Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
1,474 vulnerabilities · highest exploit probability first
- CVE-2020-16139High 7.5A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers restart the device remotely through sending specially crafted packets.cisco · unified ip conference station 7937g firmwareEPSS80%1 exploitPublished Aug 12, 2020
- CVE-2020-17505High 8.8Artica Web Proxy 4.30.000000 allows an authenticated remote attacker to inject commands via the service-cmds parameter in cyrus.php.articatech · web proxyEPSS82%2 exploitsPublished Aug 12, 2020
- CVE-2020-15419High 7.5This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.0.0.750_20200415.veeam · one firmwareEPSS60%·Published Jul 28, 2020
- CVE-2020-10924High 8.8This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers.netgear · r6700 firmwareEPSS87%·Published Jul 28, 2020
- CVE-2020-10923High 8.8This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers.netgear · r6700 firmwareEPSS85%·Published Jul 28, 2020
- CVE-2020-12028High 8.1In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote endpoint since those handlers do not enforce appropriate permissions.rockwellautomation · factorytalk viewEPSS53%2 exploitsPublished Jul 20, 2020
- CVE-2020-12029High 7.8All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory.rockwellautomation · factorytalk viewEPSS47%2 exploitsPublished Jul 20, 2020
- CVE-2020-1421High 8.8A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution…microsoft · windows 10EPSS75%·Published Jul 14, 2020
- CVE-2020-15050High 7.5Remote attackers can read arbitrary files from the server via Directory Traversal.supremainc · biostar 2EPSS51%2 exploitsPublished Jul 13, 2020
- CVE-2020-7457High 8.1In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4-RELEASE before p1, and 11.3-RELEASE before p11, missing synchronization in the IPV6_2292PKTOPTIONS socket option set handler contained a race condition allowing a malicious…freebsd · freebsdEPSS33%2 exploitsPublished Jul 9, 2020
- CVE-2020-8163High 8.8Remote code execution via user-provided local names in ActionViewrubyonrails · railsEPSS82%1 exploitPublished Jul 7, 2020
- CVE-2020-13383High 7.5openSIS through 7.4 allows Directory Traversal.os4ed · opensisEPSS68%3 exploitsPublished Jul 1, 2020
- CVE-2020-13158High 7.5Artica Proxy before 4.30.000000 Community Edition allows Directory Traversal via the fw.progrss.details.php popup parameter.articatech · artica proxyEPSS54%1 exploitPublished Jun 22, 2020
- CVE-2020-14295High 7.2A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter.cacti · cactiEPSS86%5 exploitsPublished Jun 17, 2020
- CVE-2019-0199High 7.5Apache Tomcat Denial of Service vulnerabilityapache · tomcatEPSS73%·Published Jun 15, 2020
- CVE-2020-13851High 8.8Artica Pandora FMS 7.44 allows remote command execution via the events feature.pandorafms · pandora fmsEPSS91%2 exploitsPublished Jun 11, 2020
- CVE-2014-0114High 7.5Arbitrary code execution in Apache Commons BeanUtilsapache · commons beanutilsEPSS99%2 exploitsPublished Jun 10, 2020
- CVE-2020-1313High 7.8An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrator Service Elevation of Privilege Vulnerability'.microsoft · windows 10EPSS39%2 exploitsPublished Jun 9, 2020
- CVE-2020-1300High 8.8A remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files.To exploit the vulnerability, an attacker would have to convince a user to either open a specially crafted cabinet file or spoof a network printer and trick a user into…microsoft · windows 10EPSS59%·Published Jun 9, 2020
- CVE-2020-1181High 8.8A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.microsoft · sharepoint serverEPSS69%·Published Jun 9, 2020
- CVE-2020-10644High 7.5The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8 Gateway (versions prior to 8.0.10) and Ignition 7 Gateway (versions prior to 7.9.14), allowing an attacker to obtain sensitive information.inductiveautomation · ignition gatewayEPSS20%1 exploitPublished Jun 9, 2020
- CVE-2020-8605High 8.8A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute arbitrary code on affected installations.trendmicro · interscan web security virtual applianceEPSS88%4 exploitsPublished May 27, 2020
- CVE-2020-8604High 7.5A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to disclose sensitive informatoin on affected installations.trendmicro · interscan web security virtual applianceEPSS90%3 exploitsPublished May 27, 2020
- CVE-2020-9484High 7.0Potential remote code execution in Apache Tomcatapache · tomcatEPSS56%·Published May 21, 2020
- CVE-2020-12255High 8.8rConfig 3.9.4 is vulnerable to remote code execution due to improper validation in the file upload functionality.rconfig · rconfigEPSS53%·Published May 18, 2020
- CVE-2020-11108High 8.8The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files.pi-hole · pi-holeEPSS78%8 exploitsPublished May 11, 2020
- CVE-2020-9315High 7.5PRODUCT NOT SUPPORTED WHEN ASSIGNED Oracle iPlanet Web Server 7.0.x has Incorrect Access Control for admingui/version URIs in the Administration console, as demonstrated by unauthenticated read access to encryption keys.oracle · iplanet web serverEPSS82%·Published May 10, 2020
- CVE-2020-12116High 7.5Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attacker to read arbitrary files on the server by sending a crafted request.zohocorp · manageengine opmanagerEPSS97%·Published May 7, 2020
- CVE-2020-12109High 8.8Certain TP-Link devices allow Command Injection.tp-link · nc200 firmwareEPSS74%3 exploitsPublished May 4, 2020
- CVE-2020-7351High 8.8An OS Command Injection vulnerability in the endpoint_devicemap.php component of Fonality Trixbox Community Edition allows an attacker to execute commands on the underlying operating system as the "asterisk" user.netfortris · trixboxEPSS65%2 exploitsPublished May 1, 2020
- CVE-2020-11946High 7.5Zoho ManageEngine OpManager before 125120 allows an unauthenticated user to retrieve an API key via a servlet call.zohocorp · manageengine opmanagerEPSS52%·Published Apr 20, 2020
- CVE-2020-3251High 8.8Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device.cisco · ucs directorEPSS62%·Published Apr 15, 2020
- CVE-2020-3239High 8.8Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device.cisco · ucs directorEPSS74%·Published Apr 15, 2020
- CVE-2020-2871High 8.2Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony.oracle · advanced outbound telephonyEPSS66%·Published Apr 15, 2020
- CVE-2020-2854High 8.2Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony.oracle · advanced outbound telephonyEPSS66%·Published Apr 15, 2020
- CVE-2020-2852High 8.2Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony.oracle · advanced outbound telephonyEPSS66%·Published Apr 15, 2020
- CVE-2019-19699High 7.2There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at…centreon · centreonEPSS28%2 exploitsPublished Apr 6, 2020
- CVE-2020-11100High 8.8In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap via a crafted HTTP/2 request, possibly causing remote code execution.haproxy · haproxyEPSS62%·Published Apr 2, 2020
- CVE-2020-4241High 8.8IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the system.ibm · spectrum protect plusEPSS66%·Published Mar 31, 2020
- CVE-2020-10884High 8.8This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers.tp-link · ac1750 firmwareEPSS22%3 exploitsPublished Mar 25, 2020
- CVE-2020-10882High 8.8This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers.tp-link · ac1750 firmwareEPSS41%3 exploitsPublished Mar 25, 2020
- CVE-2020-8864High 8.8This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04.dlink · dir-867 firmwareEPSS80%·Published Mar 23, 2020
- CVE-2020-8863High 8.8This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04.dlink · dir-867 firmwareEPSS77%·Published Mar 23, 2020
- CVE-2020-10808High 8.8Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup Backup Listing Endpoint.vestacp · vesta control panelEPSS78%3 exploitsPublished Mar 22, 2020
- CVE-2019-16012High 8.1A vulnerability in the web UI of Cisco SD-WAN Solution vManage software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.cisco · sd-wan firmwareEPSS54%·Published Mar 19, 2020
- CVE-2020-10173High 8.8Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi.comtrend · vr-3033 firmwareEPSS77%1 exploitPublished Mar 5, 2020
- CVE-2019-20501High 7.8D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in the Web interface, using shell metacharacters in the admin.cgi?action=upgrade firmwareRestore or firmwareServerip parameter.dlink · dwl-2600ap firmwareEPSS90%1 exploitPublished Mar 5, 2020
- CVE-2019-20499High 7.8D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_restore configRestore or configServerip parameter.dlink · dwl-2600ap firmwareEPSS95%3 exploitsPublished Mar 5, 2020
- CVE-2020-8813High 8.8graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege.cacti · cactiEPSS74%3 exploitsPublished Feb 22, 2020
- CVE-2020-7046High 7.5lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in command parameters, as demonstrated by the unauthenticated triggering of a submission-login infinite loop.dovecot · dovecotEPSS51%·Published Feb 12, 2020
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-16139 | A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers restart the device remotely through sending specially crafted packets. cisco · unified ip conference station 7937g firmware | High 7.5 | 80% | 1 exploit | |
| CVE-2020-17505 | Artica Web Proxy 4.30.000000 allows an authenticated remote attacker to inject commands via the service-cmds parameter in cyrus.php. articatech · web proxy | High 8.8 | 82% | 2 exploits | |
| CVE-2020-15419 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.0.0.750_20200415. veeam · one firmware | High 7.5 | 60% | · | |
| CVE-2020-10924 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers. netgear · r6700 firmware | High 8.8 | 87% | · | |
| CVE-2020-10923 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers. netgear · r6700 firmware | High 8.8 | 85% | · | |
| CVE-2020-12028 | In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote endpoint since those handlers do not enforce appropriate permissions. rockwellautomation · factorytalk view | High 8.1 | 53% | 2 exploits | |
| CVE-2020-12029 | All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory. rockwellautomation · factorytalk view | High 7.8 | 47% | 2 exploits | |
| CVE-2020-1421 | A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution… microsoft · windows 10 | High 8.8 | 75% | · | |
| CVE-2020-15050 | Remote attackers can read arbitrary files from the server via Directory Traversal. supremainc · biostar 2 | High 7.5 | 51% | 2 exploits | |
| CVE-2020-7457 | In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4-RELEASE before p1, and 11.3-RELEASE before p11, missing synchronization in the IPV6_2292PKTOPTIONS socket option set handler contained a race condition allowing a malicious… freebsd · freebsd | High 8.1 | 33% | 2 exploits | |
| CVE-2020-8163 | Remote code execution via user-provided local names in ActionView rubyonrails · rails | High 8.8 | 82% | 1 exploit | |
| CVE-2020-13383 | openSIS through 7.4 allows Directory Traversal. os4ed · opensis | High 7.5 | 68% | 3 exploits | |
| CVE-2020-13158 | Artica Proxy before 4.30.000000 Community Edition allows Directory Traversal via the fw.progrss.details.php popup parameter. articatech · artica proxy | High 7.5 | 54% | 1 exploit | |
| CVE-2020-14295 | A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. cacti · cacti | High 7.2 | 86% | 5 exploits | |
| CVE-2019-0199 | Apache Tomcat Denial of Service vulnerability apache · tomcat | High 7.5 | 73% | · | |
| CVE-2020-13851 | Artica Pandora FMS 7.44 allows remote command execution via the events feature. pandorafms · pandora fms | High 8.8 | 91% | 2 exploits | |
| CVE-2014-0114 | Arbitrary code execution in Apache Commons BeanUtils apache · commons beanutils | High 7.5 | 99% | 2 exploits | |
| CVE-2020-1313 | An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrator Service Elevation of Privilege Vulnerability'. microsoft · windows 10 | High 7.8 | 39% | 2 exploits | |
| CVE-2020-1300 | A remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files.To exploit the vulnerability, an attacker would have to convince a user to either open a specially crafted cabinet file or spoof a network printer and trick a user into… microsoft · windows 10 | High 8.8 | 59% | · | |
| CVE-2020-1181 | A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'. microsoft · sharepoint server | High 8.8 | 69% | · | |
| CVE-2020-10644 | The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8 Gateway (versions prior to 8.0.10) and Ignition 7 Gateway (versions prior to 7.9.14), allowing an attacker to obtain sensitive information. inductiveautomation · ignition gateway | High 7.5 | 20% | 1 exploit | |
| CVE-2020-8605 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute arbitrary code on affected installations. trendmicro · interscan web security virtual appliance | High 8.8 | 88% | 4 exploits | |
| CVE-2020-8604 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to disclose sensitive informatoin on affected installations. trendmicro · interscan web security virtual appliance | High 7.5 | 90% | 3 exploits | |
| CVE-2020-9484 | Potential remote code execution in Apache Tomcat apache · tomcat | High 7.0 | 56% | · | |
| CVE-2020-12255 | rConfig 3.9.4 is vulnerable to remote code execution due to improper validation in the file upload functionality. rconfig · rconfig | High 8.8 | 53% | · | |
| CVE-2020-11108 | The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. pi-hole · pi-hole | High 8.8 | 78% | 8 exploits | |
| CVE-2020-9315 | PRODUCT NOT SUPPORTED WHEN ASSIGNED Oracle iPlanet Web Server 7.0.x has Incorrect Access Control for admingui/version URIs in the Administration console, as demonstrated by unauthenticated read access to encryption keys. oracle · iplanet web server | High 7.5 | 82% | · | |
| CVE-2020-12116 | Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attacker to read arbitrary files on the server by sending a crafted request. zohocorp · manageengine opmanager | High 7.5 | 97% | · | |
| CVE-2020-12109 | Certain TP-Link devices allow Command Injection. tp-link · nc200 firmware | High 8.8 | 74% | 3 exploits | |
| CVE-2020-7351 | An OS Command Injection vulnerability in the endpoint_devicemap.php component of Fonality Trixbox Community Edition allows an attacker to execute commands on the underlying operating system as the "asterisk" user. netfortris · trixbox | High 8.8 | 65% | 2 exploits | |
| CVE-2020-11946 | Zoho ManageEngine OpManager before 125120 allows an unauthenticated user to retrieve an API key via a servlet call. zohocorp · manageengine opmanager | High 7.5 | 52% | · | |
| CVE-2020-3251 | Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. cisco · ucs director | High 8.8 | 62% | · | |
| CVE-2020-3239 | Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. cisco · ucs director | High 8.8 | 74% | · | |
| CVE-2020-2871 | Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. oracle · advanced outbound telephony | High 8.2 | 66% | · | |
| CVE-2020-2854 | Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. oracle · advanced outbound telephony | High 8.2 | 66% | · | |
| CVE-2020-2852 | Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. oracle · advanced outbound telephony | High 8.2 | 66% | · | |
| CVE-2019-19699 | There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at… centreon · centreon | High 7.2 | 28% | 2 exploits | |
| CVE-2020-11100 | In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap via a crafted HTTP/2 request, possibly causing remote code execution. haproxy · haproxy | High 8.8 | 62% | · | |
| CVE-2020-4241 | IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the system. ibm · spectrum protect plus | High 8.8 | 66% | · | |
| CVE-2020-10884 | This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. tp-link · ac1750 firmware | High 8.8 | 22% | 3 exploits | |
| CVE-2020-10882 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. tp-link · ac1750 firmware | High 8.8 | 41% | 3 exploits | |
| CVE-2020-8864 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04. dlink · dir-867 firmware | High 8.8 | 80% | · | |
| CVE-2020-8863 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04. dlink · dir-867 firmware | High 8.8 | 77% | · | |
| CVE-2020-10808 | Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup Backup Listing Endpoint. vestacp · vesta control panel | High 8.8 | 78% | 3 exploits | |
| CVE-2019-16012 | A vulnerability in the web UI of Cisco SD-WAN Solution vManage software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. cisco · sd-wan firmware | High 8.1 | 54% | · | |
| CVE-2020-10173 | Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi. comtrend · vr-3033 firmware | High 8.8 | 77% | 1 exploit | |
| CVE-2019-20501 | D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in the Web interface, using shell metacharacters in the admin.cgi?action=upgrade firmwareRestore or firmwareServerip parameter. dlink · dwl-2600ap firmware | High 7.8 | 90% | 1 exploit | |
| CVE-2019-20499 | D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_restore configRestore or configServerip parameter. dlink · dwl-2600ap firmware | High 7.8 | 95% | 3 exploits | |
| CVE-2020-8813 | graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege. cacti · cacti | High 8.8 | 74% | 3 exploits | |
| CVE-2020-7046 | lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in command parameters, as demonstrated by the unauthenticated triggering of a submission-login infinite loop. dovecot · dovecot | High 7.5 | 51% | · |
Showing 651–700 of 1,474
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.