Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
1,642 vulnerabilities · highest exploit probability first
- CVE-2014-3828Critical 10.0Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allow remote attackers to execute arbitrary SQL commands via (1) the index_id parameter to views/graphs/common/makeXML_ListMetrics.php, (2) the sid parameter…merethis · centreonEPSS73%3 exploitsPublished Oct 22, 2014
- CVE-2014-0569Critical 9.3flash-plugin: multiple code execution flaws (APSB14-22)adobe · air sdkEPSS91%2 exploitsPublished Oct 14, 2014
- CVE-2014-6446Critical 9.8Infusionsoft Gravity Forms Add-on 1.5.3 - 1.5.10 - Arbitrary File Uploadinfusionsoft gravity forms project · infusionsoft gravity formsEPSS46%4 exploitsPublished Oct 5, 2014
- CVE-2014-7187Critical 10.0Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the…gnu · bashEPSS60%2 exploitsPublished Sep 28, 2014
- CVE-2014-7186Critical 10.0The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the "redir_stack"…gnu · bashEPSS64%2 exploitsPublished Sep 28, 2014
- CVE-2014-6277Critical 10.0GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access, and untrusted-pointer read and write…gnu · bashEPSS64%3 exploitsPublished Sep 27, 2014
- CVE-2014-2624Critical 10.0Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2264.hp · network node manager iEPSS65%2 exploitsPublished Sep 10, 2014
- CVE-2014-0556Critical 10.0flash-plugin: multiple code execution or security bypass flaws (APSB14-21)adobe · adobe airEPSS85%2 exploitsPublished Sep 9, 2014
- CVE-2014-3914Critical 10.0Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in Rocket ServerGraph 1.2 allows remote attackers to (1) create arbitrary files via a ..rocketsoftware · rocket servergraphEPSS73%3 exploitsPublished Aug 7, 2014
- CVE-2014-4725Critical 9.8MailPoet Newsletters <= 2.6.6 - Arbitrary File Uploadmailpoet · mailpoet newslettersEPSS61%2 exploitsPublished Jul 31, 2014
- CVE-2014-2623Critical 10.0Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors.hp · storage data protectorEPSS91%8 exploitsPublished Jul 17, 2014
- CVE-2013-6221Critical 10.0Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server is enabled, allows remote attackers to create arbitrary files and consequently execute arbitrary code via unspecified vectors, aka…hp · service virtualizationEPSS78%1 exploitPublished Jun 18, 2014
- CVE-2014-3804Critical 10.0The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) update_system_info_debian_package, (2) ossec_task, (3) set_ossim_setup admin_ip, (4) sync_rserver, or (5) set_ossim_setup framework_ip request, a…alienvault · open source security information managementEPSS72%3 exploitsPublished Jun 13, 2014
- CVE-2011-3625Critical 9.3Stack-based buffer overflow in the sub_read_line_sami function in subreader.c in MPlayer, as used in SMPlayer 0.6.9, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a SAMI subtitle file.ricardo villalba · smplayerEPSS24%2 exploitsPublished Jun 11, 2014
- CVE-2014-1773Critical 9.3Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1783,…microsoft · internet explorerEPSS63%1 exploitPublished Jun 11, 2014
- CVE-2014-0282Critical 9.3Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1775,…microsoft · internet explorerEPSS51%2 exploitsPublished Jun 11, 2014
- CVE-2014-3913Critical 10.0Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows remote attackers to execute arbitrary code via a request for a non-existent file.ericom · accessnow serverEPSS61%3 exploitsPublished Jun 4, 2014
- CVE-2014-3936Critical 10.0Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev.dlink · dsp-w215EPSS77%3 exploitsPublished Jun 2, 2014
- CVE-2014-3791Critical 10.0Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 6.8 allows remote attackers to execute arbitrary code via a long string in a cookie UserID parameter to vfolder.ghp.efssoft · easy file sharing web serverEPSS79%4 exploitsPublished May 20, 2014
- CVE-2014-0515Critical 10.0flash-plugin: buffer overflow vulnerability leads to arbitrary code execution (APSB14-13)adobe · flash playerEPSS94%2 exploitsPublished Apr 28, 2014
- CVE-2014-0514Critical 9.3The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of JavaScript, which allows remote attackers to execute arbitrary code via a crafted PDF document, a related issue to CVE-2012-6636.adobe · adobe readerEPSS72%3 exploitsPublished Apr 15, 2014
- CVE-2014-1511Critical 9.8Mozilla: Privilege escalation using WebIDL-implemented APIs (MFSA 2014-29)mozilla · firefoxEPSS84%2 exploitsPublished Mar 18, 2014
- CVE-2014-1510Critical 9.8Mozilla: Privilege escalation using WebIDL-implemented APIs (MFSA 2014-29)mozilla · firefoxEPSS82%2 exploitsPublished Mar 18, 2014
- CVE-2014-2323Critical 9.8SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote attackers to execute arbitrary SQL commands via the host name, related to request_check_hostname.lighttpd · lighttpdEPSS63%·Published Mar 14, 2014
- CVE-2014-0783Critical 9.0Stack-based buffer overflow in BKHOdeq.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet.yokogawa · centum cs 3000EPSS68%2 exploitsPublished Mar 14, 2014
- CVE-2014-0307Critical 9.3Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a certain sequence of manipulations of a TextRange element, aka "Internet Explorer Memory Corruption…microsoft · internet explorerEPSS69%3 exploitsPublished Mar 12, 2014
- CVE-2013-3928Critical 9.3Stack-based buffer overflow in the ReadFile function in flt_BMP.dll in Chasys Draw IES before 4.11.02 allows remote attackers to execute arbitrary code via crafted biPlanes and biBitCount fields in a BMP file.jpchacha · chasys draw iesEPSS37%4 exploitsPublished Mar 11, 2014
- CVE-2014-2299Critical 9.3Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data.wireshark · wiresharkEPSS47%2 exploitsPublished Mar 11, 2014
- CVE-2014-2321Critical 10.0web_shell_cmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials.zte · f460EPSS59%·Published Mar 11, 2014
- CVE-2014-2206Critical 10.0Stack-based buffer overflow in GetGo Download Manager 4.9.0.1982, 4.8.2.1346, 4.4.5.502, and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a long HTTP Response Header.getgosoft · getgo download managerEPSS61%2 exploitsPublished Mar 5, 2014
- CVE-2013-4710Critical 9.3Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly implement the WebView class, which allows remote attackers to execute arbitrary methods of Java objects or cause a denial of service (reboot) via a crafted web…google · androidEPSS43%3 exploitsPublished Mar 3, 2014
- CVE-2014-0257Critical 9.3Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly determine whether it is safe to execute a method, which allows remote attackers to execute arbitrary code via (1) a crafted web site or (2) a crafted .NET Framework application…microsoft · .net frameworkEPSS70%2 exploitsPublished Feb 12, 2014
- CVE-2014-0980Critical 9.3Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI file.poster software · publish itEPSS40%5 exploitsPublished Feb 11, 2014
- CVE-2013-3482Critical 9.3Stack-based buffer overflow in the rf_report_error function in ermapper_u.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long string in an ERS file.hexagon · erdas er viewerEPSS32%3 exploitsPublished Jan 19, 2014
- CVE-2014-0659Critical 10.0The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote attackers to read credential and configuration data, and execute arbitrary…cisco · rvs4000EPSS74%2 exploitsPublished Jan 12, 2014
- CVE-2013-6955Critical 10.0webman/imageSelector.cgi in Synology DiskStation Manager (DSM) 4.0 before 4.0-2259, 4.2 before 4.2-3243, and 4.3 before 4.3-3810 Update 1 allows remote attackers to append data to arbitrary files, and consequently execute arbitrary code, via a pathname in the SLICEUPLOAD…synology · diskstation managerEPSS85%2 exploitsPublished Jan 9, 2014
- CVE-2013-6194Critical 10.0Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1905.hp · storage data protectorEPSS66%3 exploitsPublished Jan 4, 2014
- CVE-2013-2347Critical 10.0The Backup Client Service (OmniInet.exe) in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary commands or cause a denial of service via a crafted EXEC_BAR packet to TCP port 5555, aka ZDI-CAN-1885.hp · storage data protectorEPSS66%3 exploitsPublished Jan 4, 2014
- CVE-2012-0262Critical 10.0op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter.op5 · monitorEPSS73%2 exploitsPublished Dec 31, 2013
- CVE-2012-0261Critical 10.0license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for an install action.op5 · monitorEPSS74%2 exploitsPublished Dec 31, 2013
- CVE-2013-4988Critical 9.3Stack-based buffer overflow in IcoFX 2.5 and earlier allows remote attackers to execute arbitrary code via a long idCount value in an ICONDIR structure in an ICO file.icofx · icofxEPSS67%6 exploitsPublished Dec 13, 2013
- CVE-2013-2751Critical 10.0Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to execute arbitrary Perl code via a crafted request, related to the "forgot password workflow."netgear · raidiatorEPSS72%3 exploitsPublished Dec 12, 2013
- CVE-2013-3623Critical 10.0Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro X9 generation motherboards allow remote attackers to execute arbitrary code via the (1)…supermicro · intelligent platform management firmwareEPSS72%3 exploitsPublished Dec 10, 2013
- CVE-2013-5331Critical 9.3flash-plugin: multiple code execution flaws (APSB13-28)adobe · airEPSS72%2 exploitsPublished Dec 10, 2013
- CVE-2013-6935Critical 9.3Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a long string in the SourcePath value in a .wcf file.videocharge · watermark masterEPSS32%3 exploitsPublished Dec 4, 2013
- CVE-2013-4837Critical 10.0Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1832.hp · loadrunnerEPSS63%2 exploitsPublished Nov 4, 2013
- CVE-2013-4822Critical 10.0Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent Management System Software Module (aka BIMS) allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1606.hp · imc branch intelligent management system software moduleEPSS63%2 exploitsPublished Oct 13, 2013
- CVE-2013-2578Critical 10.0cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the ServerName parameter and (2)…tp-link · tl-sc3130EPSS74%2 exploitsPublished Oct 11, 2013
- CVE-2013-3128Critical 9.3The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5, allow remote attackers…microsoft · .net frameworkEPSS50%·Published Oct 9, 2013
- CVE-2013-5486Critical 10.0Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036.cisco · prime data center network managerEPSS76%3 exploitsPublished Sep 23, 2013
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2014-3828 | Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allow remote attackers to execute arbitrary SQL commands via (1) the index_id parameter to views/graphs/common/makeXML_ListMetrics.php, (2) the sid parameter… merethis · centreon | Critical 10.0 | 73% | 3 exploits | |
| CVE-2014-0569 | flash-plugin: multiple code execution flaws (APSB14-22) adobe · air sdk | Critical 9.3 | 91% | 2 exploits | |
| CVE-2014-6446 | Infusionsoft Gravity Forms Add-on 1.5.3 - 1.5.10 - Arbitrary File Upload infusionsoft gravity forms project · infusionsoft gravity forms | Critical 9.8 | 46% | 4 exploits | |
| CVE-2014-7187 | Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the… gnu · bash | Critical 10.0 | 60% | 2 exploits | |
| CVE-2014-7186 | The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the "redir_stack"… gnu · bash | Critical 10.0 | 64% | 2 exploits | |
| CVE-2014-6277 | GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access, and untrusted-pointer read and write… gnu · bash | Critical 10.0 | 64% | 3 exploits | |
| CVE-2014-2624 | Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2264. hp · network node manager i | Critical 10.0 | 65% | 2 exploits | |
| CVE-2014-0556 | flash-plugin: multiple code execution or security bypass flaws (APSB14-21) adobe · adobe air | Critical 10.0 | 85% | 2 exploits | |
| CVE-2014-3914 | Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in Rocket ServerGraph 1.2 allows remote attackers to (1) create arbitrary files via a .. rocketsoftware · rocket servergraph | Critical 10.0 | 73% | 3 exploits | |
| CVE-2014-4725 | MailPoet Newsletters <= 2.6.6 - Arbitrary File Upload mailpoet · mailpoet newsletters | Critical 9.8 | 61% | 2 exploits | |
| CVE-2014-2623 | Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors. hp · storage data protector | Critical 10.0 | 91% | 8 exploits | |
| CVE-2013-6221 | Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server is enabled, allows remote attackers to create arbitrary files and consequently execute arbitrary code via unspecified vectors, aka… hp · service virtualization | Critical 10.0 | 78% | 1 exploit | |
| CVE-2014-3804 | The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) update_system_info_debian_package, (2) ossec_task, (3) set_ossim_setup admin_ip, (4) sync_rserver, or (5) set_ossim_setup framework_ip request, a… alienvault · open source security information management | Critical 10.0 | 72% | 3 exploits | |
| CVE-2011-3625 | Stack-based buffer overflow in the sub_read_line_sami function in subreader.c in MPlayer, as used in SMPlayer 0.6.9, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a SAMI subtitle file. ricardo villalba · smplayer | Critical 9.3 | 24% | 2 exploits | |
| CVE-2014-1773 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1783,… microsoft · internet explorer | Critical 9.3 | 63% | 1 exploit | |
| CVE-2014-0282 | Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1775,… microsoft · internet explorer | Critical 9.3 | 51% | 2 exploits | |
| CVE-2014-3913 | Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows remote attackers to execute arbitrary code via a request for a non-existent file. ericom · accessnow server | Critical 10.0 | 61% | 3 exploits | |
| CVE-2014-3936 | Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. dlink · dsp-w215 | Critical 10.0 | 77% | 3 exploits | |
| CVE-2014-3791 | Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 6.8 allows remote attackers to execute arbitrary code via a long string in a cookie UserID parameter to vfolder.ghp. efssoft · easy file sharing web server | Critical 10.0 | 79% | 4 exploits | |
| CVE-2014-0515 | flash-plugin: buffer overflow vulnerability leads to arbitrary code execution (APSB14-13) adobe · flash player | Critical 10.0 | 94% | 2 exploits | |
| CVE-2014-0514 | The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of JavaScript, which allows remote attackers to execute arbitrary code via a crafted PDF document, a related issue to CVE-2012-6636. adobe · adobe reader | Critical 9.3 | 72% | 3 exploits | |
| CVE-2014-1511 | Mozilla: Privilege escalation using WebIDL-implemented APIs (MFSA 2014-29) mozilla · firefox | Critical 9.8 | 84% | 2 exploits | |
| CVE-2014-1510 | Mozilla: Privilege escalation using WebIDL-implemented APIs (MFSA 2014-29) mozilla · firefox | Critical 9.8 | 82% | 2 exploits | |
| CVE-2014-2323 | SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote attackers to execute arbitrary SQL commands via the host name, related to request_check_hostname. lighttpd · lighttpd | Critical 9.8 | 63% | · | |
| CVE-2014-0783 | Stack-based buffer overflow in BKHOdeq.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet. yokogawa · centum cs 3000 | Critical 9.0 | 68% | 2 exploits | |
| CVE-2014-0307 | Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a certain sequence of manipulations of a TextRange element, aka "Internet Explorer Memory Corruption… microsoft · internet explorer | Critical 9.3 | 69% | 3 exploits | |
| CVE-2013-3928 | Stack-based buffer overflow in the ReadFile function in flt_BMP.dll in Chasys Draw IES before 4.11.02 allows remote attackers to execute arbitrary code via crafted biPlanes and biBitCount fields in a BMP file. jpchacha · chasys draw ies | Critical 9.3 | 37% | 4 exploits | |
| CVE-2014-2299 | Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data. wireshark · wireshark | Critical 9.3 | 47% | 2 exploits | |
| CVE-2014-2321 | web_shell_cmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials. zte · f460 | Critical 10.0 | 59% | · | |
| CVE-2014-2206 | Stack-based buffer overflow in GetGo Download Manager 4.9.0.1982, 4.8.2.1346, 4.4.5.502, and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a long HTTP Response Header. getgosoft · getgo download manager | Critical 10.0 | 61% | 2 exploits | |
| CVE-2013-4710 | Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly implement the WebView class, which allows remote attackers to execute arbitrary methods of Java objects or cause a denial of service (reboot) via a crafted web… google · android | Critical 9.3 | 43% | 3 exploits | |
| CVE-2014-0257 | Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly determine whether it is safe to execute a method, which allows remote attackers to execute arbitrary code via (1) a crafted web site or (2) a crafted .NET Framework application… microsoft · .net framework | Critical 9.3 | 70% | 2 exploits | |
| CVE-2014-0980 | Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI file. poster software · publish it | Critical 9.3 | 40% | 5 exploits | |
| CVE-2013-3482 | Stack-based buffer overflow in the rf_report_error function in ermapper_u.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long string in an ERS file. hexagon · erdas er viewer | Critical 9.3 | 32% | 3 exploits | |
| CVE-2014-0659 | The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote attackers to read credential and configuration data, and execute arbitrary… cisco · rvs4000 | Critical 10.0 | 74% | 2 exploits | |
| CVE-2013-6955 | webman/imageSelector.cgi in Synology DiskStation Manager (DSM) 4.0 before 4.0-2259, 4.2 before 4.2-3243, and 4.3 before 4.3-3810 Update 1 allows remote attackers to append data to arbitrary files, and consequently execute arbitrary code, via a pathname in the SLICEUPLOAD… synology · diskstation manager | Critical 10.0 | 85% | 2 exploits | |
| CVE-2013-6194 | Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1905. hp · storage data protector | Critical 10.0 | 66% | 3 exploits | |
| CVE-2013-2347 | The Backup Client Service (OmniInet.exe) in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary commands or cause a denial of service via a crafted EXEC_BAR packet to TCP port 5555, aka ZDI-CAN-1885. hp · storage data protector | Critical 10.0 | 66% | 3 exploits | |
| CVE-2012-0262 | op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter. op5 · monitor | Critical 10.0 | 73% | 2 exploits | |
| CVE-2012-0261 | license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for an install action. op5 · monitor | Critical 10.0 | 74% | 2 exploits | |
| CVE-2013-4988 | Stack-based buffer overflow in IcoFX 2.5 and earlier allows remote attackers to execute arbitrary code via a long idCount value in an ICONDIR structure in an ICO file. icofx · icofx | Critical 9.3 | 67% | 6 exploits | |
| CVE-2013-2751 | Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to execute arbitrary Perl code via a crafted request, related to the "forgot password workflow." netgear · raidiator | Critical 10.0 | 72% | 3 exploits | |
| CVE-2013-3623 | Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro X9 generation motherboards allow remote attackers to execute arbitrary code via the (1)… supermicro · intelligent platform management firmware | Critical 10.0 | 72% | 3 exploits | |
| CVE-2013-5331 | flash-plugin: multiple code execution flaws (APSB13-28) adobe · air | Critical 9.3 | 72% | 2 exploits | |
| CVE-2013-6935 | Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a long string in the SourcePath value in a .wcf file. videocharge · watermark master | Critical 9.3 | 32% | 3 exploits | |
| CVE-2013-4837 | Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1832. hp · loadrunner | Critical 10.0 | 63% | 2 exploits | |
| CVE-2013-4822 | Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent Management System Software Module (aka BIMS) allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1606. hp · imc branch intelligent management system software module | Critical 10.0 | 63% | 2 exploits | |
| CVE-2013-2578 | cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the ServerName parameter and (2)… tp-link · tl-sc3130 | Critical 10.0 | 74% | 2 exploits | |
| CVE-2013-3128 | The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5, allow remote attackers… microsoft · .net framework | Critical 9.3 | 50% | · | |
| CVE-2013-5486 | Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. cisco · prime data center network manager | Critical 10.0 | 76% | 3 exploits |
Showing 1,001–1,050 of 1,642
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.