Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
1,642 vulnerabilities · highest exploit probability first
- CVE-2019-16724Critical 9.8File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler (SEH) based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331.upredsun · file sharing wizardEPSS72%2 exploitsPublished Sep 24, 2019
- CVE-2019-5485Critical 10.0Command Injection in gitlabhookgitlabhook project · gitlabhookEPSS59%1 exploitPublished Sep 16, 2019
- CVE-2019-11500Critical 9.8In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings.dovecot · dovecotEPSS62%·Published Aug 29, 2019
- CVE-2019-1937Critical 9.8A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to acquire a valid session token with administrator…cisco · ucs directorEPSS76%3 exploitsPublished Aug 21, 2019
- CVE-2019-1935Critical 9.8A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to log in to the CLI of an affected system by using the SCP User account (scpuser), which…cisco · ucs directorEPSS83%3 exploitsPublished Aug 21, 2019
- CVE-2019-9851Critical 9.8LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from.libreoffice · libreofficeEPSS78%2 exploitsPublished Aug 15, 2019
- CVE-2019-1181Critical 9.8A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests.microsoft · remote desktopEPSS76%·Published Aug 14, 2019
- CVE-2019-12255Critical 9.8Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4).windriver · vxworksEPSS75%2 exploitsPublished Aug 9, 2019
- CVE-2019-13101Critical 9.8An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices.dlink · dir-600m firmwareEPSS67%1 exploitPublished Aug 8, 2019
- CVE-2019-10173Critical 9.8Deserialization of Untrusted Data and Code Injection in xstreamxstream · xstreamEPSS95%·Published Jul 26, 2019
- CVE-2019-12815Critical 9.8An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306.proftpd · proftpdEPSS58%·Published Jul 19, 2019
- CVE-2019-12725Critical 9.8Zeroshell 3.9.0 is prone to a remote command execution vulnerability.zeroshell · zeroshellEPSS90%2 exploitsPublished Jul 19, 2019
- CVE-2019-9848Critical 9.8LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc.libreoffice · libreofficeEPSS29%1 exploitPublished Jul 17, 2019
- CVE-2019-13373Critical 9.8Input does not get validated and arbitrary SQL statements can be executed in the database via the /web/Public/Conn.php parameter dbSQL.dlink · central wifimanagerEPSS68%·Published Jul 6, 2019
- CVE-2019-13372Critical 9.8/web/Lib/Action/IndexAction.class.php in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 allows remote attackers to execute arbitrary PHP code via a cookie because a cookie's username field allows eval injection, and an empty password bypasses authentication.dlink · central wifimanagerEPSS82%2 exploitsPublished Jul 6, 2019
- CVE-2017-8229Critical 9.8Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administrative credentials.amcrest · ipm-721s firmwareEPSS74%1 exploitPublished Jul 3, 2019
- CVE-2018-11686Critical 9.8The Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code execution via setup.php and change_config.php.flowpaper · flexpaperEPSS53%1 exploitPublished Jul 3, 2019
- CVE-2019-7257Critical 10.0Linear eMerge E3-Series devices allow Unrestricted File Upload.nortekcontrol · linear emerge elite firmwareEPSS70%2 exploitsPublished Jul 2, 2019
- CVE-2019-7276Critical 9.8Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console.optergy · enterpriseEPSS93%2 exploitsPublished Jul 1, 2019
- CVE-2019-1620Critical 9.8A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to upload arbitrary files on an affected device.cisco · data center network managerEPSS84%2 exploitsPublished Jun 27, 2019
- CVE-2019-1619Critical 9.8A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device.cisco · data center network managerEPSS83%2 exploitsPublished Jun 27, 2019
- CVE-2019-12928Critical 9.8The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remote attacker to achieve code execution, denial of service, or information disclosure by sending a crafted QMP command to the listening server.qemu · qemuEPSS23%1 exploitPublished Jun 24, 2019
- CVE-2019-2729Critical 9.8Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server.oracle · weblogic serverEPSS89%2 exploitsPublished Jun 19, 2019
- CVE-2019-12780Critical 9.8The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the SmartDevURL argument to the SetSmartDevInfo action.belkin · crock-pot smart slow cooker with wemo firmwareEPSS71%2 exploitsPublished Jun 10, 2019
- CVE-2019-12196Critical 9.8A SQL injection vulnerability in /client/api/json/v2/nfareports/compareReport in Zoho ManageEngine NetFlow Analyzer 12.3 allows attackers to execute arbitrary SQL commands via the DeviceID parameter.zohocorp · manageengine netflow analyzerEPSS69%·Published Jun 5, 2019
- CVE-2019-11945Critical 9.8A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.hp · intelligent management centerEPSS79%·Published Jun 5, 2019
- CVE-2019-10883Critical 9.8Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow Command Injection.citrix · citrix sd-wan centerEPSS65%·Published Jun 3, 2019
- CVE-2019-10123Critical 9.8SQL Injection in Advanced InfoData Systems (AIS) ESEL-Server 67 (which is the backend for the AIS logistics mobile app) allows an anonymous attacker to execute arbitrary code in the context of the user of the MSSQL database.ais · logistic softwareEPSS66%3 exploitsPublished May 31, 2019
- CVE-2013-7285Critical 9.8Command Injection in Xstreamxstream · xstreamEPSS84%1 exploitPublished May 29, 2019
- CVE-2019-7816Critical 9.8ColdFusion versions Update 2 and earlier, Update 9 and earlier, and Update 17 and earlier have a file upload restriction bypass vulnerability.adobe · coldfusionEPSS68%·Published May 24, 2019
- CVE-2019-12314Critical 9.8Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH_INFO, as demonstrated by a cgi-bin/Maconomy/MaconomyWS.macx1.W_MCS/etc/passwd URI.deltek · maconomyEPSS84%3 exploitsPublished May 24, 2019
- CVE-2019-6814Critical 9.8A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 which could cause impact to confidentiality, integrity, and availability when a remote attacker crafts a malicious request to the encoder webUI.schneider-electric · net5500 firmwareEPSS37%2 exploitsPublished May 22, 2019
- CVE-2019-11231Critical 9.8insufficient input sanitation in the theme-edit.php file allows upload of files with arbitrary content (PHP code, for example).get-simple · getsimple cmsEPSS72%3 exploitsPublished May 22, 2019
- CVE-2019-4279Critical 9.8IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources.ibm · websphere application serverEPSS80%2 exploitsPublished May 17, 2019
- CVE-2019-1821Critical 9.8A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system.cisco · prime infrastructureEPSS98%3 exploitsPublished May 15, 2019
- CVE-2019-8387Critical 9.8MASTER IPCAMERA01 3.3.4.2103 devices allow Remote Command Execution, related to the thttpd component.barni · master ip camera01 firmwareEPSS56%3 exploitsPublished May 8, 2019
- CVE-2019-5434Critical 9.8An attacker could send a specifically crafted payload to the XML-RPC invocation script and trigger the unserialize() call on the "what" parameter in the "openads.spc" RPC method.revive-sas · revive adserverEPSS57%1 exploitPublished May 6, 2019
- CVE-2017-18371Critical 9.8The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username supervisor and password zyad1234.zyxel · p660hn-t1a v1 firmwareEPSS23%1 exploitPublished May 2, 2019
- CVE-2017-18369Critical 9.8The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user.billion · 5200w-t firmwareEPSS68%1 exploitPublished May 2, 2019
- CVE-2019-11577Critical 9.8dhcpcd before 7.2.1 contains a buffer overflow in dhcp6_findna in dhcp6.c when reading NA/TA addresses.dhcpcd project · dhcpcdEPSS53%·Published Apr 28, 2019
- CVE-2019-7214Critical 9.8SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data.smartertools · smartermailEPSS85%2 exploitsPublished Apr 24, 2019
- CVE-2019-7304Critical 9.8Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root.canonical · snapdEPSS61%2 exploitsPublished Apr 23, 2019
- CVE-2019-9733Critical 9.8By default, the access-admin account is used to reset the password of the admin account in case an administrator gets locked out from the Artifactory console.jfrog · artifactoryEPSS54%1 exploitPublished Apr 11, 2019
- CVE-2018-19300Critical 9.8On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware version 1.02v02, DWR-116 (A1) before firmware version 1.06b03, DWR-512 (B1) before firmware version 2.02b01, DWR-711 (A1) through firmware version…d-link · dap-1530 firmwareEPSS74%·Published Apr 11, 2019
- CVE-2019-11072Critical 9.8lighttpd before 1.4.54 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a malicious HTTP GET request, as demonstrated by mishandling of /%2F?lighttpd · lighttpdEPSS74%·Published Apr 10, 2019
- CVE-2019-0726Critical 9.8A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'.microsoft · windows 10EPSS54%·Published Apr 8, 2019
- CVE-2019-0698Critical 9.8A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'.microsoft · windows 10EPSS63%·Published Apr 8, 2019
- CVE-2019-6553Critical 9.8An input validation issue in a .dll file of RSLinx Classic where the data in a Forward Open service request is passed to a fixed size buffer, allowing an attacker to exploit a stack-based buffer overflow condition.rockwellautomation · rslinxEPSS66%·Published Apr 4, 2019
- CVE-2019-10692Critical 9.8In the wp-google-maps plugin before 7.11.18 for WordPress, includes/class.rest-api.php in the REST API does not sanitize field names before a SELECT statement.codecabin · wp go mapsEPSS77%1 exploitPublished Apr 2, 2019
- CVE-2017-18365Critical 9.8The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated remote attackers to execute arbitrary code.github · githubEPSS21%1 exploitPublished Mar 28, 2019
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-16724 | File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler (SEH) based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331. upredsun · file sharing wizard | Critical 9.8 | 72% | 2 exploits | |
| CVE-2019-5485 | Command Injection in gitlabhook gitlabhook project · gitlabhook | Critical 10.0 | 59% | 1 exploit | |
| CVE-2019-11500 | In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings. dovecot · dovecot | Critical 9.8 | 62% | · | |
| CVE-2019-1937 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to acquire a valid session token with administrator… cisco · ucs director | Critical 9.8 | 76% | 3 exploits | |
| CVE-2019-1935 | A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to log in to the CLI of an affected system by using the SCP User account (scpuser), which… cisco · ucs director | Critical 9.8 | 83% | 3 exploits | |
| CVE-2019-9851 | LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. libreoffice · libreoffice | Critical 9.8 | 78% | 2 exploits | |
| CVE-2019-1181 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. microsoft · remote desktop | Critical 9.8 | 76% | · | |
| CVE-2019-12255 | Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). windriver · vxworks | Critical 9.8 | 75% | 2 exploits | |
| CVE-2019-13101 | An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. dlink · dir-600m firmware | Critical 9.8 | 67% | 1 exploit | |
| CVE-2019-10173 | Deserialization of Untrusted Data and Code Injection in xstream xstream · xstream | Critical 9.8 | 95% | · | |
| CVE-2019-12815 | An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306. proftpd · proftpd | Critical 9.8 | 58% | · | |
| CVE-2019-12725 | Zeroshell 3.9.0 is prone to a remote command execution vulnerability. zeroshell · zeroshell | Critical 9.8 | 90% | 2 exploits | |
| CVE-2019-9848 | LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc. libreoffice · libreoffice | Critical 9.8 | 29% | 1 exploit | |
| CVE-2019-13373 | Input does not get validated and arbitrary SQL statements can be executed in the database via the /web/Public/Conn.php parameter dbSQL. dlink · central wifimanager | Critical 9.8 | 68% | · | |
| CVE-2019-13372 | /web/Lib/Action/IndexAction.class.php in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 allows remote attackers to execute arbitrary PHP code via a cookie because a cookie's username field allows eval injection, and an empty password bypasses authentication. dlink · central wifimanager | Critical 9.8 | 82% | 2 exploits | |
| CVE-2017-8229 | Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administrative credentials. amcrest · ipm-721s firmware | Critical 9.8 | 74% | 1 exploit | |
| CVE-2018-11686 | The Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code execution via setup.php and change_config.php. flowpaper · flexpaper | Critical 9.8 | 53% | 1 exploit | |
| CVE-2019-7257 | Linear eMerge E3-Series devices allow Unrestricted File Upload. nortekcontrol · linear emerge elite firmware | Critical 10.0 | 70% | 2 exploits | |
| CVE-2019-7276 | Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console. optergy · enterprise | Critical 9.8 | 93% | 2 exploits | |
| CVE-2019-1620 | A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to upload arbitrary files on an affected device. cisco · data center network manager | Critical 9.8 | 84% | 2 exploits | |
| CVE-2019-1619 | A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. cisco · data center network manager | Critical 9.8 | 83% | 2 exploits | |
| CVE-2019-12928 | The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remote attacker to achieve code execution, denial of service, or information disclosure by sending a crafted QMP command to the listening server. qemu · qemu | Critical 9.8 | 23% | 1 exploit | |
| CVE-2019-2729 | Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. oracle · weblogic server | Critical 9.8 | 89% | 2 exploits | |
| CVE-2019-12780 | The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the SmartDevURL argument to the SetSmartDevInfo action. belkin · crock-pot smart slow cooker with wemo firmware | Critical 9.8 | 71% | 2 exploits | |
| CVE-2019-12196 | A SQL injection vulnerability in /client/api/json/v2/nfareports/compareReport in Zoho ManageEngine NetFlow Analyzer 12.3 allows attackers to execute arbitrary SQL commands via the DeviceID parameter. zohocorp · manageengine netflow analyzer | Critical 9.8 | 69% | · | |
| CVE-2019-11945 | A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09. hp · intelligent management center | Critical 9.8 | 79% | · | |
| CVE-2019-10883 | Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow Command Injection. citrix · citrix sd-wan center | Critical 9.8 | 65% | · | |
| CVE-2019-10123 | SQL Injection in Advanced InfoData Systems (AIS) ESEL-Server 67 (which is the backend for the AIS logistics mobile app) allows an anonymous attacker to execute arbitrary code in the context of the user of the MSSQL database. ais · logistic software | Critical 9.8 | 66% | 3 exploits | |
| CVE-2013-7285 | Command Injection in Xstream xstream · xstream | Critical 9.8 | 84% | 1 exploit | |
| CVE-2019-7816 | ColdFusion versions Update 2 and earlier, Update 9 and earlier, and Update 17 and earlier have a file upload restriction bypass vulnerability. adobe · coldfusion | Critical 9.8 | 68% | · | |
| CVE-2019-12314 | Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH_INFO, as demonstrated by a cgi-bin/Maconomy/MaconomyWS.macx1.W_MCS/etc/passwd URI. deltek · maconomy | Critical 9.8 | 84% | 3 exploits | |
| CVE-2019-6814 | A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 which could cause impact to confidentiality, integrity, and availability when a remote attacker crafts a malicious request to the encoder webUI. schneider-electric · net5500 firmware | Critical 9.8 | 37% | 2 exploits | |
| CVE-2019-11231 | insufficient input sanitation in the theme-edit.php file allows upload of files with arbitrary content (PHP code, for example). get-simple · getsimple cms | Critical 9.8 | 72% | 3 exploits | |
| CVE-2019-4279 | IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources. ibm · websphere application server | Critical 9.8 | 80% | 2 exploits | |
| CVE-2019-1821 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. cisco · prime infrastructure | Critical 9.8 | 98% | 3 exploits | |
| CVE-2019-8387 | MASTER IPCAMERA01 3.3.4.2103 devices allow Remote Command Execution, related to the thttpd component. barni · master ip camera01 firmware | Critical 9.8 | 56% | 3 exploits | |
| CVE-2019-5434 | An attacker could send a specifically crafted payload to the XML-RPC invocation script and trigger the unserialize() call on the "what" parameter in the "openads.spc" RPC method. revive-sas · revive adserver | Critical 9.8 | 57% | 1 exploit | |
| CVE-2017-18371 | The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username supervisor and password zyad1234. zyxel · p660hn-t1a v1 firmware | Critical 9.8 | 23% | 1 exploit | |
| CVE-2017-18369 | The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. billion · 5200w-t firmware | Critical 9.8 | 68% | 1 exploit | |
| CVE-2019-11577 | dhcpcd before 7.2.1 contains a buffer overflow in dhcp6_findna in dhcp6.c when reading NA/TA addresses. dhcpcd project · dhcpcd | Critical 9.8 | 53% | · | |
| CVE-2019-7214 | SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. smartertools · smartermail | Critical 9.8 | 85% | 2 exploits | |
| CVE-2019-7304 | Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root. canonical · snapd | Critical 9.8 | 61% | 2 exploits | |
| CVE-2019-9733 | By default, the access-admin account is used to reset the password of the admin account in case an administrator gets locked out from the Artifactory console. jfrog · artifactory | Critical 9.8 | 54% | 1 exploit | |
| CVE-2018-19300 | On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware version 1.02v02, DWR-116 (A1) before firmware version 1.06b03, DWR-512 (B1) before firmware version 2.02b01, DWR-711 (A1) through firmware version… d-link · dap-1530 firmware | Critical 9.8 | 74% | · | |
| CVE-2019-11072 | lighttpd before 1.4.54 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a malicious HTTP GET request, as demonstrated by mishandling of /%2F? lighttpd · lighttpd | Critical 9.8 | 74% | · | |
| CVE-2019-0726 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. microsoft · windows 10 | Critical 9.8 | 54% | · | |
| CVE-2019-0698 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. microsoft · windows 10 | Critical 9.8 | 63% | · | |
| CVE-2019-6553 | An input validation issue in a .dll file of RSLinx Classic where the data in a Forward Open service request is passed to a fixed size buffer, allowing an attacker to exploit a stack-based buffer overflow condition. rockwellautomation · rslinx | Critical 9.8 | 66% | · | |
| CVE-2019-10692 | In the wp-google-maps plugin before 7.11.18 for WordPress, includes/class.rest-api.php in the REST API does not sanitize field names before a SELECT statement. codecabin · wp go maps | Critical 9.8 | 77% | 1 exploit | |
| CVE-2017-18365 | The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated remote attackers to execute arbitrary code. github · github | Critical 9.8 | 21% | 1 exploit |
Showing 701–750 of 1,642
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.