Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
1,192 vulnerabilities · highest exploit probability first
- CVE-2019-19492Critical 9.8FreeSWITCH 1.6.10 through 1.10.1 has a default password in event_socket.conf.xml.freeswitch · freeswitchEPSS29%2 exploitsPublished Dec 1, 2019
- CVE-2011-2921Critical 9.8ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges.ktsuss project · ktsussEPSS83%3 exploitsPublished Nov 19, 2019
- CVE-2019-5029Critical 9.8An exploitable command injection vulnerability exists in the Config editor of the Exhibitor Web UI versions 1.0.9 to 1.7.1.exhibitor project · exhibitorEPSS57%1 exploitPublished Nov 13, 2019
- CVE-2012-0694Critical 9.8SugarCRM CE <= 6.3.1 contains scripts that use "unserialize()" with user controlled input which allows remote attackers to execute arbitrary PHP code.sugarcrm · sugarcrmEPSS67%3 exploitsPublished Oct 29, 2019
- CVE-2019-17181Critical 9.8A remote SEH buffer overflow has been discovered in IntraSrv 1.0 (2007-06-03).intrasrv project · intrasrvEPSS48%1 exploitPublished Oct 28, 2019
- CVE-2019-16662Critical 9.8An attacker can directly execute system commands by sending a GET request to ajaxServerSettingsChk.php because the rootUname parameter is passed to the exec function without filtering, which can lead to command execution.rconfig · rconfigEPSS98%4 exploitsPublished Oct 28, 2019
- CVE-2019-17662Critical 9.8ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server.cybelsoft · thinvncEPSS97%2 exploitsPublished Oct 16, 2019
- CVE-2019-17506Critical 9.8There are some web interfaces without authentication requirements on D-Link DIR-868L B1-2.03 and DIR-817LW A1-1.04 routers.dlink · dir-817lw a1 firmwareEPSS56%1 exploitPublished Oct 11, 2019
- CVE-2019-17382Critical 9.1An attacker can bypass the login page and access the dashboard page, and then create a Dashboard, Report, Screen, or Map without any Username/Password (i.e., anonymously).zabbix · zabbixEPSS54%1 exploitPublished Oct 9, 2019
- CVE-2019-16724Critical 9.8File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler (SEH) based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331.upredsun · file sharing wizardEPSS72%2 exploitsPublished Sep 24, 2019
- CVE-2019-5485Critical 10.0Command Injection in gitlabhookgitlabhook project · gitlabhookEPSS59%1 exploitPublished Sep 16, 2019
- CVE-2019-1937Critical 9.8A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to acquire a valid session token with administrator…cisco · ucs directorEPSS76%3 exploitsPublished Aug 21, 2019
- CVE-2019-1935Critical 9.8A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to log in to the CLI of an affected system by using the SCP User account (scpuser), which…cisco · ucs directorEPSS83%3 exploitsPublished Aug 21, 2019
- CVE-2019-9851Critical 9.8LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from.libreoffice · libreofficeEPSS78%2 exploitsPublished Aug 15, 2019
- CVE-2019-12255Critical 9.8Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4).windriver · vxworksEPSS75%2 exploitsPublished Aug 9, 2019
- CVE-2019-13101Critical 9.8An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices.dlink · dir-600m firmwareEPSS67%1 exploitPublished Aug 8, 2019
- CVE-2019-12725Critical 9.8Zeroshell 3.9.0 is prone to a remote command execution vulnerability.zeroshell · zeroshellEPSS90%2 exploitsPublished Jul 19, 2019
- CVE-2019-9848Critical 9.8LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc.libreoffice · libreofficeEPSS29%1 exploitPublished Jul 17, 2019
- CVE-2019-13372Critical 9.8/web/Lib/Action/IndexAction.class.php in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 allows remote attackers to execute arbitrary PHP code via a cookie because a cookie's username field allows eval injection, and an empty password bypasses authentication.dlink · central wifimanagerEPSS82%2 exploitsPublished Jul 6, 2019
- CVE-2017-8229Critical 9.8Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administrative credentials.amcrest · ipm-721s firmwareEPSS74%1 exploitPublished Jul 3, 2019
- CVE-2018-11686Critical 9.8The Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code execution via setup.php and change_config.php.flowpaper · flexpaperEPSS53%1 exploitPublished Jul 3, 2019
- CVE-2019-7257Critical 10.0Linear eMerge E3-Series devices allow Unrestricted File Upload.nortekcontrol · linear emerge elite firmwareEPSS70%2 exploitsPublished Jul 2, 2019
- CVE-2019-7276Critical 9.8Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console.optergy · enterpriseEPSS93%2 exploitsPublished Jul 1, 2019
- CVE-2019-1620Critical 9.8A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to upload arbitrary files on an affected device.cisco · data center network managerEPSS84%2 exploitsPublished Jun 27, 2019
- CVE-2019-1619Critical 9.8A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device.cisco · data center network managerEPSS83%2 exploitsPublished Jun 27, 2019
- CVE-2019-12928Critical 9.8The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remote attacker to achieve code execution, denial of service, or information disclosure by sending a crafted QMP command to the listening server.qemu · qemuEPSS23%1 exploitPublished Jun 24, 2019
- CVE-2019-2729Critical 9.8Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server.oracle · weblogic serverEPSS89%2 exploitsPublished Jun 19, 2019
- CVE-2019-12780Critical 9.8The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the SmartDevURL argument to the SetSmartDevInfo action.belkin · crock-pot smart slow cooker with wemo firmwareEPSS71%2 exploitsPublished Jun 10, 2019
- CVE-2019-10123Critical 9.8SQL Injection in Advanced InfoData Systems (AIS) ESEL-Server 67 (which is the backend for the AIS logistics mobile app) allows an anonymous attacker to execute arbitrary code in the context of the user of the MSSQL database.ais · logistic softwareEPSS66%3 exploitsPublished May 31, 2019
- CVE-2013-7285Critical 9.8Command Injection in Xstreamxstream · xstreamEPSS84%1 exploitPublished May 29, 2019
- CVE-2019-12314Critical 9.8Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH_INFO, as demonstrated by a cgi-bin/Maconomy/MaconomyWS.macx1.W_MCS/etc/passwd URI.deltek · maconomyEPSS84%3 exploitsPublished May 24, 2019
- CVE-2019-6814Critical 9.8A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 which could cause impact to confidentiality, integrity, and availability when a remote attacker crafts a malicious request to the encoder webUI.schneider-electric · net5500 firmwareEPSS37%2 exploitsPublished May 22, 2019
- CVE-2019-11231Critical 9.8insufficient input sanitation in the theme-edit.php file allows upload of files with arbitrary content (PHP code, for example).get-simple · getsimple cmsEPSS72%3 exploitsPublished May 22, 2019
- CVE-2019-4279Critical 9.8IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources.ibm · websphere application serverEPSS80%2 exploitsPublished May 17, 2019
- CVE-2019-1821Critical 9.8A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system.cisco · prime infrastructureEPSS98%3 exploitsPublished May 15, 2019
- CVE-2019-8387Critical 9.8MASTER IPCAMERA01 3.3.4.2103 devices allow Remote Command Execution, related to the thttpd component.barni · master ip camera01 firmwareEPSS56%3 exploitsPublished May 8, 2019
- CVE-2019-5434Critical 9.8An attacker could send a specifically crafted payload to the XML-RPC invocation script and trigger the unserialize() call on the "what" parameter in the "openads.spc" RPC method.revive-sas · revive adserverEPSS57%1 exploitPublished May 6, 2019
- CVE-2017-18371Critical 9.8The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username supervisor and password zyad1234.zyxel · p660hn-t1a v1 firmwareEPSS23%1 exploitPublished May 2, 2019
- CVE-2017-18369Critical 9.8The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user.billion · 5200w-t firmwareEPSS68%1 exploitPublished May 2, 2019
- CVE-2019-7214Critical 9.8SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data.smartertools · smartermailEPSS85%2 exploitsPublished Apr 24, 2019
- CVE-2019-7304Critical 9.8Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root.canonical · snapdEPSS61%2 exploitsPublished Apr 23, 2019
- CVE-2019-9733Critical 9.8By default, the access-admin account is used to reset the password of the admin account in case an administrator gets locked out from the Artifactory console.jfrog · artifactoryEPSS54%1 exploitPublished Apr 11, 2019
- CVE-2019-10692Critical 9.8In the wp-google-maps plugin before 7.11.18 for WordPress, includes/class.rest-api.php in the REST API does not sanitize field names before a SELECT statement.codecabin · wp go mapsEPSS77%1 exploitPublished Apr 2, 2019
- CVE-2017-18365Critical 9.8The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated remote attackers to execute arbitrary code.github · githubEPSS21%1 exploitPublished Mar 28, 2019
- CVE-2019-6441Critical 9.8An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices.coship · rt3050 firmwareEPSS54%4 exploitsPublished Mar 21, 2019
- CVE-2018-20526Critical 9.8Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php.roxyfileman · roxy filemanEPSS73%1 exploitPublished Mar 21, 2019
- CVE-2018-19524Critical 9.8An issue was discovered on Shenzhen Skyworth DT741 Converged Intelligent Terminal (G/EPON+IPTV) SDOTBGN1, DT721-cb SDOTBGN1, and DT741-cb SDOTBGN1 devices.skyworthdigital · dt721-cb firmwareEPSS51%3 exploitsPublished Mar 21, 2019
- CVE-2018-19276Critical 9.8OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body.openmrs · openmrsEPSS99%5 exploitsPublished Mar 21, 2019
- CVE-2019-9760Critical 9.8FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-controlled machine that sends crafted responses.ftpgetter · ftpgetterEPSS53%4 exploitsPublished Mar 13, 2019
- CVE-2019-5420Critical 9.8Use of Insufficiently Random Values in Railties Allows Remote Code Executionrubyonrails · railsEPSS89%2 exploitsPublished Mar 13, 2019
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-19492 | FreeSWITCH 1.6.10 through 1.10.1 has a default password in event_socket.conf.xml. freeswitch · freeswitch | Critical 9.8 | 29% | 2 exploits | |
| CVE-2011-2921 | ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges. ktsuss project · ktsuss | Critical 9.8 | 83% | 3 exploits | |
| CVE-2019-5029 | An exploitable command injection vulnerability exists in the Config editor of the Exhibitor Web UI versions 1.0.9 to 1.7.1. exhibitor project · exhibitor | Critical 9.8 | 57% | 1 exploit | |
| CVE-2012-0694 | SugarCRM CE <= 6.3.1 contains scripts that use "unserialize()" with user controlled input which allows remote attackers to execute arbitrary PHP code. sugarcrm · sugarcrm | Critical 9.8 | 67% | 3 exploits | |
| CVE-2019-17181 | A remote SEH buffer overflow has been discovered in IntraSrv 1.0 (2007-06-03). intrasrv project · intrasrv | Critical 9.8 | 48% | 1 exploit | |
| CVE-2019-16662 | An attacker can directly execute system commands by sending a GET request to ajaxServerSettingsChk.php because the rootUname parameter is passed to the exec function without filtering, which can lead to command execution. rconfig · rconfig | Critical 9.8 | 98% | 4 exploits | |
| CVE-2019-17662 | ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. cybelsoft · thinvnc | Critical 9.8 | 97% | 2 exploits | |
| CVE-2019-17506 | There are some web interfaces without authentication requirements on D-Link DIR-868L B1-2.03 and DIR-817LW A1-1.04 routers. dlink · dir-817lw a1 firmware | Critical 9.8 | 56% | 1 exploit | |
| CVE-2019-17382 | An attacker can bypass the login page and access the dashboard page, and then create a Dashboard, Report, Screen, or Map without any Username/Password (i.e., anonymously). zabbix · zabbix | Critical 9.1 | 54% | 1 exploit | |
| CVE-2019-16724 | File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler (SEH) based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331. upredsun · file sharing wizard | Critical 9.8 | 72% | 2 exploits | |
| CVE-2019-5485 | Command Injection in gitlabhook gitlabhook project · gitlabhook | Critical 10.0 | 59% | 1 exploit | |
| CVE-2019-1937 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to acquire a valid session token with administrator… cisco · ucs director | Critical 9.8 | 76% | 3 exploits | |
| CVE-2019-1935 | A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to log in to the CLI of an affected system by using the SCP User account (scpuser), which… cisco · ucs director | Critical 9.8 | 83% | 3 exploits | |
| CVE-2019-9851 | LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. libreoffice · libreoffice | Critical 9.8 | 78% | 2 exploits | |
| CVE-2019-12255 | Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). windriver · vxworks | Critical 9.8 | 75% | 2 exploits | |
| CVE-2019-13101 | An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. dlink · dir-600m firmware | Critical 9.8 | 67% | 1 exploit | |
| CVE-2019-12725 | Zeroshell 3.9.0 is prone to a remote command execution vulnerability. zeroshell · zeroshell | Critical 9.8 | 90% | 2 exploits | |
| CVE-2019-9848 | LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc. libreoffice · libreoffice | Critical 9.8 | 29% | 1 exploit | |
| CVE-2019-13372 | /web/Lib/Action/IndexAction.class.php in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 allows remote attackers to execute arbitrary PHP code via a cookie because a cookie's username field allows eval injection, and an empty password bypasses authentication. dlink · central wifimanager | Critical 9.8 | 82% | 2 exploits | |
| CVE-2017-8229 | Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administrative credentials. amcrest · ipm-721s firmware | Critical 9.8 | 74% | 1 exploit | |
| CVE-2018-11686 | The Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code execution via setup.php and change_config.php. flowpaper · flexpaper | Critical 9.8 | 53% | 1 exploit | |
| CVE-2019-7257 | Linear eMerge E3-Series devices allow Unrestricted File Upload. nortekcontrol · linear emerge elite firmware | Critical 10.0 | 70% | 2 exploits | |
| CVE-2019-7276 | Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console. optergy · enterprise | Critical 9.8 | 93% | 2 exploits | |
| CVE-2019-1620 | A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to upload arbitrary files on an affected device. cisco · data center network manager | Critical 9.8 | 84% | 2 exploits | |
| CVE-2019-1619 | A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. cisco · data center network manager | Critical 9.8 | 83% | 2 exploits | |
| CVE-2019-12928 | The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remote attacker to achieve code execution, denial of service, or information disclosure by sending a crafted QMP command to the listening server. qemu · qemu | Critical 9.8 | 23% | 1 exploit | |
| CVE-2019-2729 | Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. oracle · weblogic server | Critical 9.8 | 89% | 2 exploits | |
| CVE-2019-12780 | The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the SmartDevURL argument to the SetSmartDevInfo action. belkin · crock-pot smart slow cooker with wemo firmware | Critical 9.8 | 71% | 2 exploits | |
| CVE-2019-10123 | SQL Injection in Advanced InfoData Systems (AIS) ESEL-Server 67 (which is the backend for the AIS logistics mobile app) allows an anonymous attacker to execute arbitrary code in the context of the user of the MSSQL database. ais · logistic software | Critical 9.8 | 66% | 3 exploits | |
| CVE-2013-7285 | Command Injection in Xstream xstream · xstream | Critical 9.8 | 84% | 1 exploit | |
| CVE-2019-12314 | Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH_INFO, as demonstrated by a cgi-bin/Maconomy/MaconomyWS.macx1.W_MCS/etc/passwd URI. deltek · maconomy | Critical 9.8 | 84% | 3 exploits | |
| CVE-2019-6814 | A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 which could cause impact to confidentiality, integrity, and availability when a remote attacker crafts a malicious request to the encoder webUI. schneider-electric · net5500 firmware | Critical 9.8 | 37% | 2 exploits | |
| CVE-2019-11231 | insufficient input sanitation in the theme-edit.php file allows upload of files with arbitrary content (PHP code, for example). get-simple · getsimple cms | Critical 9.8 | 72% | 3 exploits | |
| CVE-2019-4279 | IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources. ibm · websphere application server | Critical 9.8 | 80% | 2 exploits | |
| CVE-2019-1821 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. cisco · prime infrastructure | Critical 9.8 | 98% | 3 exploits | |
| CVE-2019-8387 | MASTER IPCAMERA01 3.3.4.2103 devices allow Remote Command Execution, related to the thttpd component. barni · master ip camera01 firmware | Critical 9.8 | 56% | 3 exploits | |
| CVE-2019-5434 | An attacker could send a specifically crafted payload to the XML-RPC invocation script and trigger the unserialize() call on the "what" parameter in the "openads.spc" RPC method. revive-sas · revive adserver | Critical 9.8 | 57% | 1 exploit | |
| CVE-2017-18371 | The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username supervisor and password zyad1234. zyxel · p660hn-t1a v1 firmware | Critical 9.8 | 23% | 1 exploit | |
| CVE-2017-18369 | The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. billion · 5200w-t firmware | Critical 9.8 | 68% | 1 exploit | |
| CVE-2019-7214 | SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. smartertools · smartermail | Critical 9.8 | 85% | 2 exploits | |
| CVE-2019-7304 | Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root. canonical · snapd | Critical 9.8 | 61% | 2 exploits | |
| CVE-2019-9733 | By default, the access-admin account is used to reset the password of the admin account in case an administrator gets locked out from the Artifactory console. jfrog · artifactory | Critical 9.8 | 54% | 1 exploit | |
| CVE-2019-10692 | In the wp-google-maps plugin before 7.11.18 for WordPress, includes/class.rest-api.php in the REST API does not sanitize field names before a SELECT statement. codecabin · wp go maps | Critical 9.8 | 77% | 1 exploit | |
| CVE-2017-18365 | The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated remote attackers to execute arbitrary code. github · github | Critical 9.8 | 21% | 1 exploit | |
| CVE-2019-6441 | An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices. coship · rt3050 firmware | Critical 9.8 | 54% | 4 exploits | |
| CVE-2018-20526 | Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php. roxyfileman · roxy fileman | Critical 9.8 | 73% | 1 exploit | |
| CVE-2018-19524 | An issue was discovered on Shenzhen Skyworth DT741 Converged Intelligent Terminal (G/EPON+IPTV) SDOTBGN1, DT721-cb SDOTBGN1, and DT741-cb SDOTBGN1 devices. skyworthdigital · dt721-cb firmware | Critical 9.8 | 51% | 3 exploits | |
| CVE-2018-19276 | OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body. openmrs · openmrs | Critical 9.8 | 99% | 5 exploits | |
| CVE-2019-9760 | FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-controlled machine that sends crafted responses. ftpgetter · ftpgetter | Critical 9.8 | 53% | 4 exploits | |
| CVE-2019-5420 | Use of Insufficiently Random Values in Railties Allows Remote Code Execution rubyonrails · rails | Critical 9.8 | 89% | 2 exploits |
Showing 351–400 of 1,192
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.