Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
890 vulnerabilities · highest exploit probability first
- CVE-2017-16806High 7.5The Process function in RemoteTaskServer/WebServer/HttpServer.cs in Ulterius before 1.9.5.0 allows HTTP server directory traversal.ulterius · ulterius serverEPSS91%1 exploitPublished Nov 13, 2017
- CVE-2017-16249High 7.5The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the server to hang until eventually replying (~300 seconds) with an HTTP 500 error.brother · dcp-j132w firmwareEPSS59%3 exploitsPublished Nov 9, 2017
- CVE-2017-16524High 8.8Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_upload.php' allows remote authenticated attackers to upload and execute arbitrary PHP code via a filename with a .php extension, which is then accessed via a…hanwhasecurity · web viewerEPSS30%4 exploitsPublished Nov 6, 2017
- CVE-2017-12243High 7.8A vulnerability in the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to obtain root shell privileges on the device, aka Command…cisco · firepower 4100 next-generation firewall firmwareEPSS77%1 exploitPublished Nov 2, 2017
- CVE-2017-7411High 8.8The vulnerability exists because the User::getRecentElements() method is using the unserialize() function with a preference value that can be arbitrarily manipulated by malicious users through the REST API interface, and this can be exploited to inject arbitrary PHP objects into…enalean · tuleapEPSS67%2 exploitsPublished Oct 30, 2017
- CVE-2013-0156High 7.5actionpack Improper Input Validation vulnerabilityrubyonrails · railsEPSS99%6 exploitsPublished Oct 24, 2017
- CVE-2013-0333High 7.5activesupport in Rails vulnerable to incorrect data conversionrubyonrails · railsEPSS96%2 exploitsPublished Oct 24, 2017
- CVE-2016-2098High 7.3actionpack allows remote code execution via application's unrestricted use of render methodrubyonrails · railsEPSS81%1 exploitPublished Oct 24, 2017
- CVE-2017-13772High 8.8Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arbitrary code via the (1) ping_addr parameter to PingIframeRpm.htm or (2) dnsserver2 parameter to WanStaticIpV6CfgRpm.htm.tp-link · wr940n firmwareEPSS51%2 exploitsPublished Oct 23, 2017
- CVE-2014-9118High 8.8The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddr parameter to zhnping.cmd.dasanzhone · znid 2426a firmwareEPSS53%3 exploitsPublished Oct 17, 2017
- CVE-2017-11811High 7.5ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory…microsoft · chakracoreEPSS65%2 exploitsPublished Oct 13, 2017
- CVE-2017-11810High 7.5Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current…microsoft · internet explorerEPSS55%2 exploitsPublished Oct 13, 2017
- CVE-2017-11809High 7.5ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory…microsoft · chakracoreEPSS68%1 exploitPublished Oct 13, 2017
- CVE-2017-11802High 7.5ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory…microsoft · chakracoreEPSS69%1 exploitPublished Oct 13, 2017
- CVE-2017-11799High 7.5ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory…microsoft · chakracoreEPSS64%1 exploitPublished Oct 13, 2017
- CVE-2017-1000117High 8.8A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed.git-scm · gitEPSS78%2 exploitsPublished Oct 5, 2017
- CVE-2017-1000112High 7.0Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch.linux · linux kernelEPSS21%4 exploitsPublished Oct 5, 2017
- CVE-2017-14496High 7.5Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request.thekelleys · dnsmasqEPSS66%1 exploitPublished Oct 3, 2017
- CVE-2017-14495High 7.5Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation.thekelleys · dnsmasqEPSS84%1 exploitPublished Oct 3, 2017
- CVE-2017-6090High 8.8Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logos_clients/.phpcollab · phpcollabEPSS96%5 exploitsPublished Oct 2, 2017
- CVE-2015-4074High 7.5Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla!helpdesk pro project · helpdesk proEPSS57%3 exploitsPublished Sep 20, 2017
- CVE-2017-9798High 7.5Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed.apache · http serverEPSS95%3 exploitsPublished Sep 18, 2017
- CVE-2017-8755High 7.5Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory…microsoft · edgeEPSS71%2 exploitsPublished Sep 12, 2017
- CVE-2017-8751High 7.5Microsoft Edge in Microsoft Windows 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability".microsoft · edgeEPSS50%2 exploitsPublished Sep 12, 2017
- CVE-2017-8740High 7.5Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS72%2 exploitsPublished Sep 12, 2017
- CVE-2017-8734High 7.5Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption…microsoft · edgeEPSS53%2 exploitsPublished Sep 12, 2017
- CVE-2017-8731High 7.5Microsoft Edge in Microsoft Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability".microsoft · edgeEPSS52%2 exploitsPublished Sep 12, 2017
- CVE-2017-8729High 7.5Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS72%2 exploitsPublished Sep 12, 2017
- CVE-2017-11764High 7.5Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…microsoft · edgeEPSS64%2 exploitsPublished Sep 12, 2017
- CVE-2017-1000083High 7.8backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a…gnome · evinceEPSS51%5 exploitsPublished Sep 5, 2017
- CVE-2015-5958High 8.8phpFileManager 0.9.8 allows remote attackers to execute arbitrary commands via a crafted URL.phpfilemanager project · phpfilemanagerEPSS27%2 exploitsPublished Aug 31, 2017
- CVE-2014-5301High 8.8Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4.manageengine · assetexplorerEPSS78%5 exploitsPublished Aug 28, 2017
- CVE-2017-8671High 7.5Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka…microsoft · edgeEPSS69%1 exploitPublished Aug 8, 2017
- CVE-2017-8670High 7.5Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting…microsoft · edgeEPSS69%1 exploitPublished Aug 8, 2017
- CVE-2017-8657High 7.5Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka…microsoft · edgeEPSS55%1 exploitPublished Aug 8, 2017
- CVE-2017-8656High 7.5Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting…microsoft · edgeEPSS69%1 exploitPublished Aug 8, 2017
- CVE-2017-8646High 7.5Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine…microsoft · edgeEPSS69%1 exploitPublished Aug 8, 2017
- CVE-2017-8645High 7.5Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine…microsoft · edgeEPSS69%1 exploitPublished Aug 8, 2017
- CVE-2017-8641High 7.5Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to…microsoft · edgeEPSS72%1 exploitPublished Aug 8, 2017
- CVE-2017-8640High 7.5Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting…microsoft · edgeEPSS69%1 exploitPublished Aug 8, 2017
- CVE-2017-8636High 7.5Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to…microsoft · edgeEPSS72%8 exploitsPublished Aug 8, 2017
- CVE-2017-8635High 7.5Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to…microsoft · edgeEPSS56%2 exploitsPublished Aug 8, 2017
- CVE-2017-8634High 7.5Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption…microsoft · edgeEPSS70%2 exploitsPublished Aug 8, 2017
- CVE-2016-7976High 8.8The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams.artifex · ghostscriptEPSS23%1 exploitPublished Aug 7, 2017
- CVE-2017-11392High 8.8Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations.trendmicro · interscan messaging security virtual applianceEPSS34%1 exploitPublished Aug 3, 2017
- CVE-2017-11391High 8.8Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations.trendmicro · interscan messaging security virtual applianceEPSS62%1 exploitPublished Aug 3, 2017
- CVE-2017-7442High 8.8Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences.gonitro · nitro proEPSS41%2 exploitsPublished Aug 3, 2017
- CVE-2017-1000028High 7.5Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request.oracle · glassfish serverEPSS99%5 exploitsPublished Jul 17, 2017
- CVE-2017-8618High 7.5Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 Internet Explorer in the way affected Microsoft scripting engines render when…microsoft · internet explorerEPSS58%2 exploitsPublished Jul 11, 2017
- CVE-2017-8601High 7.5Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka "Scripting…microsoft · edgeEPSS67%2 exploitsPublished Jul 11, 2017
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-16806 | The Process function in RemoteTaskServer/WebServer/HttpServer.cs in Ulterius before 1.9.5.0 allows HTTP server directory traversal. ulterius · ulterius server | High 7.5 | 91% | 1 exploit | |
| CVE-2017-16249 | The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the server to hang until eventually replying (~300 seconds) with an HTTP 500 error. brother · dcp-j132w firmware | High 7.5 | 59% | 3 exploits | |
| CVE-2017-16524 | Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_upload.php' allows remote authenticated attackers to upload and execute arbitrary PHP code via a filename with a .php extension, which is then accessed via a… hanwhasecurity · web viewer | High 8.8 | 30% | 4 exploits | |
| CVE-2017-12243 | A vulnerability in the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to obtain root shell privileges on the device, aka Command… cisco · firepower 4100 next-generation firewall firmware | High 7.8 | 77% | 1 exploit | |
| CVE-2017-7411 | The vulnerability exists because the User::getRecentElements() method is using the unserialize() function with a preference value that can be arbitrarily manipulated by malicious users through the REST API interface, and this can be exploited to inject arbitrary PHP objects into… enalean · tuleap | High 8.8 | 67% | 2 exploits | |
| CVE-2013-0156 | actionpack Improper Input Validation vulnerability rubyonrails · rails | High 7.5 | 99% | 6 exploits | |
| CVE-2013-0333 | activesupport in Rails vulnerable to incorrect data conversion rubyonrails · rails | High 7.5 | 96% | 2 exploits | |
| CVE-2016-2098 | actionpack allows remote code execution via application's unrestricted use of render method rubyonrails · rails | High 7.3 | 81% | 1 exploit | |
| CVE-2017-13772 | Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arbitrary code via the (1) ping_addr parameter to PingIframeRpm.htm or (2) dnsserver2 parameter to WanStaticIpV6CfgRpm.htm. tp-link · wr940n firmware | High 8.8 | 51% | 2 exploits | |
| CVE-2014-9118 | The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddr parameter to zhnping.cmd. dasanzhone · znid 2426a firmware | High 8.8 | 53% | 3 exploits | |
| CVE-2017-11811 | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory… microsoft · chakracore | High 7.5 | 65% | 2 exploits | |
| CVE-2017-11810 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current… microsoft · internet explorer | High 7.5 | 55% | 2 exploits | |
| CVE-2017-11809 | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory… microsoft · chakracore | High 7.5 | 68% | 1 exploit | |
| CVE-2017-11802 | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory… microsoft · chakracore | High 7.5 | 69% | 1 exploit | |
| CVE-2017-11799 | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory… microsoft · chakracore | High 7.5 | 64% | 1 exploit | |
| CVE-2017-1000117 | A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. git-scm · git | High 8.8 | 78% | 2 exploits | |
| CVE-2017-1000112 | Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. linux · linux kernel | High 7.0 | 21% | 4 exploits | |
| CVE-2017-14496 | Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request. thekelleys · dnsmasq | High 7.5 | 66% | 1 exploit | |
| CVE-2017-14495 | Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation. thekelleys · dnsmasq | High 7.5 | 84% | 1 exploit | |
| CVE-2017-6090 | Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logos_clients/. phpcollab · phpcollab | High 8.8 | 96% | 5 exploits | |
| CVE-2015-4074 | Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! helpdesk pro project · helpdesk pro | High 7.5 | 57% | 3 exploits | |
| CVE-2017-9798 | Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed. apache · http server | High 7.5 | 95% | 3 exploits | |
| CVE-2017-8755 | Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory… microsoft · edge | High 7.5 | 71% | 2 exploits | |
| CVE-2017-8751 | Microsoft Edge in Microsoft Windows 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 50% | 2 exploits | |
| CVE-2017-8740 | Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 72% | 2 exploits | |
| CVE-2017-8734 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption… microsoft · edge | High 7.5 | 53% | 2 exploits | |
| CVE-2017-8731 | Microsoft Edge in Microsoft Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 52% | 2 exploits | |
| CVE-2017-8729 | Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 72% | 2 exploits | |
| CVE-2017-11764 | Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption… microsoft · edge | High 7.5 | 64% | 2 exploits | |
| CVE-2017-1000083 | backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a… gnome · evince | High 7.8 | 51% | 5 exploits | |
| CVE-2015-5958 | phpFileManager 0.9.8 allows remote attackers to execute arbitrary commands via a crafted URL. phpfilemanager project · phpfilemanager | High 8.8 | 27% | 2 exploits | |
| CVE-2014-5301 | Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4. manageengine · assetexplorer | High 8.8 | 78% | 5 exploits | |
| CVE-2017-8671 | Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka… microsoft · edge | High 7.5 | 69% | 1 exploit | |
| CVE-2017-8670 | Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting… microsoft · edge | High 7.5 | 69% | 1 exploit | |
| CVE-2017-8657 | Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka… microsoft · edge | High 7.5 | 55% | 1 exploit | |
| CVE-2017-8656 | Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting… microsoft · edge | High 7.5 | 69% | 1 exploit | |
| CVE-2017-8646 | Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine… microsoft · edge | High 7.5 | 69% | 1 exploit | |
| CVE-2017-8645 | Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine… microsoft · edge | High 7.5 | 69% | 1 exploit | |
| CVE-2017-8641 | Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to… microsoft · edge | High 7.5 | 72% | 1 exploit | |
| CVE-2017-8640 | Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting… microsoft · edge | High 7.5 | 69% | 1 exploit | |
| CVE-2017-8636 | Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to… microsoft · edge | High 7.5 | 72% | 8 exploits | |
| CVE-2017-8635 | Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to… microsoft · edge | High 7.5 | 56% | 2 exploits | |
| CVE-2017-8634 | Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption… microsoft · edge | High 7.5 | 70% | 2 exploits | |
| CVE-2016-7976 | The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams. artifex · ghostscript | High 8.8 | 23% | 1 exploit | |
| CVE-2017-11392 | Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. trendmicro · interscan messaging security virtual appliance | High 8.8 | 34% | 1 exploit | |
| CVE-2017-11391 | Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. trendmicro · interscan messaging security virtual appliance | High 8.8 | 62% | 1 exploit | |
| CVE-2017-7442 | Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences. gonitro · nitro pro | High 8.8 | 41% | 2 exploits | |
| CVE-2017-1000028 | Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request. oracle · glassfish server | High 7.5 | 99% | 5 exploits | |
| CVE-2017-8618 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 Internet Explorer in the way affected Microsoft scripting engines render when… microsoft · internet explorer | High 7.5 | 58% | 2 exploits | |
| CVE-2017-8601 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka "Scripting… microsoft · edge | High 7.5 | 67% | 2 exploits |
Showing 401–450 of 890
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.