Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
1,192 vulnerabilities · highest exploit probability first
- CVE-2019-1663Critical 9.8A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected…cisco · rv110w firmwareEPSS96%5 exploitsPublished Feb 28, 2019
- CVE-2018-17431Critical 9.8Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL.comodo · unified threat management firewallEPSS84%3 exploitsPublished Jan 30, 2019
- CVE-2019-6443Critical 9.1Because of a bug in ctl_getitem, there is a stack-based buffer over-read in read_sysvars in ntp_control.c in ntpd.ntpsec · ntpsecEPSS67%2 exploitsPublished Jan 16, 2019
- CVE-2018-16167Critical 9.8LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.jpcert · logontracerEPSS75%1 exploitPublished Jan 9, 2019
- CVE-2018-15708Critical 9.8Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request.nagios · nagios xiEPSS89%4 exploitsPublished Nov 14, 2018
- CVE-2018-15439Critical 9.8A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device.cisco · sf200-24 firmwareEPSS50%1 exploitPublished Nov 8, 2018
- CVE-2018-9206Critical 9.8Unrestricted Upload of File with Dangerous Type in blueimp-file-uploadjquery file upload project · jquery file uploadEPSS97%4 exploitsPublished Oct 22, 2018
- CVE-2017-11467Critical 9.8OrientDB vulnerable to Improper Privilage Management leading to arbitrary command injectionorientdb · orientdbEPSS73%2 exploitsPublished Oct 18, 2018
- CVE-2017-12629Critical 9.8Remote code execution occurs in Apache Solrapache · solrEPSS92%2 exploitsPublished Oct 17, 2018
- CVE-2018-3245Critical 9.8Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server.oracle · weblogic serverEPSS94%2 exploitsPublished Oct 16, 2018
- CVE-2017-12611Critical 9.8Apache Struts 2.0.1 uses an unintentional expression in a Freemarker tag instead of string literalapache · strutsEPSS87%1 exploitPublished Oct 16, 2018
- CVE-2018-17532Critical 9.8Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and hotspotlogin.cgi due to insufficient user input sanitization.teltonika · rut900 firmwareEPSS71%2 exploitsPublished Oct 15, 2018
- CVE-2012-6710Critical 9.8ext_find_user in eXtplorer through 2.1.2 allows remote attackers to bypass authentication via a password[]= (aka an empty array) in an action=login request to index.php.extplorer · extplorerEPSS25%1 exploitPublished Oct 7, 2018
- CVE-2018-17456Critical 9.8Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing of a recursive "git clone" of a superproject if a .gitmodules file has a URL field beginning with a…git-scm · gitEPSS97%5 exploitsPublished Oct 6, 2018
- CVE-2018-15379Critical 9.8A vulnerability in which the HTTP web server for Cisco Prime Infrastructure (PI) has unrestricted directory permissions could allow an unauthenticated, remote attacker to upload an arbitrary file.cisco · prime infrastructureEPSS86%3 exploitsPublished Oct 5, 2018
- CVE-2018-17552Critical 9.8SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigate-user cookie.naviwebs · navigate cmsEPSS84%4 exploitsPublished Oct 3, 2018
- CVE-2018-16283Critical 9.8The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter.wechat brodcast project · wechat brodcastEPSS63%2 exploitsPublished Sep 24, 2018
- CVE-2018-17173Critical 9.8LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail.lg · supersign cmsEPSS56%2 exploitsPublished Sep 21, 2018
- CVE-2018-17254Critical 9.8The JCK Editor component 6.4.4 for Joomla!arkextensions · jck editorEPSS83%4 exploitsPublished Sep 20, 2018
- CVE-2018-17153Critical 9.8It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability.western digital · my cloud dl2100EPSS87%1 exploitPublished Sep 18, 2018
- CVE-2018-16836Critical 9.8Rubedo through 3.4.0 contains a Directory Traversal vulnerability in the theme component, allowing unauthenticated attackers to read and execute arbitrary files outside of the service root path, as demonstrated by a /theme/default/img/%2e%2e/..//etc/passwd URI.rubedo project · rubedoEPSS61%3 exploitsPublished Sep 11, 2018
- CVE-2018-16763Critical 9.8FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter.thedaylightstudio · fuel cmsEPSS83%6 exploitsPublished Sep 9, 2018
- CVE-2015-9266Critical 9.8The web management interface of Ubiquiti airMAX, airFiber, airGateway and EdgeSwitch XP (formerly TOUGHSwitch) allows an unauthenticated attacker to upload and write arbitrary files using directory traversal techniques.ubnt · airos 4 xs2EPSS74%4 exploitsPublished Sep 5, 2018
- CVE-2018-17207Critical 9.8Duplicator <= 1.2.41 - Sensitive Information Disclosure leading to Remote Code Executionawesomemotive · duplicatorEPSS60%1 exploitPublished Aug 28, 2018
- CVE-2018-14417Critical 9.8A command injection vulnerability was found in the web administration console in SoftNAS Cloud before 4.0.3.softnas · cloudEPSS89%2 exploitsPublished Aug 3, 2018
- CVE-2018-14728Critical 9.8upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter.tecrail · responsive filemanagerEPSS76%3 exploitsPublished Aug 3, 2018
- CVE-2017-5941Critical 9.8Code Execution through IIFE in node-serializenode-serialize project · node-serializeEPSS61%3 exploitsPublished Jul 18, 2018
- CVE-2016-6563Critical 9.8Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers.dlink · dir-818l\(w\) firmwareEPSS80%3 exploitsPublished Jul 13, 2018
- CVE-2018-12464Critical 9.8A SQL injection vulnerability in the web administration and quarantine components of Micro Focus Secure Messaging Gateway allows an unauthenticated remote attacker to execute arbitrary SQL statements against the database.microfocus · secure messaging gatewayEPSS81%2 exploitsPublished Jun 29, 2018
- CVE-2018-10594Critical 9.8Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHSIM_5x0, AHSIM_5x1) utilize a fixed-length stack buffer where an unverified length value can be read from the network…deltaww · commgrEPSS69%5 exploitsPublished Jun 26, 2018
- CVE-2018-10662Critical 9.8There is an Exposed Insecure Interface.axis · a1001 firmwareEPSS80%3 exploitsPublished Jun 26, 2018
- CVE-2018-10661Critical 9.8There is a bypass of access control.axis · a1001 firmwareEPSS87%3 exploitsPublished Jun 26, 2018
- CVE-2018-10660Critical 9.8There is Shell Command Injection.axis · a1001 firmwareEPSS82%3 exploitsPublished Jun 26, 2018
- CVE-2018-1000533Critical 9.8klaussilveira GitList version <= 0.6 contains a Passing incorrectly sanitized input to system function vulnerability in searchTree function that can result in Execute any code as PHP user.gitlist · gitlistEPSS73%1 exploitPublished Jun 26, 2018
- CVE-2018-12634Critical 9.8CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/system/info.html URI.circontrol · circarlife scadaEPSS56%2 exploitsPublished Jun 21, 2018
- CVE-2018-11714Critical 9.8An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n devices.tp-link · tl-wr840n firmwareEPSS67%1 exploitPublished Jun 4, 2018
- CVE-2018-9059Critical 9.8Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious login request to forum.ghp.sharing-file · easy file sharing web serverEPSS77%3 exploitsPublished Apr 20, 2018
- CVE-2018-8734Critical 9.8SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary SQL commands via the selInfoKey1 parameter.nagios · nagios xiEPSS54%6 exploitsPublished Apr 17, 2018
- CVE-2018-8733Critical 9.8Authentication bypass vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an unauthenticated attacker to make configuration changes and leverage an authenticated SQL injection vulnerability.nagios · nagios xiEPSS27%6 exploitsPublished Apr 17, 2018
- CVE-2018-9995Critical 9.8TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a…tbkvision · tbk-dvr4104 firmwareEPSS82%2 exploitsPublished Apr 10, 2018
- CVE-2018-1217Critical 9.8Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection Appliance 2.0 and 2.1, is affected by a missing access control check vulnerability which could potentially allow a remote unauthenticated attacker to read or…dell · emc avamarEPSS51%2 exploitsPublished Apr 9, 2018
- CVE-2018-9161Critical 9.8Prisma Industriale Checkweigher PrismaWEB 1.21 allows remote attackers to discover the hardcoded prisma password for the prismaweb account by reading user/scripts/login_par.js.prismaindustriale · checkweigher prismawebEPSS57%1 exploitPublished Mar 31, 2018
- CVE-2018-1207Critical 9.8Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code.dell · emc idrac7EPSS90%1 exploitPublished Mar 23, 2018
- CVE-2018-7422Critical 9.8A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the ajax_path parameter to editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php, aka absolute path traversal.siteeditor · site editorEPSS62%2 exploitsPublished Mar 19, 2018
- CVE-2018-7756Critical 9.8RunExeFile.exe in the installer for DEWESoft X3 SP1 (64-bit) devices does not require authentication for sessions on TCP port 1999, which allows remote attackers to execute arbitrary code or access internal commands, as demonstrated by a RUN command that launches a .EXE file…dewesoft · dewesoftEPSS61%2 exploitsPublished Mar 14, 2018
- CVE-2018-6329Critical 9.8It was discovered that the Unitrends Backup (UB) before 10.1.0 libbpext.so authentication could be bypassed with a SQL injection, allowing a remote attacker to place a privilege escalation exploit on the target system and subsequently execute arbitrary commands.unitrends · backupEPSS61%5 exploitsPublished Mar 14, 2018
- CVE-2018-6328Critical 9.8It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, which then could allow an unauthenticated user to inject arbitrary commands into its /api/hosts parameters using backquotes.kaseya · unitrends backupEPSS64%5 exploitsPublished Mar 14, 2018
- CVE-2018-7890Critical 9.8A remote code execution issue was discovered in Zoho ManageEngine Applications Manager before 13.6 (build 13640).zohocorp · manageengine applications managerEPSS79%4 exploitsPublished Mar 8, 2018
- CVE-2018-7739Critical 9.8antsle antman before 0.9.1a allows remote attackers to bypass authentication via invalid characters in the username and password parameters, as demonstrated by a username=>&password=%0a string to the /login URI.antsle · antmanEPSS53%4 exploitsPublished Mar 6, 2018
- CVE-2018-7584Critical 9.8In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the php_stream_url_wrap_http_ex function in ext/standard/http_fopen_wrapper.c.php · phpEPSS87%2 exploitsPublished Mar 1, 2018
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-1663 | A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected… cisco · rv110w firmware | Critical 9.8 | 96% | 5 exploits | |
| CVE-2018-17431 | Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL. comodo · unified threat management firewall | Critical 9.8 | 84% | 3 exploits | |
| CVE-2019-6443 | Because of a bug in ctl_getitem, there is a stack-based buffer over-read in read_sysvars in ntp_control.c in ntpd. ntpsec · ntpsec | Critical 9.1 | 67% | 2 exploits | |
| CVE-2018-16167 | LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors. jpcert · logontracer | Critical 9.8 | 75% | 1 exploit | |
| CVE-2018-15708 | Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request. nagios · nagios xi | Critical 9.8 | 89% | 4 exploits | |
| CVE-2018-15439 | A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device. cisco · sf200-24 firmware | Critical 9.8 | 50% | 1 exploit | |
| CVE-2018-9206 | Unrestricted Upload of File with Dangerous Type in blueimp-file-upload jquery file upload project · jquery file upload | Critical 9.8 | 97% | 4 exploits | |
| CVE-2017-11467 | OrientDB vulnerable to Improper Privilage Management leading to arbitrary command injection orientdb · orientdb | Critical 9.8 | 73% | 2 exploits | |
| CVE-2017-12629 | Remote code execution occurs in Apache Solr apache · solr | Critical 9.8 | 92% | 2 exploits | |
| CVE-2018-3245 | Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. oracle · weblogic server | Critical 9.8 | 94% | 2 exploits | |
| CVE-2017-12611 | Apache Struts 2.0.1 uses an unintentional expression in a Freemarker tag instead of string literal apache · struts | Critical 9.8 | 87% | 1 exploit | |
| CVE-2018-17532 | Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and hotspotlogin.cgi due to insufficient user input sanitization. teltonika · rut900 firmware | Critical 9.8 | 71% | 2 exploits | |
| CVE-2012-6710 | ext_find_user in eXtplorer through 2.1.2 allows remote attackers to bypass authentication via a password[]= (aka an empty array) in an action=login request to index.php. extplorer · extplorer | Critical 9.8 | 25% | 1 exploit | |
| CVE-2018-17456 | Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing of a recursive "git clone" of a superproject if a .gitmodules file has a URL field beginning with a… git-scm · git | Critical 9.8 | 97% | 5 exploits | |
| CVE-2018-15379 | A vulnerability in which the HTTP web server for Cisco Prime Infrastructure (PI) has unrestricted directory permissions could allow an unauthenticated, remote attacker to upload an arbitrary file. cisco · prime infrastructure | Critical 9.8 | 86% | 3 exploits | |
| CVE-2018-17552 | SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigate-user cookie. naviwebs · navigate cms | Critical 9.8 | 84% | 4 exploits | |
| CVE-2018-16283 | The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter. wechat brodcast project · wechat brodcast | Critical 9.8 | 63% | 2 exploits | |
| CVE-2018-17173 | LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail. lg · supersign cms | Critical 9.8 | 56% | 2 exploits | |
| CVE-2018-17254 | The JCK Editor component 6.4.4 for Joomla! arkextensions · jck editor | Critical 9.8 | 83% | 4 exploits | |
| CVE-2018-17153 | It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. western digital · my cloud dl2100 | Critical 9.8 | 87% | 1 exploit | |
| CVE-2018-16836 | Rubedo through 3.4.0 contains a Directory Traversal vulnerability in the theme component, allowing unauthenticated attackers to read and execute arbitrary files outside of the service root path, as demonstrated by a /theme/default/img/%2e%2e/..//etc/passwd URI. rubedo project · rubedo | Critical 9.8 | 61% | 3 exploits | |
| CVE-2018-16763 | FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. thedaylightstudio · fuel cms | Critical 9.8 | 83% | 6 exploits | |
| CVE-2015-9266 | The web management interface of Ubiquiti airMAX, airFiber, airGateway and EdgeSwitch XP (formerly TOUGHSwitch) allows an unauthenticated attacker to upload and write arbitrary files using directory traversal techniques. ubnt · airos 4 xs2 | Critical 9.8 | 74% | 4 exploits | |
| CVE-2018-17207 | Duplicator <= 1.2.41 - Sensitive Information Disclosure leading to Remote Code Execution awesomemotive · duplicator | Critical 9.8 | 60% | 1 exploit | |
| CVE-2018-14417 | A command injection vulnerability was found in the web administration console in SoftNAS Cloud before 4.0.3. softnas · cloud | Critical 9.8 | 89% | 2 exploits | |
| CVE-2018-14728 | upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter. tecrail · responsive filemanager | Critical 9.8 | 76% | 3 exploits | |
| CVE-2017-5941 | Code Execution through IIFE in node-serialize node-serialize project · node-serialize | Critical 9.8 | 61% | 3 exploits | |
| CVE-2016-6563 | Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. dlink · dir-818l\(w\) firmware | Critical 9.8 | 80% | 3 exploits | |
| CVE-2018-12464 | A SQL injection vulnerability in the web administration and quarantine components of Micro Focus Secure Messaging Gateway allows an unauthenticated remote attacker to execute arbitrary SQL statements against the database. microfocus · secure messaging gateway | Critical 9.8 | 81% | 2 exploits | |
| CVE-2018-10594 | Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHSIM_5x0, AHSIM_5x1) utilize a fixed-length stack buffer where an unverified length value can be read from the network… deltaww · commgr | Critical 9.8 | 69% | 5 exploits | |
| CVE-2018-10662 | There is an Exposed Insecure Interface. axis · a1001 firmware | Critical 9.8 | 80% | 3 exploits | |
| CVE-2018-10661 | There is a bypass of access control. axis · a1001 firmware | Critical 9.8 | 87% | 3 exploits | |
| CVE-2018-10660 | There is Shell Command Injection. axis · a1001 firmware | Critical 9.8 | 82% | 3 exploits | |
| CVE-2018-1000533 | klaussilveira GitList version <= 0.6 contains a Passing incorrectly sanitized input to system function vulnerability in searchTree function that can result in Execute any code as PHP user. gitlist · gitlist | Critical 9.8 | 73% | 1 exploit | |
| CVE-2018-12634 | CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/system/info.html URI. circontrol · circarlife scada | Critical 9.8 | 56% | 2 exploits | |
| CVE-2018-11714 | An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n devices. tp-link · tl-wr840n firmware | Critical 9.8 | 67% | 1 exploit | |
| CVE-2018-9059 | Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious login request to forum.ghp. sharing-file · easy file sharing web server | Critical 9.8 | 77% | 3 exploits | |
| CVE-2018-8734 | SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary SQL commands via the selInfoKey1 parameter. nagios · nagios xi | Critical 9.8 | 54% | 6 exploits | |
| CVE-2018-8733 | Authentication bypass vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an unauthenticated attacker to make configuration changes and leverage an authenticated SQL injection vulnerability. nagios · nagios xi | Critical 9.8 | 27% | 6 exploits | |
| CVE-2018-9995 | TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a… tbkvision · tbk-dvr4104 firmware | Critical 9.8 | 82% | 2 exploits | |
| CVE-2018-1217 | Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection Appliance 2.0 and 2.1, is affected by a missing access control check vulnerability which could potentially allow a remote unauthenticated attacker to read or… dell · emc avamar | Critical 9.8 | 51% | 2 exploits | |
| CVE-2018-9161 | Prisma Industriale Checkweigher PrismaWEB 1.21 allows remote attackers to discover the hardcoded prisma password for the prismaweb account by reading user/scripts/login_par.js. prismaindustriale · checkweigher prismaweb | Critical 9.8 | 57% | 1 exploit | |
| CVE-2018-1207 | Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code. dell · emc idrac7 | Critical 9.8 | 90% | 1 exploit | |
| CVE-2018-7422 | A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the ajax_path parameter to editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php, aka absolute path traversal. siteeditor · site editor | Critical 9.8 | 62% | 2 exploits | |
| CVE-2018-7756 | RunExeFile.exe in the installer for DEWESoft X3 SP1 (64-bit) devices does not require authentication for sessions on TCP port 1999, which allows remote attackers to execute arbitrary code or access internal commands, as demonstrated by a RUN command that launches a .EXE file… dewesoft · dewesoft | Critical 9.8 | 61% | 2 exploits | |
| CVE-2018-6329 | It was discovered that the Unitrends Backup (UB) before 10.1.0 libbpext.so authentication could be bypassed with a SQL injection, allowing a remote attacker to place a privilege escalation exploit on the target system and subsequently execute arbitrary commands. unitrends · backup | Critical 9.8 | 61% | 5 exploits | |
| CVE-2018-6328 | It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, which then could allow an unauthenticated user to inject arbitrary commands into its /api/hosts parameters using backquotes. kaseya · unitrends backup | Critical 9.8 | 64% | 5 exploits | |
| CVE-2018-7890 | A remote code execution issue was discovered in Zoho ManageEngine Applications Manager before 13.6 (build 13640). zohocorp · manageengine applications manager | Critical 9.8 | 79% | 4 exploits | |
| CVE-2018-7739 | antsle antman before 0.9.1a allows remote attackers to bypass authentication via invalid characters in the username and password parameters, as demonstrated by a username=>&password=%0a string to the /login URI. antsle · antman | Critical 9.8 | 53% | 4 exploits | |
| CVE-2018-7584 | In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the php_stream_url_wrap_http_ex function in ext/standard/http_fopen_wrapper.c. php · php | Critical 9.8 | 87% | 2 exploits |
Showing 401–450 of 1,192
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.