Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
1,642 vulnerabilities · highest exploit probability first
- CVE-2013-4811Critical 10.0UpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the adCert argument, which allows remote attackers to upload .jsp files and consequently…hp · identity driven managerEPSS71%2 exploitsPublished Sep 16, 2013
- CVE-2013-4812Critical 10.0UpdateCertificatesServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the fileName argument, which allows remote attackers to upload .jsp files and consequently…hp · identity driven managerEPSS52%2 exploitsPublished Sep 16, 2013
- CVE-2013-3205Critical 9.3Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."microsoft · internet explorerEPSS66%2 exploitsPublished Sep 11, 2013
- CVE-2013-4983Critical 10.0The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to end-user/index.php.sophos · web appliance firmwareEPSS90%3 exploitsPublished Sep 10, 2013
- CVE-2013-2068Critical 9.4cfme: CFME 2.0 multiple zip file upload path traversal vulnerabilitiesredhat · cloudforms management engineEPSS59%2 exploitsPublished Sep 4, 2013
- CVE-2013-3184Critical 9.3Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."microsoft · internet explorerEPSS58%2 exploitsPublished Aug 14, 2013
- CVE-2013-1710Critical 10.0Mozilla: CRMF requests allow for code execution and XSS attacks (MFSA 2013-69)mozilla · firefoxEPSS40%3 exploitsPublished Aug 7, 2013
- CVE-2013-5019Critical 10.0Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resource name in an HTTP request.vector · ultra mini httpdEPSS64%8 exploitsPublished Jul 31, 2013
- CVE-2013-2367Critical 10.0Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1678.hp · sitescopeEPSS69%2 exploitsPublished Jul 31, 2013
- CVE-2013-4800Critical 9.3Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1735.hp · loadrunnerEPSS39%2 exploitsPublished Jul 29, 2013
- CVE-2013-4798Critical 10.0Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1705.hp · loadrunnerEPSS67%2 exploitsPublished Jul 29, 2013
- CVE-2013-2343Critical 10.0Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1510.hp · lefthand virtual san appliance hydraEPSS62%2 exploitsPublished Jul 2, 2013
- CVE-2013-2460Critical 9.3OpenJDK: tracing insufficient access checks (Serviceability, 8010209)oracle · jreEPSS70%2 exploitsPublished Jun 18, 2013
- CVE-2013-3576Critical 9.0ginkgosnmp.inc in HP System Management Homepage (SMH) allows remote authenticated users to execute arbitrary commands via shell metacharacters in the PATH_INFO to smhutil/snmpchp.php.en.hp · system management homepageEPSS67%2 exploitsPublished Jun 14, 2013
- CVE-2013-2335Critical 10.0Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1733.hp · storage data protectorEPSS61%·Published Jun 6, 2013
- CVE-2013-2333Critical 10.0Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1680.hp · storage data protectorEPSS90%2 exploitsPublished Jun 6, 2013
- CVE-2013-2332Critical 10.0Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1654.hp · storage data protectorEPSS61%·Published Jun 6, 2013
- CVE-2013-2331Critical 10.0Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1652.hp · storage data protectorEPSS61%·Published Jun 6, 2013
- CVE-2013-2330Critical 10.0Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1638.hp · storage data protectorEPSS61%·Published Jun 6, 2013
- CVE-2013-2329Critical 10.0Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1637.hp · storage data protectorEPSS61%·Published Jun 6, 2013
- CVE-2013-2328Critical 10.0Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1636.hp · storage data protectorEPSS61%·Published Jun 6, 2013
- CVE-2013-2327Critical 10.0Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1635.hp · storage data protectorEPSS61%·Published Jun 6, 2013
- CVE-2013-2326Critical 10.0Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1634.hp · storage data protectorEPSS61%·Published Jun 6, 2013
- CVE-2013-2325Critical 10.0Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1633.hp · storage data protectorEPSS61%·Published Jun 6, 2013
- CVE-2013-1017Critical 9.3Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted dref atoms in a movie file.apple · quicktimeEPSS33%3 exploitsPublished May 24, 2013
- CVE-2013-2730Critical 10.0acroread: multiple code execution flaws (APSB13-15)adobe · acrobatEPSS79%2 exploitsPublished May 14, 2013
- CVE-2013-0726Critical 9.3Stack-based buffer overflow in the ERM_convert_to_correct_webpath function in ermapper_u.dll in ERDAS ER Viewer before 13.00.0001 allows remote attackers to execute arbitrary code via a crafted pathname in an ERS file.hexagon · erdas er viewerEPSS28%2 exploitsPublished May 5, 2013
- CVE-2012-5946Critical 9.3Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via a long TabCaption string.ibm · spss samplepowerEPSS34%2 exploitsPublished Apr 30, 2013
- CVE-2013-1488Critical 10.0OpenJDK: JDBC driver manager improper toString calls (CanSecWest 2013, Libraries, 8009814)oracle · jreEPSS87%2 exploitsPublished Apr 16, 2013
- CVE-2013-1080Critical 10.0The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform authentication for zenworks/jsp/index.jsp, which allows remote attackers to conduct directory traversal attacks, and consequently upload and execute arbitrary…novell · zenworks configuration managementEPSS77%2 exploitsPublished Mar 29, 2013
- CVE-2012-5201Critical 10.0Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1611.hp · intelligent management centerEPSS64%2 exploitsPublished Mar 9, 2013
- CVE-2013-1493Critical 10.0OpenJDK: CMM malformed raster memory corruption (2D, 8007675)oracle · jdkEPSS86%2 exploitsPublished Mar 4, 2013
- CVE-2012-6275Critical 10.0Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impact via (1) the filename header in an SCH request or (2) the userid component in a DUPF request.bigantsoft · bigant im message serverEPSS46%2 exploitsPublished Feb 24, 2013
- CVE-2012-4705Critical 10.0Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving a crafted pathname.3s-software · codesys gateway-serverEPSS65%2 exploitsPublished Feb 24, 2013
- CVE-2012-0439Critical 9.3An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code via (1) a pointer argument to the SetEngine method or (2) an XPItem pointer argument to an unspecified method.novell · groupwiseEPSS39%2 exploitsPublished Feb 24, 2013
- CVE-2012-4711Critical 10.0Buffer overflow in kingMess.exe 65.20.2003.10300 in WellinTech KingView 6.52, kingMess.exe 65.20.2003.10400 in KingView 6.53, and kingMess.exe 65.50.2011.18049 in KingView 6.55 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…wellintech · kingviewEPSS61%2 exploitsPublished Feb 15, 2013
- CVE-2013-0025Critical 9.3Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer SLayoutRun Use After Free Vulnerability."microsoft · internet explorerEPSS56%3 exploitsPublished Feb 13, 2013
- CVE-2013-0634Critical 9.3flash-plugin: multiple code execution flaws (APSB13-04)adobe · flash playerEPSS78%2 exploitsPublished Feb 7, 2013
- CVE-2013-0230Critical 10.0Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method.miniupnp project · miniupnpdEPSS69%5 exploitsPublished Jan 31, 2013
- CVE-2012-5958Critical 10.0libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)libupnp project · libupnpEPSS83%3 exploitsPublished Jan 29, 2013
- CVE-2012-5959Critical 10.0libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)portable sdk for upnp project · portable sdk for upnpEPSS76%1 exploitPublished Jan 29, 2013
- CVE-2012-4914Critical 9.3Stack-based buffer overflow in the reader in CoolPDF 3.0.2.256 allows remote attackers to execute arbitrary code via a PDF document with a crafted stream.coolpdf · coolpdfEPSS28%3 exploitsPublished Jan 26, 2013
- CVE-2013-0928Critical 9.3The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary commands via a DCP "run command" operation.emc · alphastorEPSS34%2 exploitsPublished Jan 21, 2013
- CVE-2013-0758Critical 9.3Mozilla: Chrome Object Wrapper (COW) bypass through plugin objects (MFSA 2013-15)mozilla · firefoxEPSS73%3 exploitsPublished Jan 8, 2013
- CVE-2013-0757Critical 9.3Mozilla: Chrome Object Wrapper (COW) bypass through changing prototype (MFSA 2013-14)mozilla · firefoxEPSS61%3 exploitsPublished Jan 8, 2013
- CVE-2013-0753Critical 9.3Mozilla: Use-after-free in serializeToStream (MFSA 2013-16)mozilla · firefoxEPSS51%2 exploitsPublished Jan 8, 2013
- CVE-2012-0432Critical 10.0Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an unspecified impact via unknown vectors.microfocus · edirectoryEPSS59%3 exploitsPublished Dec 25, 2012
- CVE-2012-5932Critical 10.0Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote attackers to execute arbitrary Perl code via a crafted application/x-amf request.microfocus · privileged user managerEPSS63%2 exploitsPublished Dec 24, 2012
- CVE-2012-5691Critical 9.3Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted RealMedia file.realnetworks · realplayerEPSS53%2 exploitsPublished Dec 19, 2012
- CVE-2012-3274Critical 10.0Stack-based buffer overflow in uam.exe in the User Access Manager (UAM) component in HP Intelligent Management Center (IMC) before 5.1 E0101P01 allows remote attackers to execute arbitrary code via vectors related to log data.hp · intelligent management centerEPSS64%2 exploitsPublished Dec 6, 2012
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2013-4811 | UpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the adCert argument, which allows remote attackers to upload .jsp files and consequently… hp · identity driven manager | Critical 10.0 | 71% | 2 exploits | |
| CVE-2013-4812 | UpdateCertificatesServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the fileName argument, which allows remote attackers to upload .jsp files and consequently… hp · identity driven manager | Critical 10.0 | 52% | 2 exploits | |
| CVE-2013-3205 | Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 66% | 2 exploits | |
| CVE-2013-4983 | The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to end-user/index.php. sophos · web appliance firmware | Critical 10.0 | 90% | 3 exploits | |
| CVE-2013-2068 | cfme: CFME 2.0 multiple zip file upload path traversal vulnerabilities redhat · cloudforms management engine | Critical 9.4 | 59% | 2 exploits | |
| CVE-2013-3184 | Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 58% | 2 exploits | |
| CVE-2013-1710 | Mozilla: CRMF requests allow for code execution and XSS attacks (MFSA 2013-69) mozilla · firefox | Critical 10.0 | 40% | 3 exploits | |
| CVE-2013-5019 | Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resource name in an HTTP request. vector · ultra mini httpd | Critical 10.0 | 64% | 8 exploits | |
| CVE-2013-2367 | Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1678. hp · sitescope | Critical 10.0 | 69% | 2 exploits | |
| CVE-2013-4800 | Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1735. hp · loadrunner | Critical 9.3 | 39% | 2 exploits | |
| CVE-2013-4798 | Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1705. hp · loadrunner | Critical 10.0 | 67% | 2 exploits | |
| CVE-2013-2343 | Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1510. hp · lefthand virtual san appliance hydra | Critical 10.0 | 62% | 2 exploits | |
| CVE-2013-2460 | OpenJDK: tracing insufficient access checks (Serviceability, 8010209) oracle · jre | Critical 9.3 | 70% | 2 exploits | |
| CVE-2013-3576 | ginkgosnmp.inc in HP System Management Homepage (SMH) allows remote authenticated users to execute arbitrary commands via shell metacharacters in the PATH_INFO to smhutil/snmpchp.php.en. hp · system management homepage | Critical 9.0 | 67% | 2 exploits | |
| CVE-2013-2335 | Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1733. hp · storage data protector | Critical 10.0 | 61% | · | |
| CVE-2013-2333 | Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1680. hp · storage data protector | Critical 10.0 | 90% | 2 exploits | |
| CVE-2013-2332 | Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1654. hp · storage data protector | Critical 10.0 | 61% | · | |
| CVE-2013-2331 | Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1652. hp · storage data protector | Critical 10.0 | 61% | · | |
| CVE-2013-2330 | Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1638. hp · storage data protector | Critical 10.0 | 61% | · | |
| CVE-2013-2329 | Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1637. hp · storage data protector | Critical 10.0 | 61% | · | |
| CVE-2013-2328 | Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1636. hp · storage data protector | Critical 10.0 | 61% | · | |
| CVE-2013-2327 | Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1635. hp · storage data protector | Critical 10.0 | 61% | · | |
| CVE-2013-2326 | Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1634. hp · storage data protector | Critical 10.0 | 61% | · | |
| CVE-2013-2325 | Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1633. hp · storage data protector | Critical 10.0 | 61% | · | |
| CVE-2013-1017 | Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted dref atoms in a movie file. apple · quicktime | Critical 9.3 | 33% | 3 exploits | |
| CVE-2013-2730 | acroread: multiple code execution flaws (APSB13-15) adobe · acrobat | Critical 10.0 | 79% | 2 exploits | |
| CVE-2013-0726 | Stack-based buffer overflow in the ERM_convert_to_correct_webpath function in ermapper_u.dll in ERDAS ER Viewer before 13.00.0001 allows remote attackers to execute arbitrary code via a crafted pathname in an ERS file. hexagon · erdas er viewer | Critical 9.3 | 28% | 2 exploits | |
| CVE-2012-5946 | Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via a long TabCaption string. ibm · spss samplepower | Critical 9.3 | 34% | 2 exploits | |
| CVE-2013-1488 | OpenJDK: JDBC driver manager improper toString calls (CanSecWest 2013, Libraries, 8009814) oracle · jre | Critical 10.0 | 87% | 2 exploits | |
| CVE-2013-1080 | The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform authentication for zenworks/jsp/index.jsp, which allows remote attackers to conduct directory traversal attacks, and consequently upload and execute arbitrary… novell · zenworks configuration management | Critical 10.0 | 77% | 2 exploits | |
| CVE-2012-5201 | Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1611. hp · intelligent management center | Critical 10.0 | 64% | 2 exploits | |
| CVE-2013-1493 | OpenJDK: CMM malformed raster memory corruption (2D, 8007675) oracle · jdk | Critical 10.0 | 86% | 2 exploits | |
| CVE-2012-6275 | Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impact via (1) the filename header in an SCH request or (2) the userid component in a DUPF request. bigantsoft · bigant im message server | Critical 10.0 | 46% | 2 exploits | |
| CVE-2012-4705 | Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving a crafted pathname. 3s-software · codesys gateway-server | Critical 10.0 | 65% | 2 exploits | |
| CVE-2012-0439 | An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code via (1) a pointer argument to the SetEngine method or (2) an XPItem pointer argument to an unspecified method. novell · groupwise | Critical 9.3 | 39% | 2 exploits | |
| CVE-2012-4711 | Buffer overflow in kingMess.exe 65.20.2003.10300 in WellinTech KingView 6.52, kingMess.exe 65.20.2003.10400 in KingView 6.53, and kingMess.exe 65.50.2011.18049 in KingView 6.55 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… wellintech · kingview | Critical 10.0 | 61% | 2 exploits | |
| CVE-2013-0025 | Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer SLayoutRun Use After Free Vulnerability." microsoft · internet explorer | Critical 9.3 | 56% | 3 exploits | |
| CVE-2013-0634 | flash-plugin: multiple code execution flaws (APSB13-04) adobe · flash player | Critical 9.3 | 78% | 2 exploits | |
| CVE-2013-0230 | Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method. miniupnp project · miniupnpd | Critical 10.0 | 69% | 5 exploits | |
| CVE-2012-5958 | libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681) libupnp project · libupnp | Critical 10.0 | 83% | 3 exploits | |
| CVE-2012-5959 | libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681) portable sdk for upnp project · portable sdk for upnp | Critical 10.0 | 76% | 1 exploit | |
| CVE-2012-4914 | Stack-based buffer overflow in the reader in CoolPDF 3.0.2.256 allows remote attackers to execute arbitrary code via a PDF document with a crafted stream. coolpdf · coolpdf | Critical 9.3 | 28% | 3 exploits | |
| CVE-2013-0928 | The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary commands via a DCP "run command" operation. emc · alphastor | Critical 9.3 | 34% | 2 exploits | |
| CVE-2013-0758 | Mozilla: Chrome Object Wrapper (COW) bypass through plugin objects (MFSA 2013-15) mozilla · firefox | Critical 9.3 | 73% | 3 exploits | |
| CVE-2013-0757 | Mozilla: Chrome Object Wrapper (COW) bypass through changing prototype (MFSA 2013-14) mozilla · firefox | Critical 9.3 | 61% | 3 exploits | |
| CVE-2013-0753 | Mozilla: Use-after-free in serializeToStream (MFSA 2013-16) mozilla · firefox | Critical 9.3 | 51% | 2 exploits | |
| CVE-2012-0432 | Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an unspecified impact via unknown vectors. microfocus · edirectory | Critical 10.0 | 59% | 3 exploits | |
| CVE-2012-5932 | Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote attackers to execute arbitrary Perl code via a crafted application/x-amf request. microfocus · privileged user manager | Critical 10.0 | 63% | 2 exploits | |
| CVE-2012-5691 | Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted RealMedia file. realnetworks · realplayer | Critical 9.3 | 53% | 2 exploits | |
| CVE-2012-3274 | Stack-based buffer overflow in uam.exe in the User Access Manager (UAM) component in HP Intelligent Management Center (IMC) before 5.1 E0101P01 allows remote attackers to execute arbitrary code via vectors related to log data. hp · intelligent management center | Critical 10.0 | 64% | 2 exploits |
Showing 1,051–1,100 of 1,642
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.