Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Emerging

Emerging Threats, Before They Hit KEV.

Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.

Synced hourly · figures as of Oct 19, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
780 vulnerabilities · highest exploit probability first
  • CVE-2010-2263Medium 5.0
    nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI.
    f5 · nginx
    EPSS72%
    4 exploits
    Published Jun 15, 2010
  • CVE-2010-2156Medium 5.0
    ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length client ID.
    isc · dhcp
    EPSS76%
    1 exploit
    Published Jun 7, 2010
  • CVE-2010-2115Medium 5.0
    SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new connections) via a crafted read request.
    solarwinds · tftp server
    EPSS56%
    2 exploits
    Published May 28, 2010
  • CVE-2010-1587Medium 5.0
    The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP source code via a // (slash slash) initial substring in a URI for (1) admin/index.jsp, (2) admin/queues.jsp, or (3) admin/topics.jsp.
    apache · activemq
    EPSS78%
    1 exploit
    Published Apr 28, 2010
  • CVE-2010-1429Medium 5.0
    Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query…
    redhat · jboss enterprise application platform
    EPSS54%
    ·
    Published Apr 28, 2010
  • CVE-2009-4498Medium 6.8
    The node_process_command function in Zabbix Server before 1.8 allows remote attackers to execute arbitrary commands via a crafted request.
    zabbix · zabbix
    EPSS32%
    3 exploits
    Published Dec 31, 2009
  • CVE-2009-4444Medium 6.0
    Microsoft Internet Information Services (IIS) 5.x and 6.x uses only the portion of a filename before a ; (semicolon) character to determine the file extension, which allows remote attackers to bypass intended extension restrictions of third-party upload applications via a…
    microsoft · internet information services
    EPSS64%
    ·
    Published Dec 29, 2009
  • CVE-2009-3733Medium 5.0
    Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors.
    vmware · esx
    EPSS83%
    1 exploit
    Published Nov 2, 2009
  • CVE-2009-3591Medium 5.0
    Dopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a REQUESTJET message with an invalid location.
    ben webb · dopewars
    EPSS53%
    2 exploits
    Published Oct 8, 2009
  • CVE-2009-2521Medium 5.0
    Stack consumption vulnerability in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows remote authenticated users to cause a denial of service (daemon crash) via a list (ls) -R command containing a wildcard that references a subdirectory,…
    microsoft · internet information services
    EPSS82%
    2 exploits
    Published Sep 4, 2009
  • CVE-2009-2622Medium 5.0
    Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including (1) "missing or mismatched protocol identifier," (2) missing or negative status value," (3) "missing version," or (4) "missing or invalid…
    squid-cache · squid
    EPSS57%
    ·
    Published Jul 27, 2009
  • CVE-2009-2335Medium 5.3
    WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.
    wordpress · wordpress
    EPSS85%
    1 exploit
    Published Jul 10, 2009
  • CVE-2008-6825Medium 6.8
    Directory traversal vulnerability in user/index.php in Fonality trixbox CE 2.6.1 and earlier allows remote attackers to include and execute arbitrary files via a ..
    trixbox · trixbox
    EPSS20%
    3 exploits
    Published Jun 5, 2009
  • CVE-2009-1386Medium 5.0
    ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.
    openssl · openssl
    EPSS80%
    1 exploit
    Published Jun 4, 2009
  • CVE-2009-0077Medium 5.0
    The firewall engine in Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); and Internet Security and Acceleration (ISA) Server 2004 SP3, 2006, 2006 Supportability Update, and 2006 SP1; does not properly manage the session state of web listeners,…
    microsoft · forefront threat management gateway
    EPSS78%
    ·
    Published Apr 15, 2009
  • CVE-2009-0880Medium 6.8
    Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to load and execute arbitrary local DLL code via a ..
    ibm · director
    EPSS32%
    4 exploits
    Published Mar 12, 2009
  • CVE-2008-6132Medium 6.8
    Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via the start_date parameter.
    brickhost · phpscheduleit
    EPSS26%
    3 exploits
    Published Feb 13, 2009
  • CVE-2009-0478Medium 5.0
    Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service via an HTTP request with an invalid version number, which triggers a reachable assertion in (1) HttpMsg.c and (2) HttpStatusLine.c.
    squid · squid
    EPSS72%
    1 exploit
    Published Feb 8, 2009
  • CVE-2008-5081Medium 5.0
    The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.
    avahi · avahi
    EPSS59%
    1 exploit
    Published Dec 17, 2008
  • CVE-2008-5180Medium 5.3
    Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service (memory consumption) via a large number of SIP INVITE requests, which trigger the creation of many sessions.
    microsoft · office communicator
    EPSS68%
    3 exploits
    Published Nov 20, 2008
  • CVE-2008-4696Medium 4.3
    Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier (aka the "optional fragment"), which is not properly escaped before storage in the History Search database (aka…
    opera · opera
    EPSS46%
    3 exploits
    Published Oct 23, 2008
  • CVE-2008-4546Medium 4.3
    flash-plugin: crash caused by SWF files with different SWF versions obtained from the same URL
    adobe · flash player
    EPSS66%
    1 exploit
    Published Oct 2, 2008
  • CVE-2008-1447Medium 6.8
    The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses…
    isc · bind
    EPSS95%
    3 exploits
    Published Jul 8, 2008
  • CVE-2008-2463Medium 6.8
    The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document…
    microsoft · office snapshot viewer activex
    EPSS59%
    3 exploits
    Published Jul 7, 2008
  • CVE-2008-2549Medium 4.3
    acroread: crash and possible code execution
    adobe · acrobat reader
    EPSS53%
    1 exploit
    Published May 29, 2008
  • CVE-2008-2168Medium 4.3
    Cross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page.
    apache · http server
    EPSS55%
    1 exploit
    Published May 13, 2008
  • CVE-2008-0927Medium 5.0
    dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with (1) multiple Connection headers or (2) a Connection header with multiple comma-separated values.
    microsoft · windows-nt
    EPSS70%
    ·
    Published Apr 14, 2008
  • CVE-2008-1562Medium 5.0
    The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet, a different vulnerability than CVE-2006-5740.
    wireshark · wireshark
    EPSS51%
    1 exploit
    Published Mar 28, 2008
  • CVE-2008-1365Medium 6.4
    Stack-based buffer overflow in Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long encrypted password, which…
    trend micro · officescan corporate edition
    EPSS51%
    3 exploits
    Published Mar 17, 2008
  • CVE-2008-1358Medium 6.5
    Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to execute arbitrary code via a FETCH command with a long BODY.
    altn · mdaemon
    EPSS57%
    2 exploits
    Published Mar 17, 2008
  • CVE-2008-0871Medium 6.8
    Multiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote attackers to execute arbitrary code via a (1) long password in an Authorization header to the HTTP service or a (2) large packet to the SMPP service.
    now · sms mms gateway
    EPSS33%
    2 exploits
    Published Feb 21, 2008
  • CVE-2008-0506Medium 6.8
    include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing method is configured, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) quality, (2) angle, or (3) clipval parameter…
    coppermine · coppermine photo gallery
    EPSS59%
    2 exploits
    Published Jan 31, 2008
  • CVE-2008-0492Medium 6.8
    Stack-based buffer overflow in the Persits.XUpload.2 ActiveX control in XUpload.ocx 3.0.0.4 and earlier in Persits XUpload 3.0 allows remote attackers to execute arbitrary code via a long argument to the AddFile method.
    persits · xupload
    EPSS30%
    2 exploits
    Published Jan 30, 2008
  • CVE-2008-0455Medium 4.3
    Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary web…
    apache · http server
    EPSS65%
    1 exploit
    Published Jan 25, 2008
  • CVE-2007-6388Medium 4.3
    Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
    apache · http server
    EPSS76%
    ·
    Published Jan 8, 2008
  • CVE-2007-6203Medium 4.3
    Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a "413 Request Entity Too Large" error message, which might allow cross-site scripting (XSS) style attacks using web client components that can…
    apache · http server
    EPSS81%
    1 exploit
    Published Dec 3, 2007
  • CVE-2007-3898Medium 6.4
    The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers to spoof DNS replies, poison the DNS cache, and facilitate further attack vectors.
    microsoft · windows 2000
    EPSS52%
    2 exploits
    Published Nov 13, 2007
  • CVE-2007-4466Medium 6.8
    Multiple stack-based buffer overflows in Electronic Arts (EA) SnoopyCtrl ActiveX control (NPSnpy.dll) allow remote attackers to execute arbitrary code via unspecified methods and parameters.
    electronic arts · snoopyctrl
    EPSS31%
    2 exploits
    Published Oct 9, 2007
  • CVE-2007-5217Medium 6.8
    Stack-based buffer overflow in the ADM4 ActiveX control in adm4.dll in Altnet Download Manager 4.0.0.6, as used in (1) Kazaa 3.2.7 and (2) Grokster, allows remote attackers to execute arbitrary code via a long argument to the Install method.
    altnet · altnet download manager
    EPSS30%
    2 exploits
    Published Oct 4, 2007
  • CVE-2007-4744Medium 6.8
    PHP remote file inclusion vulnerability in environment.php in AnyInventory 1.9.1 and 2.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the DIR_PREFIX parameter.
    anyinventory · anyinventory
    EPSS60%
    ·
    Published Sep 6, 2007
  • CVE-2007-4336Medium 4.3
    Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 (DirectTransform FlashPix) ActiveX control in DXTLIPI.DLL 6.0.2.827, as packaged in Microsoft DirectX Media 6.0 SDK, allows remote attackers to execute arbitrary code via a long SourceUrl property…
    microsoft · directx media
    EPSS51%
    ·
    Published Aug 14, 2007
  • CVE-2007-3386Medium 4.3
    tomcat host manager xss
    apache · tomcat
    EPSS59%
    1 exploit
    Published Aug 14, 2007
  • CVE-2007-4313Medium 6.8
    PHP remote file inclusion vulnerability in public_includes/pub_blocks/activecontent.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter, a different vector than CVE-2006-2392, CVE-2006-3076, and…
    php blue dragon · php blue dragon cms
    EPSS69%
    ·
    Published Aug 13, 2007
  • CVE-2007-3872Medium 6.8
    Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 for Windows, and possibly earlier versions, allow remote attackers to execute arbitrary code via certain crafted requests.
    hp · openview operations
    EPSS30%
    2 exploits
    Published Aug 9, 2007
  • CVE-2007-4232Medium 6.8
    PHP remote file inclusion vulnerability in admin/inc/change_action.php in Andreas Robertz PHPNews 0.93 allows remote attackers to execute arbitrary PHP code via a URL in the format_menue parameter.
    andreas robertz · phpnews
    EPSS52%
    ·
    Published Aug 8, 2007
  • CVE-2007-4006Medium 6.8
    Buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 has unknown impact and remote attack vectors, aka ZD-00000034.
    mike dubman · windows rsh daemon
    EPSS34%
    3 exploits
    Published Jul 25, 2007
  • CVE-2007-3925Medium 6.5
    Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command.
    ipswitch · imail server
    EPSS85%
    3 exploits
    Published Jul 20, 2007
  • CVE-2007-3813Medium 4.3
    PHP remote file inclusion vulnerability in include/user.php in the NoBoard BETA module for MKPortal allows remote attackers to execute arbitrary PHP code via a URL in the MK_PATH parameter.
    mkportal · noboard module
    EPSS59%
    ·
    Published Jul 16, 2007
  • CVE-2007-3632Medium 6.8
    Multiple PHP remote file inclusion vulnerabilities in LimeSurvey (aka PHPSurveyor) 1.49RC2 allow remote attackers to execute arbitrary PHP code via a URL in the homedir parameter to (1) OLE/PPS/File.php, (2) OLE/PPS/Root.php, (3) Spreadsheet/Excel/Writer.php, or (4) OLE/PPS.php…
    limesurvey · limesurvey
    EPSS62%
    ·
    Published Jul 9, 2007
  • CVE-2007-3522Medium 6.8
    Multiple PHP remote file inclusion vulnerabilities in sPHPell 1.01 allow remote attackers to execute arbitrary PHP code via a URL in the SpellIncPath parameter to (1) spellcheckpageinc.php, (2) spellchecktext.php, (3) spellcheckwindow.php, or (4) spellcheckwindowframeset.php.
    sphpell · sphpell
    EPSS66%
    ·
    Published Jul 3, 2007
Showing 601–650 of 780

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.

Figures as of Oct 19, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.