Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 19, 2026
780 vulnerabilities · highest exploit probability first
- CVE-2002-1744Medium 5.0Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbitrary files via a hex-encoded "%c0%ae%c0%ae" string, which is the Unicode representation for ".." (dot dot).microsoft · internet information servicesEPSS65%1 exploitPublished Dec 31, 2002
- CVE-2002-0840Medium 6.8Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host:…apache · http serverEPSS95%1 exploitPublished Oct 11, 2002
- CVE-2002-0654Medium 5.0Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a request for a .var file, which leaks the pathname in the resulting error message, or (2) via an error message that occurs when a script (child…apache · http serverEPSS59%1 exploitPublished Sep 5, 2002
- CVE-2002-0563Medium 5.0The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authentication, including Dynamic Monitoring Services (1) dms0, (2) dms/DMSDump, (3) servlet/DMSDump, (4) servlet/Spy, (5) soap/servlet/Spy, and…oracle · application serverEPSS51%·Published Jul 3, 2002
- CVE-2002-0072Medium 5.0The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server (IIS) 4.0, 5.0, and 5.1 does not properly handle the error condition when a long URL is provided, which allows remote attackers to cause a denial of service (crash) when the…microsoft · internet information serverEPSS57%·Published Apr 22, 2002
- CVE-2002-0073Medium 5.0The FTP service in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows attackers who have established an FTP session to cause a denial of service via a specially crafted status request containing glob characters.microsoft · internet information serverEPSS56%·Published Apr 22, 2002
- CVE-2001-1013Medium 5.0Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server.redhat · linuxEPSS66%1 exploitPublished Feb 2, 2002
- CVE-2001-1217Medium 5.0Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive information via a double encoded URL with ..oracle · application serverEPSS54%·Published Dec 21, 2001
- CVE-2001-0540Medium 5.0Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed Remote Desktop Protocol (RDP) requests to port 3389.microsoft · terminal serverEPSS71%·Published Oct 30, 2001
- CVE-2001-0731Medium 5.0Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the "M=D" query string.apache · http serverEPSS57%1 exploitPublished Jul 9, 2001
- CVE-2001-1243Medium 5.0Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an ASP program that uses Scripting.FileSystemObject to open a file with an MS-DOS device name, or (2) remotely injecting the…microsoft · internet information serverEPSS71%2 exploitsPublished Jul 4, 2001
- CVE-2001-0151Medium 5.0IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests.microsoft · internet information servicesEPSS68%1 exploitPublished Jun 2, 2001
- CVE-2001-0925Medium 5.0The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path that contains many / (slash) characters, which causes the path to be mishandled by (1) mod_negotiation, (2)…apache · http serverEPSS75%4 exploitsPublished Mar 12, 2001
- CVE-2000-0979Medium 6.4File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka…microsoft · windows 95EPSS75%2 exploitsPublished Dec 19, 2000
- CVE-2000-0869Medium 5.0The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method.suse · suse linuxEPSS51%1 exploitPublished Nov 14, 2000
- CVE-2000-0778Medium 5.0IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, aka the "Specialized Header" vulnerability.microsoft · internet information servicesEPSS87%2 exploitsPublished Oct 20, 2000
- CVE-2000-0760Medium 6.4The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension.apache · tomcatEPSS62%1 exploitPublished Oct 20, 2000
- CVE-2000-0630Medium 5.0IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability.microsoft · internet information serverEPSS68%1 exploitPublished Jul 17, 2000
- CVE-2000-0665Medium 5.0GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.gamsoft · telsrvEPSS51%2 exploitsPublished Jul 17, 2000
- CVE-2000-0574Medium 5.0FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary…openbsd · ftpdEPSS59%1 exploitPublished Jul 7, 2000
- CVE-2000-0408Medium 5.0IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extension Data in URL" vulnerability.microsoft · internet information serverEPSS58%1 exploitPublished May 11, 2000
- CVE-2000-0302Medium 5.0Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL.microsoft · index serverEPSS79%1 exploitPublished Mar 31, 2000
- CVE-2000-0246Medium 5.0IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.microsoft · commercial internet systemEPSS80%1 exploitPublished Mar 30, 2000
- CVE-1999-1551Medium 5.0Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL.ipswitch · imailEPSS72%1 exploitPublished Mar 2, 1999
- CVE-1999-0278Medium 5.0In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL.microsoft · internet information serverEPSS65%1 exploitPublished Jun 1, 1998
- CVE-1999-0513Medium 5.0ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.freebsd · freebsdEPSS71%1 exploitPublished Jan 5, 1998
- CVE-1999-0016Medium 5.0Land IP denial of service.hp · hp-uxEPSS96%5 exploitsPublished Dec 1, 1997
- CVE-1999-0191Medium 6.4IIS newdsn.exe CGI script allows remote users to overwrite files.microsoft · internet information serverEPSS53%1 exploitPublished Sep 1, 1997
- CVE-1999-0128Medium 5.0Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.ibm · sngEPSS75%1 exploitPublished Dec 18, 1996
- CVE-1999-0209Medium 5.0The SunView (SunTools) selection_svc facility allows remote users to read files.sun · sunosEPSS49%4 exploitsPublished Aug 14, 1990
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2002-1744 | Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbitrary files via a hex-encoded "%c0%ae%c0%ae" string, which is the Unicode representation for ".." (dot dot). microsoft · internet information services | Medium 5.0 | 65% | 1 exploit | |
| CVE-2002-0840 | Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host:… apache · http server | Medium 6.8 | 95% | 1 exploit | |
| CVE-2002-0654 | Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a request for a .var file, which leaks the pathname in the resulting error message, or (2) via an error message that occurs when a script (child… apache · http server | Medium 5.0 | 59% | 1 exploit | |
| CVE-2002-0563 | The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authentication, including Dynamic Monitoring Services (1) dms0, (2) dms/DMSDump, (3) servlet/DMSDump, (4) servlet/Spy, (5) soap/servlet/Spy, and… oracle · application server | Medium 5.0 | 51% | · | |
| CVE-2002-0072 | The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server (IIS) 4.0, 5.0, and 5.1 does not properly handle the error condition when a long URL is provided, which allows remote attackers to cause a denial of service (crash) when the… microsoft · internet information server | Medium 5.0 | 57% | · | |
| CVE-2002-0073 | The FTP service in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows attackers who have established an FTP session to cause a denial of service via a specially crafted status request containing glob characters. microsoft · internet information server | Medium 5.0 | 56% | · | |
| CVE-2001-1013 | Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server. redhat · linux | Medium 5.0 | 66% | 1 exploit | |
| CVE-2001-1217 | Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive information via a double encoded URL with .. oracle · application server | Medium 5.0 | 54% | · | |
| CVE-2001-0540 | Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed Remote Desktop Protocol (RDP) requests to port 3389. microsoft · terminal server | Medium 5.0 | 71% | · | |
| CVE-2001-0731 | Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the "M=D" query string. apache · http server | Medium 5.0 | 57% | 1 exploit | |
| CVE-2001-1243 | Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an ASP program that uses Scripting.FileSystemObject to open a file with an MS-DOS device name, or (2) remotely injecting the… microsoft · internet information server | Medium 5.0 | 71% | 2 exploits | |
| CVE-2001-0151 | IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests. microsoft · internet information services | Medium 5.0 | 68% | 1 exploit | |
| CVE-2001-0925 | The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path that contains many / (slash) characters, which causes the path to be mishandled by (1) mod_negotiation, (2)… apache · http server | Medium 5.0 | 75% | 4 exploits | |
| CVE-2000-0979 | File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka… microsoft · windows 95 | Medium 6.4 | 75% | 2 exploits | |
| CVE-2000-0869 | The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method. suse · suse linux | Medium 5.0 | 51% | 1 exploit | |
| CVE-2000-0778 | IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, aka the "Specialized Header" vulnerability. microsoft · internet information services | Medium 5.0 | 87% | 2 exploits | |
| CVE-2000-0760 | The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension. apache · tomcat | Medium 6.4 | 62% | 1 exploit | |
| CVE-2000-0630 | IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability. microsoft · internet information server | Medium 5.0 | 68% | 1 exploit | |
| CVE-2000-0665 | GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username. gamsoft · telsrv | Medium 5.0 | 51% | 2 exploits | |
| CVE-2000-0574 | FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary… openbsd · ftpd | Medium 5.0 | 59% | 1 exploit | |
| CVE-2000-0408 | IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extension Data in URL" vulnerability. microsoft · internet information server | Medium 5.0 | 58% | 1 exploit | |
| CVE-2000-0302 | Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL. microsoft · index server | Medium 5.0 | 79% | 1 exploit | |
| CVE-2000-0246 | IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability. microsoft · commercial internet system | Medium 5.0 | 80% | 1 exploit | |
| CVE-1999-1551 | Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL. ipswitch · imail | Medium 5.0 | 72% | 1 exploit | |
| CVE-1999-0278 | In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL. microsoft · internet information server | Medium 5.0 | 65% | 1 exploit | |
| CVE-1999-0513 | ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service. freebsd · freebsd | Medium 5.0 | 71% | 1 exploit | |
| CVE-1999-0016 | Land IP denial of service. hp · hp-ux | Medium 5.0 | 96% | 5 exploits | |
| CVE-1999-0191 | IIS newdsn.exe CGI script allows remote users to overwrite files. microsoft · internet information server | Medium 6.4 | 53% | 1 exploit | |
| CVE-1999-0128 | Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death. ibm · sng | Medium 5.0 | 75% | 1 exploit | |
| CVE-1999-0209 | The SunView (SunTools) selection_svc facility allows remote users to read files. sun · sunos | Medium 5.0 | 49% | 4 exploits |
Showing 751–780 of 780
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.