Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
1,474 vulnerabilities · highest exploit probability first
- CVE-2013-0156High 7.5actionpack Improper Input Validation vulnerabilityrubyonrails · railsEPSS99%6 exploitsPublished Oct 24, 2017
- CVE-2013-0333High 7.5activesupport in Rails vulnerable to incorrect data conversionrubyonrails · railsEPSS96%2 exploitsPublished Oct 24, 2017
- CVE-2016-2098High 7.3actionpack allows remote code execution via application's unrestricted use of render methodrubyonrails · railsEPSS81%1 exploitPublished Oct 24, 2017
- CVE-2017-13772High 8.8Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arbitrary code via the (1) ping_addr parameter to PingIframeRpm.htm or (2) dnsserver2 parameter to WanStaticIpV6CfgRpm.htm.tp-link · wr940n firmwareEPSS51%2 exploitsPublished Oct 23, 2017
- CVE-2014-9118High 8.8The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddr parameter to zhnping.cmd.dasanzhone · znid 2426a firmwareEPSS53%3 exploitsPublished Oct 17, 2017
- CVE-2017-11811High 7.5ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory…microsoft · chakracoreEPSS65%2 exploitsPublished Oct 13, 2017
- CVE-2017-11810High 7.5Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current…microsoft · internet explorerEPSS55%2 exploitsPublished Oct 13, 2017
- CVE-2017-11809High 7.5ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory…microsoft · chakracoreEPSS68%1 exploitPublished Oct 13, 2017
- CVE-2017-11802High 7.5ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory…microsoft · chakracoreEPSS69%1 exploitPublished Oct 13, 2017
- CVE-2017-11799High 7.5ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory…microsoft · chakracoreEPSS64%1 exploitPublished Oct 13, 2017
- CVE-2015-2856High 7.5Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA_9_11_210 allows remote attackers to read arbitrary files via a ..accellion · file transfer applianceEPSS57%·Published Oct 10, 2017
- CVE-2017-1000117High 8.8A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed.git-scm · gitEPSS78%2 exploitsPublished Oct 5, 2017
- CVE-2017-1000112High 7.0Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch.linux · linux kernelEPSS21%4 exploitsPublished Oct 5, 2017
- CVE-2017-14496High 7.5Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request.thekelleys · dnsmasqEPSS66%1 exploitPublished Oct 3, 2017
- CVE-2017-14495High 7.5Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation.thekelleys · dnsmasqEPSS84%1 exploitPublished Oct 3, 2017
- CVE-2017-13704High 7.5In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value.thekelleys · dnsmasqEPSS65%·Published Oct 3, 2017
- CVE-2017-6090High 8.8Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logos_clients/.phpcollab · phpcollabEPSS96%5 exploitsPublished Oct 2, 2017
- CVE-2017-14849High 7.5Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change to ".." handling was incompatible with the pathname validation used by unspecified community modules.nodejs · node.jsEPSS54%·Published Sep 28, 2017
- CVE-2015-4074High 7.5Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla!helpdesk pro project · helpdesk proEPSS57%3 exploitsPublished Sep 20, 2017
- CVE-2017-9798High 7.5Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed.apache · http serverEPSS95%3 exploitsPublished Sep 18, 2017
- CVE-2017-8755High 7.5Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory…microsoft · edgeEPSS71%2 exploitsPublished Sep 12, 2017
- CVE-2017-8751High 7.5Microsoft Edge in Microsoft Windows 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability".microsoft · edgeEPSS50%2 exploitsPublished Sep 12, 2017
- CVE-2017-8740High 7.5Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS72%2 exploitsPublished Sep 12, 2017
- CVE-2017-8734High 7.5Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption…microsoft · edgeEPSS53%2 exploitsPublished Sep 12, 2017
- CVE-2017-8731High 7.5Microsoft Edge in Microsoft Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability".microsoft · edgeEPSS52%2 exploitsPublished Sep 12, 2017
- CVE-2017-8729High 7.5Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS72%2 exploitsPublished Sep 12, 2017
- CVE-2017-11764High 7.5Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…microsoft · edgeEPSS64%2 exploitsPublished Sep 12, 2017
- CVE-2017-1000083High 7.8backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a…gnome · evinceEPSS51%5 exploitsPublished Sep 5, 2017
- CVE-2017-14098High 7.5In the pjsip channel driver (res_pjsip) in Asterisk 13.x before 13.17.1 and 14.x before 14.6.1, a carefully crafted tel URI in a From, To, or Contact header could cause Asterisk to crash.digium · asteriskEPSS50%·Published Sep 2, 2017
- CVE-2015-5958High 8.8phpFileManager 0.9.8 allows remote attackers to execute arbitrary commands via a crafted URL.phpfilemanager project · phpfilemanagerEPSS27%2 exploitsPublished Aug 31, 2017
- CVE-2014-5301High 8.8Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4.manageengine · assetexplorerEPSS78%5 exploitsPublished Aug 28, 2017
- CVE-2017-8671High 7.5Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka…microsoft · edgeEPSS69%1 exploitPublished Aug 8, 2017
- CVE-2017-8670High 7.5Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting…microsoft · edgeEPSS69%1 exploitPublished Aug 8, 2017
- CVE-2017-8657High 7.5Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka…microsoft · edgeEPSS55%1 exploitPublished Aug 8, 2017
- CVE-2017-8656High 7.5Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting…microsoft · edgeEPSS69%1 exploitPublished Aug 8, 2017
- CVE-2017-8646High 7.5Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine…microsoft · edgeEPSS69%1 exploitPublished Aug 8, 2017
- CVE-2017-8645High 7.5Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine…microsoft · edgeEPSS69%1 exploitPublished Aug 8, 2017
- CVE-2017-8641High 7.5Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to…microsoft · edgeEPSS72%1 exploitPublished Aug 8, 2017
- CVE-2017-8640High 7.5Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting…microsoft · edgeEPSS69%1 exploitPublished Aug 8, 2017
- CVE-2017-8636High 7.5Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to…microsoft · edgeEPSS72%8 exploitsPublished Aug 8, 2017
- CVE-2017-8635High 7.5Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to…microsoft · edgeEPSS56%2 exploitsPublished Aug 8, 2017
- CVE-2017-8634High 7.5Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption…microsoft · edgeEPSS70%2 exploitsPublished Aug 8, 2017
- CVE-2017-8620High 8.1Windows Search in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it improperly handles objects in…microsoft · windows 10EPSS57%·Published Aug 8, 2017
- CVE-2016-7976High 8.8The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams.artifex · ghostscriptEPSS23%1 exploitPublished Aug 7, 2017
- CVE-2017-11392High 8.8Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations.trendmicro · interscan messaging security virtual applianceEPSS34%1 exploitPublished Aug 3, 2017
- CVE-2017-11391High 8.8Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations.trendmicro · interscan messaging security virtual applianceEPSS62%1 exploitPublished Aug 3, 2017
- CVE-2017-7442High 8.8Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences.gonitro · nitro proEPSS41%2 exploitsPublished Aug 3, 2017
- CVE-2017-7659High 7.5A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NULL pointer and crash the server process.apache · http serverEPSS54%·Published Jul 26, 2017
- CVE-2017-1000028High 7.5Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request.oracle · glassfish serverEPSS99%5 exploitsPublished Jul 17, 2017
- CVE-2017-7529High 7.5Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.f5 · nginxEPSS63%·Published Jul 13, 2017
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2013-0156 | actionpack Improper Input Validation vulnerability rubyonrails · rails | High 7.5 | 99% | 6 exploits | |
| CVE-2013-0333 | activesupport in Rails vulnerable to incorrect data conversion rubyonrails · rails | High 7.5 | 96% | 2 exploits | |
| CVE-2016-2098 | actionpack allows remote code execution via application's unrestricted use of render method rubyonrails · rails | High 7.3 | 81% | 1 exploit | |
| CVE-2017-13772 | Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arbitrary code via the (1) ping_addr parameter to PingIframeRpm.htm or (2) dnsserver2 parameter to WanStaticIpV6CfgRpm.htm. tp-link · wr940n firmware | High 8.8 | 51% | 2 exploits | |
| CVE-2014-9118 | The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddr parameter to zhnping.cmd. dasanzhone · znid 2426a firmware | High 8.8 | 53% | 3 exploits | |
| CVE-2017-11811 | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory… microsoft · chakracore | High 7.5 | 65% | 2 exploits | |
| CVE-2017-11810 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current… microsoft · internet explorer | High 7.5 | 55% | 2 exploits | |
| CVE-2017-11809 | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory… microsoft · chakracore | High 7.5 | 68% | 1 exploit | |
| CVE-2017-11802 | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory… microsoft · chakracore | High 7.5 | 69% | 1 exploit | |
| CVE-2017-11799 | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory… microsoft · chakracore | High 7.5 | 64% | 1 exploit | |
| CVE-2015-2856 | Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA_9_11_210 allows remote attackers to read arbitrary files via a .. accellion · file transfer appliance | High 7.5 | 57% | · | |
| CVE-2017-1000117 | A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. git-scm · git | High 8.8 | 78% | 2 exploits | |
| CVE-2017-1000112 | Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. linux · linux kernel | High 7.0 | 21% | 4 exploits | |
| CVE-2017-14496 | Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request. thekelleys · dnsmasq | High 7.5 | 66% | 1 exploit | |
| CVE-2017-14495 | Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation. thekelleys · dnsmasq | High 7.5 | 84% | 1 exploit | |
| CVE-2017-13704 | In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. thekelleys · dnsmasq | High 7.5 | 65% | · | |
| CVE-2017-6090 | Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logos_clients/. phpcollab · phpcollab | High 8.8 | 96% | 5 exploits | |
| CVE-2017-14849 | Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change to ".." handling was incompatible with the pathname validation used by unspecified community modules. nodejs · node.js | High 7.5 | 54% | · | |
| CVE-2015-4074 | Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! helpdesk pro project · helpdesk pro | High 7.5 | 57% | 3 exploits | |
| CVE-2017-9798 | Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed. apache · http server | High 7.5 | 95% | 3 exploits | |
| CVE-2017-8755 | Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory… microsoft · edge | High 7.5 | 71% | 2 exploits | |
| CVE-2017-8751 | Microsoft Edge in Microsoft Windows 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 50% | 2 exploits | |
| CVE-2017-8740 | Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 72% | 2 exploits | |
| CVE-2017-8734 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption… microsoft · edge | High 7.5 | 53% | 2 exploits | |
| CVE-2017-8731 | Microsoft Edge in Microsoft Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 52% | 2 exploits | |
| CVE-2017-8729 | Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 72% | 2 exploits | |
| CVE-2017-11764 | Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption… microsoft · edge | High 7.5 | 64% | 2 exploits | |
| CVE-2017-1000083 | backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a… gnome · evince | High 7.8 | 51% | 5 exploits | |
| CVE-2017-14098 | In the pjsip channel driver (res_pjsip) in Asterisk 13.x before 13.17.1 and 14.x before 14.6.1, a carefully crafted tel URI in a From, To, or Contact header could cause Asterisk to crash. digium · asterisk | High 7.5 | 50% | · | |
| CVE-2015-5958 | phpFileManager 0.9.8 allows remote attackers to execute arbitrary commands via a crafted URL. phpfilemanager project · phpfilemanager | High 8.8 | 27% | 2 exploits | |
| CVE-2014-5301 | Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4. manageengine · assetexplorer | High 8.8 | 78% | 5 exploits | |
| CVE-2017-8671 | Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka… microsoft · edge | High 7.5 | 69% | 1 exploit | |
| CVE-2017-8670 | Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting… microsoft · edge | High 7.5 | 69% | 1 exploit | |
| CVE-2017-8657 | Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka… microsoft · edge | High 7.5 | 55% | 1 exploit | |
| CVE-2017-8656 | Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting… microsoft · edge | High 7.5 | 69% | 1 exploit | |
| CVE-2017-8646 | Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine… microsoft · edge | High 7.5 | 69% | 1 exploit | |
| CVE-2017-8645 | Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine… microsoft · edge | High 7.5 | 69% | 1 exploit | |
| CVE-2017-8641 | Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to… microsoft · edge | High 7.5 | 72% | 1 exploit | |
| CVE-2017-8640 | Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting… microsoft · edge | High 7.5 | 69% | 1 exploit | |
| CVE-2017-8636 | Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to… microsoft · edge | High 7.5 | 72% | 8 exploits | |
| CVE-2017-8635 | Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to… microsoft · edge | High 7.5 | 56% | 2 exploits | |
| CVE-2017-8634 | Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption… microsoft · edge | High 7.5 | 70% | 2 exploits | |
| CVE-2017-8620 | Windows Search in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it improperly handles objects in… microsoft · windows 10 | High 8.1 | 57% | · | |
| CVE-2016-7976 | The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams. artifex · ghostscript | High 8.8 | 23% | 1 exploit | |
| CVE-2017-11392 | Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. trendmicro · interscan messaging security virtual appliance | High 8.8 | 34% | 1 exploit | |
| CVE-2017-11391 | Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. trendmicro · interscan messaging security virtual appliance | High 8.8 | 62% | 1 exploit | |
| CVE-2017-7442 | Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences. gonitro · nitro pro | High 8.8 | 41% | 2 exploits | |
| CVE-2017-7659 | A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NULL pointer and crash the server process. apache · http server | High 7.5 | 54% | · | |
| CVE-2017-1000028 | Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request. oracle · glassfish server | High 7.5 | 99% | 5 exploits | |
| CVE-2017-7529 | Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request. f5 · nginx | High 7.5 | 63% | · |
Showing 901–950 of 1,474
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.