Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
1,474 vulnerabilities · highest exploit probability first
- CVE-2015-5374High 7.8Specially crafted packets sent to port 50000/UDP could cause a denial-of-service of the affected device.siemens · siprotec firmwareEPSS74%1 exploitPublished Jul 18, 2015
- CVE-2015-1789High 7.5The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted length field in…openssl · opensslEPSS76%·Published Jun 12, 2015
- CVE-2015-2996High 8.5Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitrary files via a ..sysaid · sysaidEPSS87%2 exploitsPublished Jun 8, 2015
- CVE-2015-2993High 7.5SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers to (1) create administrator accounts via a crafted request to /createnewaccount or (2) write to arbitrary files via the fileName parameter to /userentry.sysaid · sysaidEPSS55%2 exploitsPublished Jun 8, 2015
- CVE-2015-1868High 7.8The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service (CPU consumption or crash) via a…powerdns · authoritativeEPSS82%·Published May 18, 2015
- CVE-2015-2843High 7.5Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute arbitrary SQL commands via the (1) user_name or (2) user_pass parameter in go_login.php or the PATH_INFO to (3) go_login/validate_credentials/admin/ or (4)…goautodial · goadmin ceEPSS38%4 exploitsPublished May 12, 2015
- CVE-2015-2208High 7.5The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the object parameter.avinu · phpmoadminEPSS62%4 exploitsPublished Mar 12, 2015
- CVE-2015-1592High 7.5Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::thaw function, which allows remote attackers to include and execute arbitrary local Perl files and possibly execute arbitrary code via…sixapart · movable typeEPSS75%2 exploitsPublished Feb 19, 2015
- CVE-2015-1587High 7.5Unrestricted file upload vulnerability in file_to_index.php in Maarch LetterBox 2.8 and earlier and GEC/GED 1.4 and earlier allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a request to a predictable filename…maarch · gec\/gedEPSS43%4 exploitsPublished Feb 19, 2015
- CVE-2014-9312High 8.8Photo Gallery by 10Web <= 1.2.5 - Unrestricted File Upload10web · photo galleryEPSS45%4 exploitsPublished Feb 11, 2015
- CVE-2015-1376High 8.8Pixabay Images <= 2.3 - Arbitrary File Uploadpixabay images project · pixabay imagesEPSS33%3 exploitsPublished Jan 18, 2015
- CVE-2014-9195High 7.5Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic.phoenixcontact-software · multiprogEPSS81%1 exploitPublished Jan 17, 2015
- CVE-2015-0015High 7.8Microsoft Windows Server 2003 SP2, Server 2008 SP2 and R2 SP1, and Server 2012 Gold and R2 allow remote attackers to cause a denial of service (system hang and RADIUS outage) via crafted username strings to (1) Internet Authentication Service (IAS) or (2) Network Policy Server…microsoft · windows server 2003EPSS79%·Published Jan 13, 2015
- CVE-2014-9308High 8.8Shopping Cart & eCommerce Store < 3.0.16 - Arbitrary File Uploadwpeasycart · wp easycartEPSS51%5 exploitsPublished Jan 8, 2015
- CVE-2014-9567High 7.5Unrestricted file upload vulnerability in process-upload.php in ProjectSend (formerly cFTP) r100 through r561 allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in the upload/files/…projectsend · projectsendEPSS43%6 exploitsPublished Jan 7, 2015
- CVE-2011-4722High 7.8Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a ..ipswitch · tftp serverEPSS58%2 exploitsPublished Dec 28, 2014
- CVE-2014-9295High 7.5Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to (1) the crypto_recv function when the Autokey Authentication feature is used, (2) the ctl_putdata function, and (3) the configure…ntp · ntpEPSS79%·Published Dec 20, 2014
- CVE-2014-8142High 7.5php: use after free vulnerability in unserialize()php · phpEPSS53%·Published Dec 18, 2014
- CVE-2014-8500High 7.8ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory consumption and named crash) via a large or infinite number of referrals.isc · bindEPSS58%·Published Dec 11, 2014
- CVE-2014-7866High 7.5Multiple directory traversal vulnerabilities in ZOHO ManageEngine OpManager 8 (build 88xx) through 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to write and execute arbitrary files via a ..zohocorp · manageengine opmanagerEPSS80%2 exploitsPublished Dec 10, 2014
- CVE-2014-4880High 7.5Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote attackers to execute arbitrary code via an RTSP PLAY request with a long Authorization header.hikvision · dvr ds-7204 firmwareEPSS71%4 exploitsPublished Dec 8, 2014
- CVE-2014-3996High 7.5SQL injection vulnerability in the LinkViewFetchServlet servlet in ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90043, Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition…manageengine · desktop centralEPSS38%3 exploitsPublished Dec 5, 2014
- CVE-2014-7868High 7.5Multiple SQL injection vulnerabilities in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the (1) OPM_BVNAME parameter in a Delete operation to the…zohocorp · manageengine opmanagerEPSS73%3 exploitsPublished Dec 4, 2014
- CVE-2014-8424High 7.8ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication.arris · vap2500 firmwareEPSS60%2 exploitsPublished Nov 28, 2014
- CVE-2014-7146High 7.5The XmlImportExport plugin in MantisBT 1.2.17 and earlier allows remote attackers to execute arbitrary PHP code via a crafted (1) description field or (2) issuelink attribute in an XML file, which is not properly handled when executing the preg_replace function with the e…mantisbt · mantisbtEPSS51%3 exploitsPublished Nov 18, 2014
- CVE-2014-8517High 7.5The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 through 6.0.6, and 6.1 through 6.1.5 allows remote attackers to execute arbitrary commands via a | (pipe) character at the end of an HTTP redirect.netbsd · netbsdEPSS69%3 exploitsPublished Nov 17, 2014
- CVE-2014-8799High 7.5DukaPress < 2.5.4 - Directory Traversaldukapress · dukapressEPSS68%2 exploitsPublished Nov 12, 2014
- CVE-2014-4076High 7.2Microsoft Windows Server 2003 SP2 allows local users to gain privileges via a crafted IOCTL call to (1) tcpip.sys or (2) tcpip6.sys, aka "TCP/IP Elevation of Privilege Vulnerability."microsoft · windows server 2003EPSS23%4 exploitsPublished Nov 11, 2014
- CVE-2014-7228High 7.5Akeeba Restore (restore.php), as used in Joomla!joomla · joomla\!EPSS55%2 exploitsPublished Nov 3, 2014
- CVE-2013-7409High 7.5Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a .m3u (playlist) file.allplayer · allplayerEPSS68%15 exploitsPublished Oct 30, 2014
- CVE-2014-6037High 7.5Directory traversal vulnerability in the agentUpload servlet in ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 allows remote attackers to execute arbitrary code by uploading a ZIP file which contains an executable file with ..zohocorp · manageengine eventlog analyzerEPSS84%6 exploitsPublished Oct 26, 2014
- CVE-2014-5005High 7.5Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers to execute arbitrary code via a ..zohocorp · manageengine desktop centralEPSS78%4 exploitsPublished Oct 21, 2014
- CVE-2014-3704High 7.5Drupalgeddon — Drupal core SQL injectiondrupal · drupalEPSS100%13 exploitsPublished Oct 16, 2014
- CVE-2014-4872High 7.5BMC Track-It!bmc · track-it\!EPSS79%3 exploitsPublished Oct 10, 2014
- CVE-2013-3632High 8.8The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter.openmediavault · openmediavaultEPSS57%3 exploitsPublished Sep 29, 2014
- CVE-2014-5519High 7.5The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a device option in the edit[content] parameter to index.php/HeIp.phpwiki project · phpwikiEPSS65%4 exploitsPublished Sep 11, 2014
- CVE-2014-5073High 7.5vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call.vmturbo · operations managerEPSS76%4 exploitsPublished Aug 29, 2014
- CVE-2014-5460High 8.8Slideshow Gallery < 1.4.7 - Arbitrary File Uploadtribulant · tibulant slideshow galleryEPSS71%6 exploitsPublished Aug 28, 2014
- CVE-2014-3512High 7.5Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid SRP (1) g, (2) A, or (3) B parameter.openssl · opensslEPSS69%·Published Aug 13, 2014
- CVE-2014-3560High 7.9NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in…samba · sambaEPSS56%·Published Aug 6, 2014
- CVE-2014-4971High 7.2Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted address in an IOCTL call, related to (1) the MQAC.sys driver in the MQ…microsoft · windows xpEPSS23%9 exploitsPublished Jul 26, 2014
- CVE-2014-4511High 7.5Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in the URI of a request for a (1) blame, (2) file, or (3) stats page, as demonstrated by requests to blame/master/, master/, and stats/master/.gitlist · gitlistEPSS83%7 exploitsPublished Jul 22, 2014
- CVE-2014-2364High 7.5Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter, (8) GetColor, (9)…advantech · advantech webaccessEPSS61%3 exploitsPublished Jul 19, 2014
- CVE-2013-6117High 7.5Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perform other actions via a request to TCP port 37777.dahuasecurity · dvr firmwareEPSS70%1 exploitPublished Jul 11, 2014
- CVE-2014-3888High 8.3Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled,…yokogawa · exaopcEPSS62%3 exploitsPublished Jul 10, 2014
- CVE-2014-0224High 7.4OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and…openssl · opensslEPSS95%·Published Jun 5, 2014
- CVE-2013-1412High 7.5DataLife Engine (DLE) 9.7 allows remote attackers to execute arbitrary PHP code via the catlist[] parameter to engine/preview.php, which is used in a preg_replace function call with an e modifier.dleviet · datalife engineEPSS40%5 exploitsPublished Jun 2, 2014
- CVE-2013-5036High 7.5The Square Squash allows remote attackers to execute arbitrary code via a YAML document in the (1) namespace parameter to the deobfuscation function or (2) sourcemap parameter to the sourcemap function in app/controllers/api/v1_controller.rb.squash · square squashEPSS46%3 exploitsPublished May 27, 2014
- CVE-2014-3789High 7.5GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary commands via unspecified vectors.cogentdatahub · cogent datahubEPSS63%2 exploitsPublished May 22, 2014
- CVE-2014-1649High 7.9The server in Symantec Workspace Streaming (SWS) before 7.5.0.749 allows remote attackers to access files and functionality by sending a crafted XMLRPC request over HTTPS.symantec · workspace streamingEPSS42%2 exploitsPublished May 16, 2014
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2015-5374 | Specially crafted packets sent to port 50000/UDP could cause a denial-of-service of the affected device. siemens · siprotec firmware | High 7.8 | 74% | 1 exploit | |
| CVE-2015-1789 | The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted length field in… openssl · openssl | High 7.5 | 76% | · | |
| CVE-2015-2996 | Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitrary files via a .. sysaid · sysaid | High 8.5 | 87% | 2 exploits | |
| CVE-2015-2993 | SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers to (1) create administrator accounts via a crafted request to /createnewaccount or (2) write to arbitrary files via the fileName parameter to /userentry. sysaid · sysaid | High 7.5 | 55% | 2 exploits | |
| CVE-2015-1868 | The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service (CPU consumption or crash) via a… powerdns · authoritative | High 7.8 | 82% | · | |
| CVE-2015-2843 | Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute arbitrary SQL commands via the (1) user_name or (2) user_pass parameter in go_login.php or the PATH_INFO to (3) go_login/validate_credentials/admin/ or (4)… goautodial · goadmin ce | High 7.5 | 38% | 4 exploits | |
| CVE-2015-2208 | The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the object parameter. avinu · phpmoadmin | High 7.5 | 62% | 4 exploits | |
| CVE-2015-1592 | Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::thaw function, which allows remote attackers to include and execute arbitrary local Perl files and possibly execute arbitrary code via… sixapart · movable type | High 7.5 | 75% | 2 exploits | |
| CVE-2015-1587 | Unrestricted file upload vulnerability in file_to_index.php in Maarch LetterBox 2.8 and earlier and GEC/GED 1.4 and earlier allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a request to a predictable filename… maarch · gec\/ged | High 7.5 | 43% | 4 exploits | |
| CVE-2014-9312 | Photo Gallery by 10Web <= 1.2.5 - Unrestricted File Upload 10web · photo gallery | High 8.8 | 45% | 4 exploits | |
| CVE-2015-1376 | Pixabay Images <= 2.3 - Arbitrary File Upload pixabay images project · pixabay images | High 8.8 | 33% | 3 exploits | |
| CVE-2014-9195 | Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic. phoenixcontact-software · multiprog | High 7.5 | 81% | 1 exploit | |
| CVE-2015-0015 | Microsoft Windows Server 2003 SP2, Server 2008 SP2 and R2 SP1, and Server 2012 Gold and R2 allow remote attackers to cause a denial of service (system hang and RADIUS outage) via crafted username strings to (1) Internet Authentication Service (IAS) or (2) Network Policy Server… microsoft · windows server 2003 | High 7.8 | 79% | · | |
| CVE-2014-9308 | Shopping Cart & eCommerce Store < 3.0.16 - Arbitrary File Upload wpeasycart · wp easycart | High 8.8 | 51% | 5 exploits | |
| CVE-2014-9567 | Unrestricted file upload vulnerability in process-upload.php in ProjectSend (formerly cFTP) r100 through r561 allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in the upload/files/… projectsend · projectsend | High 7.5 | 43% | 6 exploits | |
| CVE-2011-4722 | Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a .. ipswitch · tftp server | High 7.8 | 58% | 2 exploits | |
| CVE-2014-9295 | Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to (1) the crypto_recv function when the Autokey Authentication feature is used, (2) the ctl_putdata function, and (3) the configure… ntp · ntp | High 7.5 | 79% | · | |
| CVE-2014-8142 | php: use after free vulnerability in unserialize() php · php | High 7.5 | 53% | · | |
| CVE-2014-8500 | ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory consumption and named crash) via a large or infinite number of referrals. isc · bind | High 7.8 | 58% | · | |
| CVE-2014-7866 | Multiple directory traversal vulnerabilities in ZOHO ManageEngine OpManager 8 (build 88xx) through 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to write and execute arbitrary files via a .. zohocorp · manageengine opmanager | High 7.5 | 80% | 2 exploits | |
| CVE-2014-4880 | Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote attackers to execute arbitrary code via an RTSP PLAY request with a long Authorization header. hikvision · dvr ds-7204 firmware | High 7.5 | 71% | 4 exploits | |
| CVE-2014-3996 | SQL injection vulnerability in the LinkViewFetchServlet servlet in ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90043, Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition… manageengine · desktop central | High 7.5 | 38% | 3 exploits | |
| CVE-2014-7868 | Multiple SQL injection vulnerabilities in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the (1) OPM_BVNAME parameter in a Delete operation to the… zohocorp · manageengine opmanager | High 7.5 | 73% | 3 exploits | |
| CVE-2014-8424 | ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication. arris · vap2500 firmware | High 7.8 | 60% | 2 exploits | |
| CVE-2014-7146 | The XmlImportExport plugin in MantisBT 1.2.17 and earlier allows remote attackers to execute arbitrary PHP code via a crafted (1) description field or (2) issuelink attribute in an XML file, which is not properly handled when executing the preg_replace function with the e… mantisbt · mantisbt | High 7.5 | 51% | 3 exploits | |
| CVE-2014-8517 | The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 through 6.0.6, and 6.1 through 6.1.5 allows remote attackers to execute arbitrary commands via a | (pipe) character at the end of an HTTP redirect. netbsd · netbsd | High 7.5 | 69% | 3 exploits | |
| CVE-2014-8799 | DukaPress < 2.5.4 - Directory Traversal dukapress · dukapress | High 7.5 | 68% | 2 exploits | |
| CVE-2014-4076 | Microsoft Windows Server 2003 SP2 allows local users to gain privileges via a crafted IOCTL call to (1) tcpip.sys or (2) tcpip6.sys, aka "TCP/IP Elevation of Privilege Vulnerability." microsoft · windows server 2003 | High 7.2 | 23% | 4 exploits | |
| CVE-2014-7228 | Akeeba Restore (restore.php), as used in Joomla! joomla · joomla\! | High 7.5 | 55% | 2 exploits | |
| CVE-2013-7409 | Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a .m3u (playlist) file. allplayer · allplayer | High 7.5 | 68% | 15 exploits | |
| CVE-2014-6037 | Directory traversal vulnerability in the agentUpload servlet in ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 allows remote attackers to execute arbitrary code by uploading a ZIP file which contains an executable file with .. zohocorp · manageengine eventlog analyzer | High 7.5 | 84% | 6 exploits | |
| CVE-2014-5005 | Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers to execute arbitrary code via a .. zohocorp · manageengine desktop central | High 7.5 | 78% | 4 exploits | |
| CVE-2014-3704 | Drupalgeddon — Drupal core SQL injection drupal · drupal | High 7.5 | 100% | 13 exploits | |
| CVE-2014-4872 | BMC Track-It! bmc · track-it\! | High 7.5 | 79% | 3 exploits | |
| CVE-2013-3632 | The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter. openmediavault · openmediavault | High 8.8 | 57% | 3 exploits | |
| CVE-2014-5519 | The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a device option in the edit[content] parameter to index.php/HeIp. phpwiki project · phpwiki | High 7.5 | 65% | 4 exploits | |
| CVE-2014-5073 | vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call. vmturbo · operations manager | High 7.5 | 76% | 4 exploits | |
| CVE-2014-5460 | Slideshow Gallery < 1.4.7 - Arbitrary File Upload tribulant · tibulant slideshow gallery | High 8.8 | 71% | 6 exploits | |
| CVE-2014-3512 | Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid SRP (1) g, (2) A, or (3) B parameter. openssl · openssl | High 7.5 | 69% | · | |
| CVE-2014-3560 | NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in… samba · samba | High 7.9 | 56% | · | |
| CVE-2014-4971 | Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted address in an IOCTL call, related to (1) the MQAC.sys driver in the MQ… microsoft · windows xp | High 7.2 | 23% | 9 exploits | |
| CVE-2014-4511 | Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in the URI of a request for a (1) blame, (2) file, or (3) stats page, as demonstrated by requests to blame/master/, master/, and stats/master/. gitlist · gitlist | High 7.5 | 83% | 7 exploits | |
| CVE-2014-2364 | Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter, (8) GetColor, (9)… advantech · advantech webaccess | High 7.5 | 61% | 3 exploits | |
| CVE-2013-6117 | Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perform other actions via a request to TCP port 37777. dahuasecurity · dvr firmware | High 7.5 | 70% | 1 exploit | |
| CVE-2014-3888 | Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled,… yokogawa · exaopc | High 8.3 | 62% | 3 exploits | |
| CVE-2014-0224 | OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and… openssl · openssl | High 7.4 | 95% | · | |
| CVE-2013-1412 | DataLife Engine (DLE) 9.7 allows remote attackers to execute arbitrary PHP code via the catlist[] parameter to engine/preview.php, which is used in a preg_replace function call with an e modifier. dleviet · datalife engine | High 7.5 | 40% | 5 exploits | |
| CVE-2013-5036 | The Square Squash allows remote attackers to execute arbitrary code via a YAML document in the (1) namespace parameter to the deobfuscation function or (2) sourcemap parameter to the sourcemap function in app/controllers/api/v1_controller.rb. squash · square squash | High 7.5 | 46% | 3 exploits | |
| CVE-2014-3789 | GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary commands via unspecified vectors. cogentdatahub · cogent datahub | High 7.5 | 63% | 2 exploits | |
| CVE-2014-1649 | The server in Symantec Workspace Streaming (SWS) before 7.5.0.749 allows remote attackers to access files and functionality by sending a crafted XMLRPC request over HTTPS. symantec · workspace streaming | High 7.9 | 42% | 2 exploits |
Showing 1,051–1,100 of 1,474
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.