Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
1,642 vulnerabilities · highest exploit probability first
- CVE-2015-3829Critical 10.0Off-by-one error in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption) via crafted MPEG-4 covr…google · androidEPSS90%·Published Sep 30, 2015
- CVE-2015-3828Critical 10.0The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not enforce a minimum size for UTF-16 strings containing a Byte Order Mark (BOM), which allows remote attackers to execute arbitrary code or cause a denial…google · androidEPSS85%·Published Sep 30, 2015
- CVE-2015-3827Critical 9.3The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not validate the relationship between chunk sizes and skip sizes, which allows remote attackers to execute arbitrary code or cause a denial of service (integer…google · androidEPSS81%·Published Sep 30, 2015
- CVE-2015-3824Critical 10.0The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly restrict size addition, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption)…google · androidEPSS90%·Published Sep 30, 2015
- CVE-2015-1539Critical 10.0Multiple integer underflows in the ESDS::parseESDescriptor function in ESDS.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code via crafted ESDS atoms, aka internal bug 20139950, a related issue to CVE-2015-4493.google · androidEPSS86%·Published Sep 30, 2015
- CVE-2015-5082Critical 10.0Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NEW_PASSWORD_1 or (2) NEW_PASSWORD_2 parameter to cgi-bin/chpasswd.cgi.endian firewall · endian firewallEPSS70%8 exploitsPublished Sep 28, 2015
- CVE-2015-2509Critical 9.3Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted Media Center link (mcl) file, aka "Windows Media Center RCE Vulnerability."microsoft · windows 7EPSS71%4 exploitsPublished Sep 8, 2015
- CVE-2015-1171Critical 10.0Stack-based buffer overflow in GSM SIM Utility (aka SIM Card Editor) 6.6 allows remote attackers to execute arbitrary code via a long entry in a .sms file.gsm · sim card editorEPSS63%3 exploitsPublished Aug 28, 2015
- CVE-2015-5560Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS66%1 exploitPublished Aug 12, 2015
- CVE-2015-5133Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS51%1 exploitPublished Aug 12, 2015
- CVE-2015-5132Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS51%1 exploitPublished Aug 12, 2015
- CVE-2015-5131Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS51%1 exploitPublished Aug 12, 2015
- CVE-2015-5134Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS50%1 exploitPublished Aug 12, 2015
- CVE-2015-5130Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS50%1 exploitPublished Aug 12, 2015
- CVE-2015-5127Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS50%1 exploitPublished Aug 12, 2015
- CVE-2015-6835Critical 9.8php: use-after-free vulnerability in session deserializerphp · phpEPSS36%2 exploitsPublished Aug 9, 2015
- CVE-2015-6522Critical 9.8WP Symposium <= 15.8 - Unauthenticated SQL Injectionwpsymposium · wp symposiumEPSS74%2 exploitsPublished Aug 8, 2015
- CVE-2015-5371Critical 10.0The AuthenticationFilter class in SolarWinds Storage Manager allows remote attackers to upload and execute arbitrary scripts via unspecified vectors.solarwinds · storage managerEPSS93%1 exploitPublished Jul 6, 2015
- CVE-2015-2797Critical 10.0Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the redirect parameter to cgi-bin/login.airties · air firmwareEPSS78%5 exploitsPublished Jun 19, 2015
- CVE-2015-3105Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-11adobe · airEPSS90%2 exploitsPublished Jun 9, 2015
- CVE-2015-0779Critical 10.0Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11.3.2 allows remote attackers to execute arbitrary code via a crafted directory name in the uid parameter, in conjunction with a WAR filename in the filename…novell · zenworks configuration managementEPSS74%3 exploitsPublished Jun 7, 2015
- CVE-2010-5324Critical 10.0Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to execute arbitrary code via a zenworks-fileupload request with a crafted directory name in the type…novell · zenworks configuration managementEPSS72%2 exploitsPublished Jun 7, 2015
- CVE-2014-9727Critical 10.0AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm.avm · fritz\!boxEPSS72%3 exploitsPublished May 29, 2015
- CVE-2015-2845Critical 10.0The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arbitrary commands via the $type portion of the PATH_INFO.goautodial · goadmin ceEPSS72%4 exploitsPublished May 12, 2015
- CVE-2015-3090Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-09adobe · airEPSS83%2 exploitsPublished May 12, 2015
- CVE-2015-3087Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-09adobe · airEPSS74%1 exploitPublished May 12, 2015
- CVE-2015-3088Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-09adobe · airEPSS62%1 exploitPublished May 12, 2015
- CVE-2015-3080Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-09adobe · airEPSS57%1 exploitPublished May 12, 2015
- CVE-2015-0359Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-06adobe · flash playerEPSS92%2 exploitsPublished Apr 14, 2015
- CVE-2015-2284Critical 10.0userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbitrary code via unspecified vectors, related to client session handling.solarwinds · firewall security managerEPSS73%2 exploitsPublished Mar 24, 2015
- CVE-2015-4133Critical 9.8ReFlex Gallery » WordPress Photo Gallery < 3.1.4 - Arbitrary File Uploadreflex gallery project · reflex galleryEPSS62%5 exploitsPublished Mar 15, 2015
- CVE-2015-0336Critical 9.3flash-plugin: multiple code execution issues fixed in APSB15-05adobe · flash playerEPSS70%2 exploitsPublished Mar 12, 2015
- CVE-2015-0096Critical 9.3Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a Trojan…microsoft · windows 7EPSS71%5 exploitsPublished Mar 11, 2015
- CVE-2015-0240Critical 10.0The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted…samba · sambaEPSS88%1 exploitPublished Feb 24, 2015
- CVE-2015-2049Critical 9.0Unrestricted file upload vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension.dlink · dcs-931l firmwareEPSS67%2 exploitsPublished Feb 23, 2015
- CVE-2015-1497Critical 10.0radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execute arbitrary commands via a crafted request to TCP port 3465.persistent systems · radia client automationEPSS74%7 exploitsPublished Feb 16, 2015
- CVE-2015-0318Critical 10.0flash-plugin: multiple code execution flaws (APSB15-04)adobe · flash playerEPSS75%2 exploitsPublished Feb 4, 2015
- CVE-2015-0925Critical 9.0The client in iPass Open Mobile before 2.4.5 on Windows allows remote authenticated users to execute arbitrary code via a DLL pathname in a crafted Unicode string that is improperly handled by a subprocess reached through a named pipe, as demonstrated by a UNC share pathname.ipass · ipass open mobileEPSS52%3 exploitsPublished Jan 22, 2015
- CVE-2015-1172Critical 9.8Holding Pattern <= 0.6 - Arbitrary File Uploadholding pattern project · holding patternEPSS58%2 exploitsPublished Jan 17, 2015
- CVE-2015-0014Critical 10.0Buffer overflow in the Telnet service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted packets,…microsoft · windows 7EPSS97%·Published Jan 13, 2015
- CVE-2014-9583Critical 10.0common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and other routers, does not properly check the MAC address for a request, which allows remote attackers to bypass authentication and execute…asus · wrt firmwareEPSS80%6 exploitsPublished Jan 8, 2015
- CVE-2014-9222Critical 10.0AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability.allegrosoft · rompagerEPSS74%·Published Dec 24, 2014
- CVE-2014-10021Critical 9.8WP Symposium <= 14.11 - Arbitrary File Uploadwpsymposiumpro · wp symposiumEPSS59%4 exploitsPublished Dec 10, 2014
- CVE-2014-8423Critical 10.0Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute arbitrary commands via unknown vectors.arris · vap2500 firmwareEPSS62%2 exploitsPublished Nov 28, 2014
- CVE-2014-8420Critical 9.0The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors.sonicwall · analyzerEPSS24%1 exploitPublished Nov 25, 2014
- CVE-2014-9735Critical 9.8Slider Revolution < 3.0.96 & Showbiz Pro < 1.7.1 - Missing Authorization to Arbitrary File Uploadthemepunch · showbiz proEPSS76%2 exploitsPublished Nov 24, 2014
- CVE-2014-1635Critical 10.0Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103_WW_1.10.17m allows remote attackers to execute arbitrary code via a long string in the jump parameter.belkin · n750 wireless routerEPSS67%3 exploitsPublished Nov 12, 2014
- CVE-2014-6321Critical 10.0Schannel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via crafted packets, aka…microsoft · windows 7EPSS96%·Published Nov 11, 2014
- CVE-2014-8440Critical 10.0flash-plugin: multiple code execution flaws (APSB14-24)adobe · airEPSS82%3 exploitsPublished Nov 11, 2014
- CVE-2014-3829Critical 10.0displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) session_id or (2) template_id parameter, related to the command_line variable.merethis · centreonEPSS80%2 exploitsPublished Oct 22, 2014
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2015-3829 | Off-by-one error in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption) via crafted MPEG-4 covr… google · android | Critical 10.0 | 90% | · | |
| CVE-2015-3828 | The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not enforce a minimum size for UTF-16 strings containing a Byte Order Mark (BOM), which allows remote attackers to execute arbitrary code or cause a denial… google · android | Critical 10.0 | 85% | · | |
| CVE-2015-3827 | The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not validate the relationship between chunk sizes and skip sizes, which allows remote attackers to execute arbitrary code or cause a denial of service (integer… google · android | Critical 9.3 | 81% | · | |
| CVE-2015-3824 | The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly restrict size addition, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption)… google · android | Critical 10.0 | 90% | · | |
| CVE-2015-1539 | Multiple integer underflows in the ESDS::parseESDescriptor function in ESDS.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code via crafted ESDS atoms, aka internal bug 20139950, a related issue to CVE-2015-4493. google · android | Critical 10.0 | 86% | · | |
| CVE-2015-5082 | Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NEW_PASSWORD_1 or (2) NEW_PASSWORD_2 parameter to cgi-bin/chpasswd.cgi. endian firewall · endian firewall | Critical 10.0 | 70% | 8 exploits | |
| CVE-2015-2509 | Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted Media Center link (mcl) file, aka "Windows Media Center RCE Vulnerability." microsoft · windows 7 | Critical 9.3 | 71% | 4 exploits | |
| CVE-2015-1171 | Stack-based buffer overflow in GSM SIM Utility (aka SIM Card Editor) 6.6 allows remote attackers to execute arbitrary code via a long entry in a .sms file. gsm · sim card editor | Critical 10.0 | 63% | 3 exploits | |
| CVE-2015-5560 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 66% | 1 exploit | |
| CVE-2015-5133 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 51% | 1 exploit | |
| CVE-2015-5132 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 51% | 1 exploit | |
| CVE-2015-5131 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 51% | 1 exploit | |
| CVE-2015-5134 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 50% | 1 exploit | |
| CVE-2015-5130 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 50% | 1 exploit | |
| CVE-2015-5127 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 50% | 1 exploit | |
| CVE-2015-6835 | php: use-after-free vulnerability in session deserializer php · php | Critical 9.8 | 36% | 2 exploits | |
| CVE-2015-6522 | WP Symposium <= 15.8 - Unauthenticated SQL Injection wpsymposium · wp symposium | Critical 9.8 | 74% | 2 exploits | |
| CVE-2015-5371 | The AuthenticationFilter class in SolarWinds Storage Manager allows remote attackers to upload and execute arbitrary scripts via unspecified vectors. solarwinds · storage manager | Critical 10.0 | 93% | 1 exploit | |
| CVE-2015-2797 | Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the redirect parameter to cgi-bin/login. airties · air firmware | Critical 10.0 | 78% | 5 exploits | |
| CVE-2015-3105 | flash-plugin: multiple code execution issues fixed in APSB15-11 adobe · air | Critical 10.0 | 90% | 2 exploits | |
| CVE-2015-0779 | Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11.3.2 allows remote attackers to execute arbitrary code via a crafted directory name in the uid parameter, in conjunction with a WAR filename in the filename… novell · zenworks configuration management | Critical 10.0 | 74% | 3 exploits | |
| CVE-2010-5324 | Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to execute arbitrary code via a zenworks-fileupload request with a crafted directory name in the type… novell · zenworks configuration management | Critical 10.0 | 72% | 2 exploits | |
| CVE-2014-9727 | AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm. avm · fritz\!box | Critical 10.0 | 72% | 3 exploits | |
| CVE-2015-2845 | The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arbitrary commands via the $type portion of the PATH_INFO. goautodial · goadmin ce | Critical 10.0 | 72% | 4 exploits | |
| CVE-2015-3090 | flash-plugin: multiple code execution issues fixed in APSB15-09 adobe · air | Critical 10.0 | 83% | 2 exploits | |
| CVE-2015-3087 | flash-plugin: multiple code execution issues fixed in APSB15-09 adobe · air | Critical 10.0 | 74% | 1 exploit | |
| CVE-2015-3088 | flash-plugin: multiple code execution issues fixed in APSB15-09 adobe · air | Critical 10.0 | 62% | 1 exploit | |
| CVE-2015-3080 | flash-plugin: multiple code execution issues fixed in APSB15-09 adobe · air | Critical 10.0 | 57% | 1 exploit | |
| CVE-2015-0359 | flash-plugin: multiple code execution issues fixed in APSB15-06 adobe · flash player | Critical 10.0 | 92% | 2 exploits | |
| CVE-2015-2284 | userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbitrary code via unspecified vectors, related to client session handling. solarwinds · firewall security manager | Critical 10.0 | 73% | 2 exploits | |
| CVE-2015-4133 | ReFlex Gallery » WordPress Photo Gallery < 3.1.4 - Arbitrary File Upload reflex gallery project · reflex gallery | Critical 9.8 | 62% | 5 exploits | |
| CVE-2015-0336 | flash-plugin: multiple code execution issues fixed in APSB15-05 adobe · flash player | Critical 9.3 | 70% | 2 exploits | |
| CVE-2015-0096 | Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a Trojan… microsoft · windows 7 | Critical 9.3 | 71% | 5 exploits | |
| CVE-2015-0240 | The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted… samba · samba | Critical 10.0 | 88% | 1 exploit | |
| CVE-2015-2049 | Unrestricted file upload vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension. dlink · dcs-931l firmware | Critical 9.0 | 67% | 2 exploits | |
| CVE-2015-1497 | radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execute arbitrary commands via a crafted request to TCP port 3465. persistent systems · radia client automation | Critical 10.0 | 74% | 7 exploits | |
| CVE-2015-0318 | flash-plugin: multiple code execution flaws (APSB15-04) adobe · flash player | Critical 10.0 | 75% | 2 exploits | |
| CVE-2015-0925 | The client in iPass Open Mobile before 2.4.5 on Windows allows remote authenticated users to execute arbitrary code via a DLL pathname in a crafted Unicode string that is improperly handled by a subprocess reached through a named pipe, as demonstrated by a UNC share pathname. ipass · ipass open mobile | Critical 9.0 | 52% | 3 exploits | |
| CVE-2015-1172 | Holding Pattern <= 0.6 - Arbitrary File Upload holding pattern project · holding pattern | Critical 9.8 | 58% | 2 exploits | |
| CVE-2015-0014 | Buffer overflow in the Telnet service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted packets,… microsoft · windows 7 | Critical 10.0 | 97% | · | |
| CVE-2014-9583 | common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and other routers, does not properly check the MAC address for a request, which allows remote attackers to bypass authentication and execute… asus · wrt firmware | Critical 10.0 | 80% | 6 exploits | |
| CVE-2014-9222 | AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability. allegrosoft · rompager | Critical 10.0 | 74% | · | |
| CVE-2014-10021 | WP Symposium <= 14.11 - Arbitrary File Upload wpsymposiumpro · wp symposium | Critical 9.8 | 59% | 4 exploits | |
| CVE-2014-8423 | Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute arbitrary commands via unknown vectors. arris · vap2500 firmware | Critical 10.0 | 62% | 2 exploits | |
| CVE-2014-8420 | The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors. sonicwall · analyzer | Critical 9.0 | 24% | 1 exploit | |
| CVE-2014-9735 | Slider Revolution < 3.0.96 & Showbiz Pro < 1.7.1 - Missing Authorization to Arbitrary File Upload themepunch · showbiz pro | Critical 9.8 | 76% | 2 exploits | |
| CVE-2014-1635 | Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103_WW_1.10.17m allows remote attackers to execute arbitrary code via a long string in the jump parameter. belkin · n750 wireless router | Critical 10.0 | 67% | 3 exploits | |
| CVE-2014-6321 | Schannel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via crafted packets, aka… microsoft · windows 7 | Critical 10.0 | 96% | · | |
| CVE-2014-8440 | flash-plugin: multiple code execution flaws (APSB14-24) adobe · air | Critical 10.0 | 82% | 3 exploits | |
| CVE-2014-3829 | displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) session_id or (2) template_id parameter, related to the command_line variable. merethis · centreon | Critical 10.0 | 80% | 2 exploits |
Showing 951–1,000 of 1,642
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.