Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
1,642 vulnerabilities · highest exploit probability first
- CVE-2012-6066Critical 9.3freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demonstrated by an OpenSSH client with modified versions of ssh.c and sshconnect2.c.freesshd · freesshdEPSS40%4 exploitsPublished Dec 4, 2012
- CVE-2012-5975Critical 9.3The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6.2.5, and 6.3.0 through 6.3.2 on UNIX and Linux, when old-style password authentication is enabled, allows remote attackers to bypass authentication via a…ssh · tectia serverEPSS36%3 exploitsPublished Dec 4, 2012
- CVE-2012-4959Critical 10.0Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD request with a ..novell · file reporterEPSS71%3 exploitsPublished Nov 18, 2012
- CVE-2012-5896Critical 10.0The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers to execute arbitrary code via a memory address in the first argument, related to an "uninitialized…quest · intrustEPSS69%4 exploitsPublished Nov 17, 2012
- CVE-2012-3569Critical 9.3Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file.vmware · ovf toolEPSS48%4 exploitsPublished Nov 14, 2012
- CVE-2012-3753Critical 9.3Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MIME type.apple · quicktimeEPSS35%2 exploitsPublished Nov 9, 2012
- CVE-2012-3752Critical 9.3Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted style element in a QuickTime TeXML file.apple · quicktimeEPSS36%2 exploitsPublished Nov 9, 2012
- CVE-2012-5692Critical 10.0Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x through 3.3.x has unknown impact and remote attack vectors.invisioncommunity · invision power boardEPSS26%4 exploitsPublished Oct 31, 2012
- CVE-2011-5227Critical 10.0Stack-based buffer overflow in the Syslog service (nssyslogd.exe) in Enterasys Network Management Suite (NMS) before 4.1.0.80 allows remote attackers to execute arbitrary code via a long PRIO field in a message to UDP port 514.enterasys · netsightEPSS77%2 exploitsPublished Oct 25, 2012
- CVE-2012-5088Critical 10.0OpenJDK: MethodHandle insufficient access control checks (Libraries, 7196190)oracle · jreEPSS79%2 exploitsPublished Oct 16, 2012
- CVE-2012-1533Critical 10.0JDK: unspecified vulnerability (Deployment)oracle · jdkEPSS69%2 exploitsPublished Oct 16, 2012
- CVE-2012-0182Critical 9.3Microsoft Word 2007 SP2 and SP3 does not properly handle memory during the parsing of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Word PAPX Section Corruption Vulnerability."microsoft · wordEPSS68%·Published Oct 9, 2012
- CVE-2012-3993Critical 9.3Mozilla: Chrome Object Wrapper (COW) does not disallow acces to privileged functions or properties (MFSA 2012-83)mozilla · firefoxEPSS43%2 exploitsPublished Oct 9, 2012
- CVE-2012-3261Critical 10.0Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1463.hp · sitescopeEPSS40%1 exploitPublished Sep 25, 2012
- CVE-2012-3260Critical 10.0Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1462.hp · sitescopeEPSS40%1 exploitPublished Sep 25, 2012
- CVE-2012-3259Critical 10.0Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1461.hp · sitescopeEPSS60%·Published Sep 25, 2012
- CVE-2012-4924Critical 9.3Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execute arbitrary code via a long parameter to the Alert method.asus · net4switchEPSS36%3 exploitsPublished Sep 15, 2012
- CVE-2011-5171Critical 9.3Multiple stack-based buffer overflows in CyberLink Power2Go 7 (build 196) and 8 (build 1031) allow remote attackers to execute arbitrary code via the (1) src and (2) name parameters in a p2g project file.cyberlink · power2goEPSS46%4 exploitsPublished Sep 15, 2012
- CVE-2011-5170Critical 9.3Stack-based buffer overflow in Castillo Bueno Systems CCMPlayer 1.5 allows remote attackers to execute arbitrary code via a long track name in an m3u playlist.castillobueno · ccmplayerEPSS32%5 exploitsPublished Sep 15, 2012
- CVE-2011-5165Critical 9.3Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wav file.cleanersoft · free mp3 cd ripperEPSS37%16 exploitsPublished Sep 15, 2012
- CVE-2011-5164Critical 9.3Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote FTP servers to execute arbitrary code via a crafted file name in a LIST command response.vandyke · absoluteftpEPSS29%3 exploitsPublished Sep 15, 2012
- CVE-2012-4876Critical 10.0Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera allows remote attackers to execute arbitrary code via a long string to the OpenFileDlg method.trendnet · securview wireless internet camera activex controlEPSS71%4 exploitsPublished Sep 6, 2012
- CVE-2012-2288Critical 9.3Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via format string specifiers in a message.emc · networkerEPSS33%2 exploitsPublished Sep 4, 2012
- CVE-2010-5193Critical 9.3Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0 and Gold 6.0 allows remote attackers to execute arbitrary code via a long strDelimit parameter.viscomsoft · image viewer cp gold sdkEPSS32%4 exploitsPublished Aug 31, 2012
- CVE-2011-5124Critical 10.0Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows remote attackers to execute arbitrary code via a large packet to the synchronization port (16102/tcp).bluecoat · proxyoneEPSS55%2 exploitsPublished Aug 26, 2012
- CVE-2012-4598Critical 9.3An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows remote attackers to execute arbitrary code or cause a denial of service (Internet Explorer crash) via a crafted web site.mcafee · mcafee virtual technicianEPSS29%3 exploitsPublished Aug 22, 2012
- CVE-2012-1851Critical 10.0Format string vulnerability in the Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted response,…microsoft · windows 7EPSS66%·Published Aug 14, 2012
- CVE-2012-4333Critical 10.0Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0 ActiveX controls in Samsung NET-i viewer 1.37.120316 allow remote attackers to execute arbitrary code via a long string in the fname parameter.samsung · net-i viewerEPSS60%4 exploitsPublished Aug 14, 2012
- CVE-2012-4177Critical 10.0The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbit_exe_path command line argument.ubi · uplay pcEPSS58%2 exploitsPublished Aug 7, 2012
- CVE-2012-2953Critical 10.0The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to application scripts.symantec · web gatewayEPSS67%3 exploitsPublished Jul 23, 2012
- CVE-2012-0284Critical 9.3Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.ocx on the Cisco WVC200 Wireless-G PTZ Internet video camera allows remote attackers to execute arbitrary code via a long URL in the first argument (aka the…cisco · linksys playerpt activex controlEPSS36%4 exploitsPublished Jul 19, 2012
- CVE-2012-0911Critical 9.8TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the (1) cookieName to lib/banners/bannerlib.php; (2) printpages or (3) printstructures parameter to (a) tiki-print_multi_pages.php or (b)…tiki · tikiwiki cms\/groupwareEPSS63%5 exploitsPublished Jul 12, 2012
- CVE-2012-2020Critical 10.0Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1326.hp · operations agentEPSS65%2 exploitsPublished Jul 11, 2012
- CVE-2012-2019Critical 10.0Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1325.hp · operations agentEPSS64%2 exploitsPublished Jul 11, 2012
- CVE-2012-2516Critical 9.3An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; Proficy HMI/SCADA iFIX 5.0 and 5.1; Proficy Pulse 1.0; Proficy Batch Execution 5.6; SI7 I/O Driver 7.20…ge · intelligent platforms proficy historianEPSS40%2 exploitsPublished Jul 5, 2012
- CVE-2012-2515Critical 9.3Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the HTML Help component), as used in EMC Documentum ApplicationXtender Desktop 5.4; EMC Captiva Quickscan Pro 4.6 SP1; GE Intelligent Platforms…emc · captiva quickscan proEPSS28%1 exploitPublished Jul 5, 2012
- CVE-2012-3811Critical 10.0Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before 7.0.5.8 Q1 2012 Maintenance Release and 8.0 before 8.0.9.13 Q1 2012 Maintenance Release allows remote attackers to execute arbitrary code…avaya · ip office customer call reporterEPSS63%2 exploitsPublished Jul 3, 2012
- CVE-2012-3815Critical 9.3Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 46824.sielcosistemi · winlog liteEPSS44%3 exploitsPublished Jun 27, 2012
- CVE-2012-2175Critical 9.3Buffer overflow in the Attachment_Times method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a long argument.ibm · lotus inotesEPSS29%2 exploitsPublished Jun 20, 2012
- CVE-2012-2174Critical 9.3The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted notes:// URL.ibm · lotus notesEPSS38%2 exploitsPublished Jun 20, 2012
- CVE-2012-1876Critical 9.3Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting to access a nonexistent object, leading to a heap-based buffer overflow, aka "Col Element Remote…microsoft · internet explorerEPSS65%6 exploitsPublished Jun 12, 2012
- CVE-2012-1875Critical 9.3Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Same ID Property Remote Code Execution Vulnerability."microsoft · internet explorerEPSS62%2 exploitsPublished Jun 12, 2012
- CVE-2012-2176Critical 9.3Multiple stack-based buffer overflows in a certain ActiveX control in qp2.cab in IBM Lotus Quickr 8.2 before 8.2.0.27-002a for Domino allow remote attackers to execute arbitrary code via a long argument to the (1) Attachment_Times or (2) Import_Times method.ibm · lotus quickrEPSS32%2 exploitsPublished May 25, 2012
- CVE-2012-2926Critical 9.1Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; FishEye and Crucible before 2.5.8, 2.6 before 2.6.8, and 2.7 before 2.7.12; Bamboo before 3.3.4 and 3.4.x before 3.4.5; and Crowd before 2.0.9, 2.1 before 2.1.2, 2.2 before 2.2.9, 2.3…atlassian · bambooEPSS66%1 exploitPublished May 22, 2012
- CVE-2012-0299Critical 10.0The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code to a designated pathname, and possibly execute this code, via unspecified vectors.symantec · web gatewayEPSS64%2 exploitsPublished May 21, 2012
- CVE-2012-0297Critical 10.0The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by (1) injecting crafted data or (2) including crafted data.symantec · web gatewayEPSS73%6 exploitsPublished May 21, 2012
- CVE-2012-2915Critical 9.3Stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.2.1344 allows remote attackers to execute arbitrary code via a long string in a Value tag in a SymbolicSchematicData definition tag in PAC Design (.pac) file.lattice semiconductor · pac-designerEPSS29%3 exploitsPublished May 21, 2012
- CVE-2012-0663Critical 9.3Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TeXML file.apple · quicktimeEPSS28%2 exploitsPublished May 16, 2012
- CVE-2012-2611Critical 9.3The DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2, when a certain Developer Trace configuration is enabled, allows remote attackers to execute arbitrary code via a…sap · netweaverEPSS44%4 exploitsPublished May 15, 2012
- CVE-2012-0202Critical 10.0Multiple stack-based buffer overflows in tm1admsd.exe in the Admin Server in IBM Cognos TM1 9.4.x and 9.5.x before 9.5.2 FP2 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted data.ibm · cognos tm1EPSS54%2 exploitsPublished May 4, 2012
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2012-6066 | freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demonstrated by an OpenSSH client with modified versions of ssh.c and sshconnect2.c. freesshd · freesshd | Critical 9.3 | 40% | 4 exploits | |
| CVE-2012-5975 | The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6.2.5, and 6.3.0 through 6.3.2 on UNIX and Linux, when old-style password authentication is enabled, allows remote attackers to bypass authentication via a… ssh · tectia server | Critical 9.3 | 36% | 3 exploits | |
| CVE-2012-4959 | Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD request with a .. novell · file reporter | Critical 10.0 | 71% | 3 exploits | |
| CVE-2012-5896 | The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers to execute arbitrary code via a memory address in the first argument, related to an "uninitialized… quest · intrust | Critical 10.0 | 69% | 4 exploits | |
| CVE-2012-3569 | Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file. vmware · ovf tool | Critical 9.3 | 48% | 4 exploits | |
| CVE-2012-3753 | Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MIME type. apple · quicktime | Critical 9.3 | 35% | 2 exploits | |
| CVE-2012-3752 | Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted style element in a QuickTime TeXML file. apple · quicktime | Critical 9.3 | 36% | 2 exploits | |
| CVE-2012-5692 | Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x through 3.3.x has unknown impact and remote attack vectors. invisioncommunity · invision power board | Critical 10.0 | 26% | 4 exploits | |
| CVE-2011-5227 | Stack-based buffer overflow in the Syslog service (nssyslogd.exe) in Enterasys Network Management Suite (NMS) before 4.1.0.80 allows remote attackers to execute arbitrary code via a long PRIO field in a message to UDP port 514. enterasys · netsight | Critical 10.0 | 77% | 2 exploits | |
| CVE-2012-5088 | OpenJDK: MethodHandle insufficient access control checks (Libraries, 7196190) oracle · jre | Critical 10.0 | 79% | 2 exploits | |
| CVE-2012-1533 | JDK: unspecified vulnerability (Deployment) oracle · jdk | Critical 10.0 | 69% | 2 exploits | |
| CVE-2012-0182 | Microsoft Word 2007 SP2 and SP3 does not properly handle memory during the parsing of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Word PAPX Section Corruption Vulnerability." microsoft · word | Critical 9.3 | 68% | · | |
| CVE-2012-3993 | Mozilla: Chrome Object Wrapper (COW) does not disallow acces to privileged functions or properties (MFSA 2012-83) mozilla · firefox | Critical 9.3 | 43% | 2 exploits | |
| CVE-2012-3261 | Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1463. hp · sitescope | Critical 10.0 | 40% | 1 exploit | |
| CVE-2012-3260 | Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1462. hp · sitescope | Critical 10.0 | 40% | 1 exploit | |
| CVE-2012-3259 | Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1461. hp · sitescope | Critical 10.0 | 60% | · | |
| CVE-2012-4924 | Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execute arbitrary code via a long parameter to the Alert method. asus · net4switch | Critical 9.3 | 36% | 3 exploits | |
| CVE-2011-5171 | Multiple stack-based buffer overflows in CyberLink Power2Go 7 (build 196) and 8 (build 1031) allow remote attackers to execute arbitrary code via the (1) src and (2) name parameters in a p2g project file. cyberlink · power2go | Critical 9.3 | 46% | 4 exploits | |
| CVE-2011-5170 | Stack-based buffer overflow in Castillo Bueno Systems CCMPlayer 1.5 allows remote attackers to execute arbitrary code via a long track name in an m3u playlist. castillobueno · ccmplayer | Critical 9.3 | 32% | 5 exploits | |
| CVE-2011-5165 | Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wav file. cleanersoft · free mp3 cd ripper | Critical 9.3 | 37% | 16 exploits | |
| CVE-2011-5164 | Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote FTP servers to execute arbitrary code via a crafted file name in a LIST command response. vandyke · absoluteftp | Critical 9.3 | 29% | 3 exploits | |
| CVE-2012-4876 | Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera allows remote attackers to execute arbitrary code via a long string to the OpenFileDlg method. trendnet · securview wireless internet camera activex control | Critical 10.0 | 71% | 4 exploits | |
| CVE-2012-2288 | Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via format string specifiers in a message. emc · networker | Critical 9.3 | 33% | 2 exploits | |
| CVE-2010-5193 | Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0 and Gold 6.0 allows remote attackers to execute arbitrary code via a long strDelimit parameter. viscomsoft · image viewer cp gold sdk | Critical 9.3 | 32% | 4 exploits | |
| CVE-2011-5124 | Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows remote attackers to execute arbitrary code via a large packet to the synchronization port (16102/tcp). bluecoat · proxyone | Critical 10.0 | 55% | 2 exploits | |
| CVE-2012-4598 | An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows remote attackers to execute arbitrary code or cause a denial of service (Internet Explorer crash) via a crafted web site. mcafee · mcafee virtual technician | Critical 9.3 | 29% | 3 exploits | |
| CVE-2012-1851 | Format string vulnerability in the Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted response,… microsoft · windows 7 | Critical 10.0 | 66% | · | |
| CVE-2012-4333 | Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0 ActiveX controls in Samsung NET-i viewer 1.37.120316 allow remote attackers to execute arbitrary code via a long string in the fname parameter. samsung · net-i viewer | Critical 10.0 | 60% | 4 exploits | |
| CVE-2012-4177 | The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbit_exe_path command line argument. ubi · uplay pc | Critical 10.0 | 58% | 2 exploits | |
| CVE-2012-2953 | The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to application scripts. symantec · web gateway | Critical 10.0 | 67% | 3 exploits | |
| CVE-2012-0284 | Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.ocx on the Cisco WVC200 Wireless-G PTZ Internet video camera allows remote attackers to execute arbitrary code via a long URL in the first argument (aka the… cisco · linksys playerpt activex control | Critical 9.3 | 36% | 4 exploits | |
| CVE-2012-0911 | TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the (1) cookieName to lib/banners/bannerlib.php; (2) printpages or (3) printstructures parameter to (a) tiki-print_multi_pages.php or (b)… tiki · tikiwiki cms\/groupware | Critical 9.8 | 63% | 5 exploits | |
| CVE-2012-2020 | Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1326. hp · operations agent | Critical 10.0 | 65% | 2 exploits | |
| CVE-2012-2019 | Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1325. hp · operations agent | Critical 10.0 | 64% | 2 exploits | |
| CVE-2012-2516 | An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; Proficy HMI/SCADA iFIX 5.0 and 5.1; Proficy Pulse 1.0; Proficy Batch Execution 5.6; SI7 I/O Driver 7.20… ge · intelligent platforms proficy historian | Critical 9.3 | 40% | 2 exploits | |
| CVE-2012-2515 | Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the HTML Help component), as used in EMC Documentum ApplicationXtender Desktop 5.4; EMC Captiva Quickscan Pro 4.6 SP1; GE Intelligent Platforms… emc · captiva quickscan pro | Critical 9.3 | 28% | 1 exploit | |
| CVE-2012-3811 | Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before 7.0.5.8 Q1 2012 Maintenance Release and 8.0 before 8.0.9.13 Q1 2012 Maintenance Release allows remote attackers to execute arbitrary code… avaya · ip office customer call reporter | Critical 10.0 | 63% | 2 exploits | |
| CVE-2012-3815 | Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 46824. sielcosistemi · winlog lite | Critical 9.3 | 44% | 3 exploits | |
| CVE-2012-2175 | Buffer overflow in the Attachment_Times method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a long argument. ibm · lotus inotes | Critical 9.3 | 29% | 2 exploits | |
| CVE-2012-2174 | The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted notes:// URL. ibm · lotus notes | Critical 9.3 | 38% | 2 exploits | |
| CVE-2012-1876 | Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting to access a nonexistent object, leading to a heap-based buffer overflow, aka "Col Element Remote… microsoft · internet explorer | Critical 9.3 | 65% | 6 exploits | |
| CVE-2012-1875 | Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Same ID Property Remote Code Execution Vulnerability." microsoft · internet explorer | Critical 9.3 | 62% | 2 exploits | |
| CVE-2012-2176 | Multiple stack-based buffer overflows in a certain ActiveX control in qp2.cab in IBM Lotus Quickr 8.2 before 8.2.0.27-002a for Domino allow remote attackers to execute arbitrary code via a long argument to the (1) Attachment_Times or (2) Import_Times method. ibm · lotus quickr | Critical 9.3 | 32% | 2 exploits | |
| CVE-2012-2926 | Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; FishEye and Crucible before 2.5.8, 2.6 before 2.6.8, and 2.7 before 2.7.12; Bamboo before 3.3.4 and 3.4.x before 3.4.5; and Crowd before 2.0.9, 2.1 before 2.1.2, 2.2 before 2.2.9, 2.3… atlassian · bamboo | Critical 9.1 | 66% | 1 exploit | |
| CVE-2012-0299 | The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code to a designated pathname, and possibly execute this code, via unspecified vectors. symantec · web gateway | Critical 10.0 | 64% | 2 exploits | |
| CVE-2012-0297 | The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by (1) injecting crafted data or (2) including crafted data. symantec · web gateway | Critical 10.0 | 73% | 6 exploits | |
| CVE-2012-2915 | Stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.2.1344 allows remote attackers to execute arbitrary code via a long string in a Value tag in a SymbolicSchematicData definition tag in PAC Design (.pac) file. lattice semiconductor · pac-designer | Critical 9.3 | 29% | 3 exploits | |
| CVE-2012-0663 | Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TeXML file. apple · quicktime | Critical 9.3 | 28% | 2 exploits | |
| CVE-2012-2611 | The DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2, when a certain Developer Trace configuration is enabled, allows remote attackers to execute arbitrary code via a… sap · netweaver | Critical 9.3 | 44% | 4 exploits | |
| CVE-2012-0202 | Multiple stack-based buffer overflows in tm1admsd.exe in the Admin Server in IBM Cognos TM1 9.4.x and 9.5.x before 9.5.2 FP2 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted data. ibm · cognos tm1 | Critical 10.0 | 54% | 2 exploits |
Showing 1,101–1,150 of 1,642
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.