Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
890 vulnerabilities · highest exploit probability first
- CVE-2015-1503High 7.5Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote attackers to read arbitrary files via a (1) ..icewarp · mail serverEPSS57%3 exploitsPublished May 8, 2018
- CVE-2018-10583High 7.5An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content…apache · openofficeEPSS78%2 exploitsPublished May 1, 2018
- CVE-2018-1418High 8.8IBM Security QRadar SIEM 7.2 and 7.3 could allow a user to bypass authentication which could lead to code execution.ibm · qradar security information and event managerEPSS51%3 exploitsPublished Apr 26, 2018
- CVE-2018-8736High 8.8A privilege escalation vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to leverage an RCE vulnerability escalating to root.nagios · nagios xiEPSS46%6 exploitsPublished Apr 17, 2018
- CVE-2018-8735High 8.8Remote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary commands on the target system, aka OS command injection.nagios · nagios xiEPSS64%6 exploitsPublished Apr 17, 2018
- CVE-2018-0986High 8.8A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." This affects Windows Defender,…microsoft · exchange serverEPSS63%2 exploitsPublished Apr 4, 2018
- CVE-2018-9205High 7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Avatar Uploaderdrupal · avatar uploaderEPSS55%2 exploitsPublished Apr 4, 2018
- CVE-2018-4162High 8.8iOS before 11.3 is affected.apple · icloudEPSS38%1 exploitPublished Apr 3, 2018
- CVE-2017-17215High 8.8Huawei HG532 with some customized versions has a remote code execution vulnerability.huawei · hg532 firmwareEPSS78%1 exploitPublished Mar 20, 2018
- CVE-2018-0935High 7.5Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles…microsoft · internet explorerEPSS56%2 exploitsPublished Mar 14, 2018
- CVE-2018-0886High 7.0The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709 allows…microsoft · windows 10EPSS82%3 exploitsPublished Mar 14, 2018
- CVE-2018-1000094High 7.2CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server.cmsmadesimple · cms made simpleEPSS39%3 exploitsPublished Mar 12, 2018
- CVE-2018-8065High 7.5Improper Input Validation in web server in Flexense SyncBreeze Enterprise 10.6.24flexense · syncbreezeEPSS76%1 exploitPublished Mar 12, 2018
- CVE-2018-1000115High 7.5Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UDP support of the memcached server that can result in denial of service via network flood (traffic amplification of 1:50,000 has been…memcached · memcachedEPSS88%4 exploitsPublished Mar 5, 2018
- CVE-2018-7284High 7.5A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2.digium · asteriskEPSS66%2 exploitsPublished Feb 21, 2018
- CVE-2017-14535High 8.8trixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php.netfortris · trixboxEPSS50%3 exploitsPublished Feb 16, 2018
- CVE-2018-0840High 7.5Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to…microsoft · edgeEPSS53%2 exploitsPublished Feb 14, 2018
- CVE-2018-1000049High 7.5Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner API.nanopool · claymore dual minerEPSS77%3 exploitsPublished Feb 9, 2018
- CVE-2018-6389High 7.5In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registered .js files (from wp-includes/script-loader.php) to construct a series of requests to load every file many times.wordpress · wordpressEPSS73%3 exploitsPublished Feb 6, 2018
- CVE-2018-1000006High 8.8Remote Code Execution in electronatom · electronEPSS84%2 exploitsPublished Jan 23, 2018
- CVE-2017-18048High 8.8Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php (lowercase) is blocked but .PHP (uppercase) is not.monstra · monstraEPSS63%2 exploitsPublished Jan 23, 2018
- CVE-2016-10709High 8.8pfSense before 2.3 allows remote authenticated users to execute arbitrary OS commands via a '|' character in the status_rrd_graph_img.php graph parameter, related to _rrd_graph_img.php.pfsense · pfsenseEPSS34%3 exploitsPublished Jan 22, 2018
- CVE-2017-12636High 7.2couchdb - security updateapache · couchdbEPSS91%3 exploitsPublished Jan 21, 2018
- CVE-2017-16666High 8.8Xplico before 1.2.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the name of an uploaded PCAP file.xplico · xplicoEPSS81%4 exploitsPublished Jan 5, 2018
- CVE-2018-0777High 7.5Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS78%2 exploitsPublished Jan 4, 2018
- CVE-2018-0776High 7.5Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS78%2 exploitsPublished Jan 4, 2018
- CVE-2018-0775High 7.5Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS68%2 exploitsPublished Jan 4, 2018
- CVE-2018-0774High 7.5Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS68%2 exploitsPublished Jan 4, 2018
- CVE-2018-0770High 7.5Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS78%2 exploitsPublished Jan 4, 2018
- CVE-2018-0769High 7.5Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS79%2 exploitsPublished Jan 4, 2018
- CVE-2018-0758High 7.5Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS81%2 exploitsPublished Jan 4, 2018
- CVE-2017-1000479High 8.8pfSense versions 2.4.1 and lower are vulnerable to clickjacking attacks in the CSRF error page resulting in privileged execution of arbitrary code, because the error detection occurs before an X-Frame-Options header is set.netgate · pfsenseEPSS32%1 exploitPublished Jan 3, 2018
- CVE-2018-3810High 7.2Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to insert arbitrary JavaScript or HTML code (via the sgcgoogleanalytic parameter) that runs on all pages served by WordPress.oturia · smart google code inserterEPSS91%2 exploitsPublished Jan 1, 2018
- CVE-2017-16995High 7.8The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension.linux · linux kernelEPSS30%4 exploitsPublished Dec 27, 2017
- CVE-2017-17692High 7.5Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that redirects to a child tab and rewrites the innerHTML property.samsung · internet browserEPSS79%4 exploitsPublished Dec 21, 2017
- CVE-2017-5255High 8.8In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console allows any authenticated user (including the otherwise low-privilege readonly user) to inject shell meta-characters as part of a…cambiumnetworks · epmp 1000 firmwareEPSS74%3 exploitsPublished Dec 20, 2017
- CVE-2017-17405High 8.8ruby1.9.1 - security updateruby-lang · rubyEPSS74%2 exploitsPublished Dec 15, 2017
- CVE-2017-11918High 7.5ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…microsoft · chakracoreEPSS63%2 exploitsPublished Dec 12, 2017
- CVE-2017-11907High 7.5Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to…microsoft · internet explorerEPSS65%2 exploitsPublished Dec 12, 2017
- CVE-2017-11890High 7.5Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user, due to how…microsoft · internet explorerEPSS50%2 exploitsPublished Dec 12, 2017
- CVE-2017-13156High 7.8An elevation of privilege vulnerability in the Android system (art).google · androidEPSS20%2 exploitsPublished Dec 6, 2017
- CVE-2017-15889High 8.8Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authenticated users to execute arbitrary commands via disk field.synology · diskstation managerEPSS74%2 exploitsPublished Dec 4, 2017
- CVE-2017-17090High 7.5If the chan_skinny (aka SCCP protocol) channel driver is flooded with certain requests, it can cause the asterisk process to use excessive amounts of virtual memory, eventually causing asterisk to stop processing requests of any kind.digium · asteriskEPSS82%1 exploitPublished Dec 2, 2017
- CVE-2017-13872High 8.1macOS High Sierra before Security Update 2017-001 is affected.apple · mac os xEPSS37%4 exploitsPublished Nov 29, 2017
- CVE-2017-16894High 7.5In Laravel framework through 5.5.21, remote attackers can obtain sensitive information (such as externally usable passwords) via a direct request for the /.env URI.laravel · laravelEPSS87%2 exploitsPublished Nov 20, 2017
- CVE-2017-11873High 7.5ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory…microsoft · chakracoreEPSS70%2 exploitsPublished Nov 15, 2017
- CVE-2017-11861High 7.5Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…microsoft · edgeEPSS64%2 exploitsPublished Nov 15, 2017
- CVE-2017-11841High 7.5ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine…microsoft · chakracoreEPSS60%1 exploitPublished Nov 15, 2017
- CVE-2017-11840High 7.5ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine…microsoft · chakracoreEPSS60%1 exploitPublished Nov 15, 2017
- CVE-2017-11839High 7.5Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to take control of an affected system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…microsoft · edgeEPSS62%1 exploitPublished Nov 15, 2017
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2015-1503 | Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote attackers to read arbitrary files via a (1) .. icewarp · mail server | High 7.5 | 57% | 3 exploits | |
| CVE-2018-10583 | An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content… apache · openoffice | High 7.5 | 78% | 2 exploits | |
| CVE-2018-1418 | IBM Security QRadar SIEM 7.2 and 7.3 could allow a user to bypass authentication which could lead to code execution. ibm · qradar security information and event manager | High 8.8 | 51% | 3 exploits | |
| CVE-2018-8736 | A privilege escalation vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to leverage an RCE vulnerability escalating to root. nagios · nagios xi | High 8.8 | 46% | 6 exploits | |
| CVE-2018-8735 | Remote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary commands on the target system, aka OS command injection. nagios · nagios xi | High 8.8 | 64% | 6 exploits | |
| CVE-2018-0986 | A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." This affects Windows Defender,… microsoft · exchange server | High 8.8 | 63% | 2 exploits | |
| CVE-2018-9205 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Avatar Uploader drupal · avatar uploader | High 7.5 | 55% | 2 exploits | |
| CVE-2018-4162 | iOS before 11.3 is affected. apple · icloud | High 8.8 | 38% | 1 exploit | |
| CVE-2017-17215 | Huawei HG532 with some customized versions has a remote code execution vulnerability. huawei · hg532 firmware | High 8.8 | 78% | 1 exploit | |
| CVE-2018-0935 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles… microsoft · internet explorer | High 7.5 | 56% | 2 exploits | |
| CVE-2018-0886 | The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709 allows… microsoft · windows 10 | High 7.0 | 82% | 3 exploits | |
| CVE-2018-1000094 | CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server. cmsmadesimple · cms made simple | High 7.2 | 39% | 3 exploits | |
| CVE-2018-8065 | Improper Input Validation in web server in Flexense SyncBreeze Enterprise 10.6.24 flexense · syncbreeze | High 7.5 | 76% | 1 exploit | |
| CVE-2018-1000115 | Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UDP support of the memcached server that can result in denial of service via network flood (traffic amplification of 1:50,000 has been… memcached · memcached | High 7.5 | 88% | 4 exploits | |
| CVE-2018-7284 | A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2. digium · asterisk | High 7.5 | 66% | 2 exploits | |
| CVE-2017-14535 | trixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php. netfortris · trixbox | High 8.8 | 50% | 3 exploits | |
| CVE-2018-0840 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to… microsoft · edge | High 7.5 | 53% | 2 exploits | |
| CVE-2018-1000049 | Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner API. nanopool · claymore dual miner | High 7.5 | 77% | 3 exploits | |
| CVE-2018-6389 | In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registered .js files (from wp-includes/script-loader.php) to construct a series of requests to load every file many times. wordpress · wordpress | High 7.5 | 73% | 3 exploits | |
| CVE-2018-1000006 | Remote Code Execution in electron atom · electron | High 8.8 | 84% | 2 exploits | |
| CVE-2017-18048 | Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php (lowercase) is blocked but .PHP (uppercase) is not. monstra · monstra | High 8.8 | 63% | 2 exploits | |
| CVE-2016-10709 | pfSense before 2.3 allows remote authenticated users to execute arbitrary OS commands via a '|' character in the status_rrd_graph_img.php graph parameter, related to _rrd_graph_img.php. pfsense · pfsense | High 8.8 | 34% | 3 exploits | |
| CVE-2017-12636 | couchdb - security update apache · couchdb | High 7.2 | 91% | 3 exploits | |
| CVE-2017-16666 | Xplico before 1.2.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the name of an uploaded PCAP file. xplico · xplico | High 8.8 | 81% | 4 exploits | |
| CVE-2018-0777 | Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 78% | 2 exploits | |
| CVE-2018-0776 | Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 78% | 2 exploits | |
| CVE-2018-0775 | Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 68% | 2 exploits | |
| CVE-2018-0774 | Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 68% | 2 exploits | |
| CVE-2018-0770 | Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 78% | 2 exploits | |
| CVE-2018-0769 | Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 79% | 2 exploits | |
| CVE-2018-0758 | Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 81% | 2 exploits | |
| CVE-2017-1000479 | pfSense versions 2.4.1 and lower are vulnerable to clickjacking attacks in the CSRF error page resulting in privileged execution of arbitrary code, because the error detection occurs before an X-Frame-Options header is set. netgate · pfsense | High 8.8 | 32% | 1 exploit | |
| CVE-2018-3810 | Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to insert arbitrary JavaScript or HTML code (via the sgcgoogleanalytic parameter) that runs on all pages served by WordPress. oturia · smart google code inserter | High 7.2 | 91% | 2 exploits | |
| CVE-2017-16995 | The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension. linux · linux kernel | High 7.8 | 30% | 4 exploits | |
| CVE-2017-17692 | Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that redirects to a child tab and rewrites the innerHTML property. samsung · internet browser | High 7.5 | 79% | 4 exploits | |
| CVE-2017-5255 | In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console allows any authenticated user (including the otherwise low-privilege readonly user) to inject shell meta-characters as part of a… cambiumnetworks · epmp 1000 firmware | High 8.8 | 74% | 3 exploits | |
| CVE-2017-17405 | ruby1.9.1 - security update ruby-lang · ruby | High 8.8 | 74% | 2 exploits | |
| CVE-2017-11918 | ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption… microsoft · chakracore | High 7.5 | 63% | 2 exploits | |
| CVE-2017-11907 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to… microsoft · internet explorer | High 7.5 | 65% | 2 exploits | |
| CVE-2017-11890 | Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user, due to how… microsoft · internet explorer | High 7.5 | 50% | 2 exploits | |
| CVE-2017-13156 | An elevation of privilege vulnerability in the Android system (art). google · android | High 7.8 | 20% | 2 exploits | |
| CVE-2017-15889 | Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authenticated users to execute arbitrary commands via disk field. synology · diskstation manager | High 8.8 | 74% | 2 exploits | |
| CVE-2017-17090 | If the chan_skinny (aka SCCP protocol) channel driver is flooded with certain requests, it can cause the asterisk process to use excessive amounts of virtual memory, eventually causing asterisk to stop processing requests of any kind. digium · asterisk | High 7.5 | 82% | 1 exploit | |
| CVE-2017-13872 | macOS High Sierra before Security Update 2017-001 is affected. apple · mac os x | High 8.1 | 37% | 4 exploits | |
| CVE-2017-16894 | In Laravel framework through 5.5.21, remote attackers can obtain sensitive information (such as externally usable passwords) via a direct request for the /.env URI. laravel · laravel | High 7.5 | 87% | 2 exploits | |
| CVE-2017-11873 | ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory… microsoft · chakracore | High 7.5 | 70% | 2 exploits | |
| CVE-2017-11861 | Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption… microsoft · edge | High 7.5 | 64% | 2 exploits | |
| CVE-2017-11841 | ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine… microsoft · chakracore | High 7.5 | 60% | 1 exploit | |
| CVE-2017-11840 | ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine… microsoft · chakracore | High 7.5 | 60% | 1 exploit | |
| CVE-2017-11839 | Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to take control of an affected system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption… microsoft · edge | High 7.5 | 62% | 1 exploit |
Showing 351–400 of 890
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.