcontrol through 2019-10-06: It's possible to perform direct Operating System commands as an unauthenticated user via the "/pages/systemcall.php?command={COMMAND}" page and parameter, where {COMMAND} will be executed and returning the results to the client.yachtcontrol · yachtcontrolEPSS59%2 exploitsPublished Dec 10, 2019
- CVE-2019-18818Critical 9.8Strapi allows unauthenticated attacker to reset admin password without valid reset tokenstrapi · strapiEPSS98%2 exploitsPublished Dec 2, 2019
- CVE-2019-12518Critical 9.8Anviz CrossChex access control management software 4.3.8.0 and 4.3.12 is vulnerable to a buffer overflow vulnerability.anviz · crosschexEPSS51%2 exploitsPublished Dec 2, 2019
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-13166 | The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcoded (the same for all customers' installations) in web.config, and can be used to send serialized ASP code. mylittletools · mylittleadmin | Critical 9.8 | 78% | 3 exploits | |
| CVE-2020-11532 | Zoho ManageEngine DataSecurity Plus prior to 6.0.1 uses default admin credentials to communicate with a DataEngine Xnode server. zohocorp · manageengine datasecurity plus | Critical 9.8 | 77% | 1 exploit | |
| CVE-2020-11530 | A blind SQL injection vulnerability is present in Chop Slider 3, a WordPress plugin. idangero · chop slider | Critical 9.8 | 96% | 3 exploits | |
| CVE-2020-12720 | vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access control. vbulletin · vbulletin | Critical 9.8 | 89% | 1 exploit | |
| CVE-2020-4429 | IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrative account. ibm · data risk manager | Critical 9.8 | 72% | 2 exploits | |
| CVE-2020-3187 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and obtain read and delete access to… cisco · firepower threat defense | Critical 9.1 | 97% | 2 exploits | |
| CVE-2019-5620 | ABB MicroSCADA Pro SYS600 version 9.3 suffers from an instance of CWE-306: Missing Authentication for Critical Function. hitachienergy · microscada pro sys600 | Critical 9.8 | 71% | 1 exploit | |
| CVE-2020-10915 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.4587. veeam · one | Critical 9.8 | 87% | 1 exploit | |
| CVE-2020-10914 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.4587. veeam · one | Critical 9.8 | 48% | 1 exploit | |
| CVE-2020-3250 | Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. cisco · ucs director | Critical 9.8 | 61% | 1 exploit | |
| CVE-2020-3243 | Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. cisco · ucs director | Critical 9.8 | 88% | 1 exploit | |
| CVE-2020-11455 | LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php. limesurvey · limesurvey | Critical 9.8 | 97% | 2 exploits | |
| CVE-2020-10879 | rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nodeId parameter is passed directly to the exec function without being escaped. rconfig · rconfig | Critical 9.8 | 84% | 1 exploit | |
| CVE-2020-10220 | The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter. rconfig · rconfig | Critical 9.8 | 100% | 4 exploits | |
| CVE-2016-10045 | Remote code execution in PHPMailer phpmailer project · phpmailer | Critical 9.8 | 98% | 5 exploits | |
| CVE-2020-9465 | The eonweb web interface is prone to a SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the user_id field in a cookie. eyesofnetwork · eyesofnetwork | Critical 9.8 | 82% | 2 exploits | |
| CVE-2020-8794 | OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies. opensmtpd · opensmtpd | Critical 9.8 | 89% | 4 exploits | |
| CVE-2020-8012 | CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (controller) component. broadcom · unified infrastructure management | Critical 9.8 | 77% | 4 exploits | |
| CVE-2020-8010 | CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot (controller) component. broadcom · unified infrastructure management | Critical 9.8 | 51% | 2 exploits | |
| CVE-2014-7236 | Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do/view/Main/WebHome. twiki · twiki | Critical 9.1 | 56% | 3 exploits | |
| CVE-2015-6922 | Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before 9.1.0.9 does not properly require authentication, which allows remote attackers to bypass authentication and (1) add an administrative account via crafted… kaseya · virtual system administrator | Critical 9.8 | 82% | 5 exploits | |
| CVE-2020-8518 | Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code execution. horde · groupware | Critical 9.8 | 72% | 3 exploits | |
| CVE-2013-4211 | A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, which could let a remote malicious user execute arbitrary PHP code openx · openx | Critical 9.8 | 71% | 4 exploits | |
| CVE-2020-7209 | LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2. hp · linuxki | Critical 9.8 | 99% | 4 exploits | |
| CVE-2011-4908 | TinyBrowser plugin for Joomla! tiny · tinybrowser | Critical 9.8 | 56% | 3 exploits | |
| CVE-2013-2010 | WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability boldgrid · w3 total cache | Critical 9.8 | 74% | 4 exploits | |
| CVE-2013-1359 | An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0 via the skipSessionCheck parameter to the UMA… sonicwall · analyzer | Critical 9.8 | 89% | 6 exploits | |
| CVE-2013-0803 | A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arbitrary code. polarbear cms project · polarbear cms | Critical 9.8 | 75% | 4 exploits | |
| CVE-2020-8656 | The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the username field to getApiKey in include/api_functions.php. eyesofnetwork · eyesofnetwork | Critical 9.8 | 85% | 5 exploits | |
| CVE-2020-8772 | The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in iwp_mmb_set_request in init.php. revmakx · infinitewp client | Critical 9.8 | 88% | 1 exploit | |
| CVE-2020-6754 | dotCMS before 5.2.4 is vulnerable to directory traversal, leading to incorrect access control. dotcms · dotcms | Critical 9.8 | 95% | 1 exploit | |
| CVE-2013-3215 | vtiger CRM 5.4.0 and earlier contain an Authentication Bypass Vulnerability due to improper authentication validation in the validateSession function. vtiger · vtiger crm | Critical 9.8 | 69% | 2 exploits | |
| CVE-2019-20215 | D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via a urn: to the M-SEARCH method in ssdpcgi() in /htdocs/cgibin, because HTTP_ST is mishandled. dlink · dir-859 firmware | Critical 9.8 | 75% | 3 exploits | |
| CVE-2013-3214 | vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'. vtiger · vtiger crm | Critical 9.8 | 85% | 4 exploits | |
| CVE-2014-8741 | Directory traversal vulnerability in the GfdFileUploadServerlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to write to arbitrary files via unspecified vectors. lexmark · markvision enterprise | Critical 9.8 | 77% | 2 exploits | |
| CVE-2013-7390 | Unrestricted file upload vulnerability in AgentLogUploadServlet in ManageEngine DesktopCentral 7.x and 8.0.0 before build 80293 allows remote attackers to execute arbitrary code by uploading a file with a jsp extension, then accessing it via a direct request to the file in the… zohocorp · manageengine desktop central | Critical 9.8 | 75% | 4 exploits | |
| CVE-2012-1495 | install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter. webcalendar project · webcalendar | Critical 9.8 | 80% | 5 exploits | |
| CVE-2020-7980 | Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. intelliantech · aptus web | Critical 9.8 | 83% | 3 exploits | |
| CVE-2019-19844 | Django Potential account hijack via password reset form djangoproject · django | Critical 9.3 | 54% | 1 exploit | |
| CVE-2020-0610 | A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution… microsoft · windows server 2012 | Critical 9.8 | 68% | Ransomware2 exploits1 actor | |
| CVE-2020-0609 | A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution… microsoft · windows server 2012 | Critical 9.8 | 78% | Ransomware2 exploits1 actor | |
| CVE-2012-4284 | A Privilege Escalation vulnerability exists in Viscosity 1.4.1 on Mac OS X due to a path name validation issue in the setuid-set ViscosityHelper binary, which could let a remote malicious user execute arbitrary code sparklabs · viscosity | Critical 9.8 | 70% | 5 exploits | |
| CVE-2019-20361 | There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to be passed to the database in the hash parameter (a blind SQL injection vulnerability). icegram · email subscribers \& newsletters | Critical 9.8 | 85% | 2 exploits | |
| CVE-2019-15976 | Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. cisco · data center network manager | Critical 9.8 | 93% | 2 exploits | |
| CVE-2019-15975 | Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. cisco · data center network manager | Critical 9.8 | 96% | 2 exploits | |
| CVE-2014-8516 | Unrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors. cloudfastpath · netcharts server | Critical 9.8 | 82% | 3 exploits | |
| CVE-2013-5743 | Multiple SQL injection vulnerabilities in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.9rc1, and 2.1.x before 2.1.7. zabbix · zabbix | Critical 9.8 | 80% | 2 exploits | |
| CVE-2019-17270 | Yachtcontrol through 2019-10-06: It's possible to perform direct Operating System commands as an unauthenticated user via the "/pages/systemcall.php?command={COMMAND}" page and parameter, where {COMMAND} will be executed and returning the results to the client. yachtcontrol · yachtcontrol | Critical 9.8 | 59% | 2 exploits | |
| CVE-2019-18818 | Strapi allows unauthenticated attacker to reset admin password without valid reset token strapi · strapi | Critical 9.8 | 98% | 2 exploits | |
| CVE-2019-12518 | Anviz CrossChex access control management software 4.3.8.0 and 4.3.12 is vulnerable to a buffer overflow vulnerability. anviz · crosschex | Critical 9.8 | 51% | 2 exploits |
Showing 301–350 of 1,192
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.