Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Emerging

Emerging Threats, Before They Hit KEV.

Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.

Synced hourly · figures as of Oct 19, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
780 vulnerabilities · highest exploit probability first
  • CVE-2012-6274Medium 5.0
    BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors.
    bigantsoft · bigant im message server
    EPSS47%
    2 exploits
    Published Feb 24, 2013
  • CVE-2012-6441Medium 5.0
    An information exposure of confidential information results when the device receives a specially crafted CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP.
    rockwellautomation · controllogix controllers
    EPSS57%
    ·
    Published Jan 24, 2013
  • CVE-2012-6330Medium 5.0
    The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows remote attackers to cause a denial of service (memory consumption) via a large integer in a %MAKETEXT% macro.
    foswiki · foswiki
    EPSS36%
    2 exploits
    Published Jan 4, 2013
  • CVE-2012-4347Medium 5.0
    Multiple directory traversal vulnerabilities in the management console in Symantec Messaging Gateway (SMG) 9.5.x allow remote authenticated users to read arbitrary files via a ..
    symantec · messaging gateway
    EPSS59%
    1 exploit
    Published Dec 5, 2012
  • CVE-2012-5613Medium 6.0
    mysql: database privilege escalation using FILE privilege
    mariadb · mariadb
    EPSS32%
    5 exploits
    Published Dec 1, 2012
  • CVE-2012-4940Medium 6.4
    Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a ..
    gecad · axigen free mail server
    EPSS85%
    1 exploit
    Published Oct 31, 2012
  • CVE-2012-3153Medium 6.4
    Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet.
    oracle · fusion middleware
    EPSS98%
    2 exploits
    Published Oct 16, 2012
  • CVE-2012-5067Medium 5.0
    JDK: unspecified vulnerability (Deployment)
    oracle · jdk
    EPSS64%
    2 exploits
    Published Oct 16, 2012
  • CVE-2012-1153Medium 6.8
    Unrestricted file upload vulnerability in addons/uploadify/uploadify.php in appRain CMF 0.1.5 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads…
    apprain · apprain
    EPSS32%
    4 exploits
    Published Oct 6, 2012
  • CVE-2012-5002Medium 6.8
    Stack-based buffer overflow in SR10 FTP server (SR10.exe) 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file name option is enabled, allows remote attackers to execute arbitrary code via a long USER FTP command.
    ricoh · dl-10
    EPSS31%
    3 exploits
    Published Sep 19, 2012
  • CVE-2012-2982Medium 6.5
    file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character.
    gentoo · webmin
    EPSS62%
    2 exploits
    Published Sep 11, 2012
  • CVE-2011-5130Medium 6.8
    dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the argv[1] parameter.
    haudenschilt · family connections cms
    EPSS37%
    5 exploits
    Published Aug 30, 2012
  • CVE-2012-2962Medium 6.5
    SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2 allows remote authenticated users to execute arbitrary SQL commands via the q parameter.
    sonicwall · scrutinizer
    EPSS67%
    4 exploits
    Published Jul 30, 2012
  • CVE-2011-2657Medium 6.8
    Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in LaunchHelp.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 allows remote attackers to execute arbitrary commands via a…
    novell · zenworks configuration management
    EPSS48%
    3 exploits
    Published Jul 26, 2012
  • CVE-2012-4031Medium 5.0
    Multiple directory traversal vulnerabilities in src/acloglogin.php in Wangkongbao CNS-1000 and 1100 allow remote attackers to read arbitrary files via a ..
    wangkongbao · cns-1000
    EPSS52%
    2 exploits
    Published Jul 17, 2012
  • CVE-2012-2122Medium 5.1
    mysql: incorrect type cast in check_scramble() leading to authentication bypass
    mariadb · mariadb
    EPSS97%
    1 exploit
    Published Jun 9, 2012
  • CVE-2012-2329Medium 5.0
    php: buffer overflow flaw in apache_request_headers() in PHP 5.4.x
    php · php
    EPSS62%
    2 exploits
    Published May 8, 2012
  • CVE-2012-2336Medium 5.0
    php: incomplete CVE-2012-1823 fix - missing filtering of -T and -h
    php · php
    EPSS50%
    4 exploits
    Published May 3, 2012
  • CVE-2012-2215Medium 5.0
    Directory traversal vulnerability in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to read arbitrary files via an opcode 0x21 request.
    novell · zenworks configuration management
    EPSS28%
    1 exploit
    Published Apr 9, 2012
  • CVE-2011-4535Medium 6.8
    Buffer overflow in TurboPower Abbrevia before 4.0, as used in ScadaTEC ScadaPhone 5.3.11.1230 and earlier, ScadaTEC ModbusTagServer 4.1.1.81 and earlier, and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary…
    craig peterson · turbopower abbrevia
    EPSS27%
    3 exploits
    Published Apr 3, 2012
  • CVE-2011-4044Medium 5.8
    An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to modify files via calls to unknown methods.
    arcinfo · frontvue
    EPSS27%
    3 exploits
    Published Apr 3, 2012
  • CVE-2012-1459Medium 4.3
    The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast!
    ahnlab · v3 internet security
    EPSS100%
    ·
    Published Mar 21, 2012
  • CVE-2012-1458Medium 4.3
    The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of a CHM file.
    clamav · clamav
    EPSS74%
    ·
    Published Mar 21, 2012
  • CVE-2012-1457Medium 4.3
    The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast!
    aladdin · esafe
    EPSS98%
    ·
    Published Mar 21, 2012
  • CVE-2012-1463Medium 4.3
    The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning…
    ahnlab · v3 internet security
    EPSS94%
    ·
    Published Mar 21, 2012
  • CVE-2012-1462Medium 4.3
    The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin…
    ahnlab · v3 internet security
    EPSS98%
    ·
    Published Mar 21, 2012
  • CVE-2012-1461Medium 4.3
    The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7…
    anti-virus · vba32
    EPSS92%
    ·
    Published Mar 21, 2012
  • CVE-2012-1460Medium 4.3
    The Gzip file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, and VBA32 3.12.14.2 allows remote attackers to bypass malware…
    aladdin · esafe
    EPSS94%
    ·
    Published Mar 21, 2012
  • CVE-2012-1456Medium 4.3
    The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0,…
    aladdin · esafe
    EPSS100%
    ·
    Published Mar 21, 2012
  • CVE-2012-1455Medium 4.3
    The CAB file parser in NOD32 Antivirus 5795 and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a CAB file with a modified vMinor version field.
    eset · nod32 antivirus
    EPSS61%
    ·
    Published Mar 21, 2012
  • CVE-2012-1454Medium 4.3
    The ELF file parser in Dr.Web 5.0.2.03300, eSafe 7.0.17.0, McAfee Gateway (formerly Webwasher) 2010.1C, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified…
    aladdin · esafe
    EPSS88%
    ·
    Published Mar 21, 2012
  • CVE-2012-1453Medium 4.3
    The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Trend Micro AntiVirus 9.120.0.1004, McAfee Gateway (formerly Webwasher) 2010.1C, Emsisoft Anti-Malware 5.1.0.1, CA eTrust Vet Antivirus…
    antiy · avl sdk
    EPSS98%
    ·
    Published Mar 21, 2012
  • CVE-2012-1452Medium 4.3
    The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Quick Heal (aka Cat QuickHeal) 11.00 allows remote attackers to bypass malware detection via a CAB file with a modified reserved1 field.
    cat · quick heal
    EPSS89%
    ·
    Published Mar 21, 2012
  • CVE-2012-1451Medium 4.3
    The CAB file parser in Emsisoft Anti-Malware 5.1.0.1 and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0 allows remote attackers to bypass malware detection via a CAB file with a modified reserved2 field.
    emsisoft · anti-malware
    EPSS67%
    ·
    Published Mar 21, 2012
  • CVE-2012-1450Medium 4.3
    The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Sophos Anti-Virus 4.61.0, and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0 allows remote attackers to bypass malware detection via a CAB file with a modified reserved3 field.
    emsisoft · anti-malware
    EPSS74%
    ·
    Published Mar 21, 2012
  • CVE-2012-1449Medium 4.3
    The CAB file parser in NOD32 Antivirus 5795 and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a CAB file with a modified vMajor field.
    eset · nod32 antivirus
    EPSS61%
    ·
    Published Mar 21, 2012
  • CVE-2012-1448Medium 4.3
    The CAB file parser in Quick Heal (aka Cat QuickHeal) 11.00, Trend Micro AntiVirus 9.120.0.1004, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Trend Micro HouseCall 9.120.0.1004, and Emsisoft Anti-Malware 5.1.0.1 allows remote attackers to bypass malware detection via…
    cat · quick heal
    EPSS89%
    ·
    Published Mar 21, 2012
  • CVE-2012-1447Medium 4.3
    The ELF file parser in Fortinet Antivirus 4.2.254.0, eSafe 7.0.17.0, Dr.Web 5.0.2.03300, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified e_version field.
    aladdin · esafe
    EPSS68%
    ·
    Published Mar 21, 2012
  • CVE-2012-1446Medium 4.3
    The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Norman Antivirus 6.06.12, eSafe 7.0.17.0, Kaspersky Anti-Virus 7.0.0.125, McAfee Gateway (formerly Webwasher)…
    aladdin · esafe
    EPSS100%
    ·
    Published Mar 21, 2012
  • CVE-2012-1445Medium 4.3
    The ELF file parser in eSafe 7.0.17.0, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified abi field.
    aladdin · esafe
    EPSS90%
    ·
    Published Mar 21, 2012
  • CVE-2012-1444Medium 4.3
    The ELF file parser in eSafe 7.0.17.0, Prevx 3.0, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified abiversion field.
    aladdin · esafe
    EPSS63%
    ·
    Published Mar 21, 2012
  • CVE-2012-1443Medium 4.3
    The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft…
    ahnlab · v3 internet security
    EPSS100%
    ·
    Published Mar 21, 2012
  • CVE-2012-1442Medium 4.3
    The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, eSafe 7.0.17.0, Kaspersky Anti-Virus 7.0.0.125, F-Secure Anti-Virus 9.0.16160.0, Sophos Anti-Virus 4.61.0, Antiy Labs AVL SDK…
    aladdin · esafe
    EPSS99%
    ·
    Published Mar 21, 2012
  • CVE-2012-1441Medium 4.3
    The Microsoft EXE file parser in eSafe 7.0.17.0 and Prevx 3.0 allows remote attackers to bypass malware detection via an EXE file with a modified value in any of several e_ fields.
    aladdin · esafe
    EPSS70%
    ·
    Published Mar 21, 2012
  • CVE-2012-1440Medium 4.3
    The ELF file parser in Norman Antivirus 6.06.12, eSafe 7.0.17.0, CA eTrust Vet Antivirus 36.1.8511, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified identsize field.
    aladdin · esafe
    EPSS78%
    ·
    Published Mar 21, 2012
  • CVE-2012-1439Medium 4.3
    The ELF file parser in eSafe 7.0.17.0, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified padding field.
    aladdin · esafe
    EPSS90%
    ·
    Published Mar 21, 2012
  • CVE-2012-1436Medium 4.3
    The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file…
    ahnlab · v3 internet security
    EPSS94%
    ·
    Published Mar 21, 2012
  • CVE-2012-1435Medium 4.3
    The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file…
    ahnlab · v3 internet security
    EPSS94%
    ·
    Published Mar 21, 2012
  • CVE-2012-1434Medium 4.3
    The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a…
    ahnlab · v3 internet security
    EPSS60%
    ·
    Published Mar 21, 2012
  • CVE-2012-1433Medium 4.3
    The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file…
    ahnlab · v3 internet security
    EPSS94%
    ·
    Published Mar 21, 2012
Showing 501–550 of 780

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.

Figures as of Oct 19, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.