Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 19, 2026
890 vulnerabilities · highest exploit probability first
- CVE-2017-18372High 8.8The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerability in the Time Setting function, which is only accessible by an authenticated user.billion · 5200w-t firmwareEPSS22%1 exploitPublished May 2, 2019
- CVE-2017-18370High 8.8The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is only accessible by an authenticated user.zyxel · p660hn-t1a v1 firmwareEPSS24%1 exploitPublished May 2, 2019
- CVE-2019-11447High 8.8An attacker can infiltrate the server through the avatar upload process in the profile area via the avatar_file field to index.php?mod=main&opt=personal.cutephp · cutenewsEPSS53%3 exploitsPublished Apr 22, 2019
- CVE-2019-9193High 7.2In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_server_program' group to execute arbitrary code in the context of the database's operating system user.postgresql · postgresqlEPSS92%2 exploitsPublished Apr 1, 2019
- CVE-2019-10662High 8.8Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the backupUCMConfig file-backup parameter to the /cgi?grandstream · ucm6204 firmwareEPSS44%1 exploitPublished Mar 30, 2019
- CVE-2019-9053High 8.1It is possible with the News module, through a crafted URL, to achieve unauthenticated blind time-based SQL injection via the m1_idlist parameter.cmsmadesimple · cms made simpleEPSS69%3 exploitsPublished Mar 26, 2019
- CVE-2018-16858High 7.8It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document.EPSS67%5 exploitsPublished Mar 25, 2019
- CVE-2018-20323High 8.8www/soap/application/MCSoap/Logs.php in MailCleaner Community Edition 2018.08 allows remote attackers to execute arbitrary OS commands.mailcleaner · mailcleanerEPSS54%2 exploitsPublished Mar 21, 2019
- CVE-2018-10093High 8.8AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution.audiocodes · 420hd ip phone firmwareEPSS68%3 exploitsPublished Mar 21, 2019
- CVE-2019-9624High 7.8Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI.webmin · webminEPSS24%2 exploitsPublished Mar 7, 2019
- CVE-2019-8942High 8.8WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry can be changed to an arbitrary string, such as one ending with a .jpg?file.php substring.wordpress · wordpressEPSS83%6 exploitsPublished Feb 20, 2019
- CVE-2019-6453High 8.1mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers.mirc · mircEPSS54%3 exploitsPublished Feb 18, 2019
- CVE-2019-5736High 8.6runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new…docker · dockerEPSS98%8 exploitsPublished Feb 11, 2019
- CVE-2019-6977High 8.8gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow.libgd · libgdEPSS71%1 exploitPublished Jan 27, 2019
- CVE-2019-6447High 8.1The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute applications via TCP port 59777 requests on the local Wi-Fi network.estrongs · es file explorer file managerEPSS64%3 exploitsPublished Jan 16, 2019
- CVE-2018-8631High 7.5A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.microsoft · internet explorerEPSS68%2 exploitsPublished Dec 11, 2018
- CVE-2018-18982High 8.8NUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL characters, which can be used to inject SQL into an executing statement and allow arbitrary code execution.nuuo · nuuo cmsEPSS61%3 exploitsPublished Nov 27, 2018
- CVE-2018-19518High 7.5University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection,…php · phpEPSS96%4 exploitsPublished Nov 25, 2018
- CVE-2018-15710High 7.8Nagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via Autodiscover_new.php.nagios · nagios xiEPSS44%4 exploitsPublished Nov 14, 2018
- CVE-2018-7358High 8.8ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper change control vulnerability, which may allow an unauthorized user to perform unauthorized operations.zte · zxhn h168n firmwareEPSS90%2 exploitsPublished Nov 14, 2018
- CVE-2018-7357High 8.8ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper access control vulnerability, which may allow an unauthorized user to gain unauthorized access.zte · zxhn h168n firmwareEPSS88%2 exploitsPublished Nov 14, 2018
- CVE-2018-8552High 7.5An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data, aka "Windows Scripting Engine Memory Corruption Vulnerability." This…microsoft · internet explorerEPSS51%2 exploitsPublished Nov 13, 2018
- CVE-2015-2080High 7.5Jetty vulnerable to exposure of sensitive information to unauthenticated remote userseclipse · jettyEPSS75%1 exploitPublished Nov 9, 2018
- CVE-2015-4632High 7.5Multiple directory traversal vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the template_path parameter to (1)…koha · kohaEPSS52%3 exploitsPublished Oct 18, 2018
- CVE-2018-1335High 8.1Command injection in org.apache.tika:tika-coreapache · tikaEPSS94%4 exploitsPublished Oct 17, 2018
- CVE-2018-10823High 8.8An issue was discovered on D-Link DWR-116 through 1.06, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices.dlink · dwr-111 firmwareEPSS78%1 exploitPublished Oct 17, 2018
- CVE-2018-18323High 7.5CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=file_editor&file=/../ URI.control-webpanel · webpanelEPSS71%2 exploitsPublished Oct 15, 2018
- CVE-2018-17553High 8.8An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in navigate_upload.php in Naviwebs Navigate CMS 2.8 allows authenticated attackers to achieve remote code execution via a POST request with engine=picnik and id=../../../navigate_info.php.naviwebs · navigate cmsEPSS79%4 exploitsPublished Oct 3, 2018
- CVE-2018-17283High 7.5Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /oputilsServlet?action=getAPIKey request that can be leveraged against Firewall Analyzer to add an admin user via /api/json/v2/admin/addUser or…zohocorp · manageengine opmanagerEPSS66%1 exploitPublished Sep 21, 2018
- CVE-2018-16509High 7.8Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction.artifex · ghostscriptEPSS92%3 exploitsPublished Sep 5, 2018
- CVE-2018-15745High 7.5Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traversal, leading to File Disclosure via a ..%2F in the WEBACCOUNT.CGI RESULTPAGE parameter.argussurveillance · dvrEPSS98%1 exploitPublished Aug 30, 2018
- CVE-2018-12710High 8.0An issue was discovered on D-Link DIR-601 2.02NA devices.dlink · dir-601 firmwareEPSS77%2 exploitsPublished Aug 29, 2018
- CVE-2018-15877High 8.8The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell metacharacters in the ip parameter of a wp-admin/admin.php?page=plainview_activity_monitor&tab=activity_tools request.plainview activity monitor project · plainview activity monitorEPSS77%7 exploitsPublished Aug 26, 2018
- CVE-2018-8353High 7.5A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.microsoft · internet explorerEPSS68%2 exploitsPublished Aug 15, 2018
- CVE-2018-15153High 8.8OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/main/daemon_frame.php after modifying the "hylafax_server" global variable in…open-emr · openemrEPSS62%1 exploitPublished Aug 15, 2018
- CVE-2018-14912High 7.5cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when enable-http-clone=1 is not turned off, as demonstrated by a cgit/cgit.cgi/git/objects/?path=../ request.cgit project · cgitEPSS92%2 exploitsPublished Aug 3, 2018
- CVE-2018-0707High 7.2Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.qnap · q\'centerEPSS59%5 exploitsPublished Jul 16, 2018
- CVE-2018-0706High 8.8Exposure of Private Information in QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to access sensitive information.qnap · q\'centerEPSS48%5 exploitsPublished Jul 16, 2018
- CVE-2017-9462High 8.7Mercurial has Incorrect Permission Assignment for Critical Resourcemercurial · mercurialEPSS22%1 exploitPublished Jul 13, 2018
- CVE-2018-11529High 8.0VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via crafted MKV files.videolan · vlc media playerEPSS37%3 exploitsPublished Jul 11, 2018
- CVE-2017-16709High 7.2Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated administrators to execute arbitrary code via unspecified vectors.crestron · airmedia am-100 firmwareEPSS72%2 exploitsPublished Jul 11, 2018
- CVE-2018-8279High 7.5A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore.microsoft · chakracoreEPSS71%2 exploitsPublished Jul 10, 2018
- CVE-2018-12465High 7.2An OS command injection vulnerability in the web administration component of Micro Focus Secure Messaging Gateway (SMG) allows a remote attacker authenticated as a privileged user to execute arbitrary OS commands on the SMG server.microfocus · secure messaging gatewayEPSS80%2 exploitsPublished Jun 29, 2018
- CVE-2018-12895High 8.8WordPress through 4.9.6 allows Author users to execute arbitrary code by leveraging directory traversal in the wp-admin/post.php thumb parameter, which is passed to the PHP unlink function and can delete the wp-config.php file.wordpress · wordpressEPSS62%1 exploitPublished Jun 26, 2018
- CVE-2018-10956High 7.5IPConfigure Orchid Core VMS 2.0.5 allows Directory Traversal.ipconfigure · orchid core vmsEPSS55%3 exploitsPublished Jun 25, 2018
- CVE-2018-4233High 8.8iOS before 11.4 is affected.apple · icloudEPSS54%4 exploitsPublished Jun 8, 2018
- CVE-2018-11646High 7.5webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL, leading to an application crash.webkitgtk · webkitgtk\+EPSS68%4 exploitsPublished Jun 1, 2018
- CVE-2018-1111High 7.5DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client.fedoraproject · fedoraEPSS98%5 exploitsPublished May 17, 2018
- CVE-2018-9958High 8.8This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049.foxitsoftware · foxit readerEPSS62%4 exploitsPublished May 17, 2018
- CVE-2018-0953High 7.5A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore.microsoft · chakracoreEPSS66%2 exploitsPublished May 9, 2018
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-18372 | The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerability in the Time Setting function, which is only accessible by an authenticated user. billion · 5200w-t firmware | High 8.8 | 22% | 1 exploit | |
| CVE-2017-18370 | The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is only accessible by an authenticated user. zyxel · p660hn-t1a v1 firmware | High 8.8 | 24% | 1 exploit | |
| CVE-2019-11447 | An attacker can infiltrate the server through the avatar upload process in the profile area via the avatar_file field to index.php?mod=main&opt=personal. cutephp · cutenews | High 8.8 | 53% | 3 exploits | |
| CVE-2019-9193 | In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_server_program' group to execute arbitrary code in the context of the database's operating system user. postgresql · postgresql | High 7.2 | 92% | 2 exploits | |
| CVE-2019-10662 | Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the backupUCMConfig file-backup parameter to the /cgi? grandstream · ucm6204 firmware | High 8.8 | 44% | 1 exploit | |
| CVE-2019-9053 | It is possible with the News module, through a crafted URL, to achieve unauthenticated blind time-based SQL injection via the m1_idlist parameter. cmsmadesimple · cms made simple | High 8.1 | 69% | 3 exploits | |
| CVE-2018-16858 | It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. | High 7.8 | 67% | 5 exploits | |
| CVE-2018-20323 | www/soap/application/MCSoap/Logs.php in MailCleaner Community Edition 2018.08 allows remote attackers to execute arbitrary OS commands. mailcleaner · mailcleaner | High 8.8 | 54% | 2 exploits | |
| CVE-2018-10093 | AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution. audiocodes · 420hd ip phone firmware | High 8.8 | 68% | 3 exploits | |
| CVE-2019-9624 | Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI. webmin · webmin | High 7.8 | 24% | 2 exploits | |
| CVE-2019-8942 | WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry can be changed to an arbitrary string, such as one ending with a .jpg?file.php substring. wordpress · wordpress | High 8.8 | 83% | 6 exploits | |
| CVE-2019-6453 | mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. mirc · mirc | High 8.1 | 54% | 3 exploits | |
| CVE-2019-5736 | runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new… docker · docker | High 8.6 | 98% | 8 exploits | |
| CVE-2019-6977 | gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. libgd · libgd | High 8.8 | 71% | 1 exploit | |
| CVE-2019-6447 | The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute applications via TCP port 59777 requests on the local Wi-Fi network. estrongs · es file explorer file manager | High 8.1 | 64% | 3 exploits | |
| CVE-2018-8631 | A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. microsoft · internet explorer | High 7.5 | 68% | 2 exploits | |
| CVE-2018-18982 | NUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL characters, which can be used to inject SQL into an executing statement and allow arbitrary code execution. nuuo · nuuo cms | High 8.8 | 61% | 3 exploits | |
| CVE-2018-19518 | University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection,… php · php | High 7.5 | 96% | 4 exploits | |
| CVE-2018-15710 | Nagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via Autodiscover_new.php. nagios · nagios xi | High 7.8 | 44% | 4 exploits | |
| CVE-2018-7358 | ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper change control vulnerability, which may allow an unauthorized user to perform unauthorized operations. zte · zxhn h168n firmware | High 8.8 | 90% | 2 exploits | |
| CVE-2018-7357 | ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper access control vulnerability, which may allow an unauthorized user to gain unauthorized access. zte · zxhn h168n firmware | High 8.8 | 88% | 2 exploits | |
| CVE-2018-8552 | An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data, aka "Windows Scripting Engine Memory Corruption Vulnerability." This… microsoft · internet explorer | High 7.5 | 51% | 2 exploits | |
| CVE-2015-2080 | Jetty vulnerable to exposure of sensitive information to unauthenticated remote users eclipse · jetty | High 7.5 | 75% | 1 exploit | |
| CVE-2015-4632 | Multiple directory traversal vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the template_path parameter to (1)… koha · koha | High 7.5 | 52% | 3 exploits | |
| CVE-2018-1335 | Command injection in org.apache.tika:tika-core apache · tika | High 8.1 | 94% | 4 exploits | |
| CVE-2018-10823 | An issue was discovered on D-Link DWR-116 through 1.06, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices. dlink · dwr-111 firmware | High 8.8 | 78% | 1 exploit | |
| CVE-2018-18323 | CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=file_editor&file=/../ URI. control-webpanel · webpanel | High 7.5 | 71% | 2 exploits | |
| CVE-2018-17553 | An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in navigate_upload.php in Naviwebs Navigate CMS 2.8 allows authenticated attackers to achieve remote code execution via a POST request with engine=picnik and id=../../../navigate_info.php. naviwebs · navigate cms | High 8.8 | 79% | 4 exploits | |
| CVE-2018-17283 | Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /oputilsServlet?action=getAPIKey request that can be leveraged against Firewall Analyzer to add an admin user via /api/json/v2/admin/addUser or… zohocorp · manageengine opmanager | High 7.5 | 66% | 1 exploit | |
| CVE-2018-16509 | Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction. artifex · ghostscript | High 7.8 | 92% | 3 exploits | |
| CVE-2018-15745 | Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traversal, leading to File Disclosure via a ..%2F in the WEBACCOUNT.CGI RESULTPAGE parameter. argussurveillance · dvr | High 7.5 | 98% | 1 exploit | |
| CVE-2018-12710 | An issue was discovered on D-Link DIR-601 2.02NA devices. dlink · dir-601 firmware | High 8.0 | 77% | 2 exploits | |
| CVE-2018-15877 | The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell metacharacters in the ip parameter of a wp-admin/admin.php?page=plainview_activity_monitor&tab=activity_tools request. plainview activity monitor project · plainview activity monitor | High 8.8 | 77% | 7 exploits | |
| CVE-2018-8353 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. microsoft · internet explorer | High 7.5 | 68% | 2 exploits | |
| CVE-2018-15153 | OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/main/daemon_frame.php after modifying the "hylafax_server" global variable in… open-emr · openemr | High 8.8 | 62% | 1 exploit | |
| CVE-2018-14912 | cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when enable-http-clone=1 is not turned off, as demonstrated by a cgit/cgit.cgi/git/objects/?path=../ request. cgit project · cgit | High 7.5 | 92% | 2 exploits | |
| CVE-2018-0707 | Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands. qnap · q\'center | High 7.2 | 59% | 5 exploits | |
| CVE-2018-0706 | Exposure of Private Information in QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to access sensitive information. qnap · q\'center | High 8.8 | 48% | 5 exploits | |
| CVE-2017-9462 | Mercurial has Incorrect Permission Assignment for Critical Resource mercurial · mercurial | High 8.7 | 22% | 1 exploit | |
| CVE-2018-11529 | VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via crafted MKV files. videolan · vlc media player | High 8.0 | 37% | 3 exploits | |
| CVE-2017-16709 | Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated administrators to execute arbitrary code via unspecified vectors. crestron · airmedia am-100 firmware | High 7.2 | 72% | 2 exploits | |
| CVE-2018-8279 | A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. microsoft · chakracore | High 7.5 | 71% | 2 exploits | |
| CVE-2018-12465 | An OS command injection vulnerability in the web administration component of Micro Focus Secure Messaging Gateway (SMG) allows a remote attacker authenticated as a privileged user to execute arbitrary OS commands on the SMG server. microfocus · secure messaging gateway | High 7.2 | 80% | 2 exploits | |
| CVE-2018-12895 | WordPress through 4.9.6 allows Author users to execute arbitrary code by leveraging directory traversal in the wp-admin/post.php thumb parameter, which is passed to the PHP unlink function and can delete the wp-config.php file. wordpress · wordpress | High 8.8 | 62% | 1 exploit | |
| CVE-2018-10956 | IPConfigure Orchid Core VMS 2.0.5 allows Directory Traversal. ipconfigure · orchid core vms | High 7.5 | 55% | 3 exploits | |
| CVE-2018-4233 | iOS before 11.4 is affected. apple · icloud | High 8.8 | 54% | 4 exploits | |
| CVE-2018-11646 | webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL, leading to an application crash. webkitgtk · webkitgtk\+ | High 7.5 | 68% | 4 exploits | |
| CVE-2018-1111 | DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. fedoraproject · fedora | High 7.5 | 98% | 5 exploits | |
| CVE-2018-9958 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. foxitsoftware · foxit reader | High 8.8 | 62% | 4 exploits | |
| CVE-2018-0953 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. microsoft · chakracore | High 7.5 | 66% | 2 exploits |
Showing 301–350 of 890
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.