Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Emerging

Emerging Threats, Before They Hit KEV.

Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.

Synced hourly · figures as of Oct 20, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
1,642 vulnerabilities · highest exploit probability first
  • CVE-2012-0779Critical 9.3
    flash-plugin: arbitrary code execution via object confusion (APSB12-09)
    adobe · flash player
    EPSS87%
    2 exploits
    Published May 4, 2012
  • CVE-2012-0708Critical 9.3
    Heap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM Rational ClearQuest 7.1.1 before 7.1.1.9, 7.1.2 before 7.1.2.6, and 8.0.0 before 8.0.0.2 allows remote attackers to execute arbitrary code via a crafted web page that leverages a…
    ibm · rational clearquest
    EPSS31%
    2 exploits
    Published Apr 22, 2012
  • CVE-2012-1182Critical 10.0
    The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a…
    samba · samba
    EPSS74%
    2 exploits
    Published Apr 10, 2012
  • CVE-2011-3176Critical 10.0
    Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to execute arbitrary code via an opcode 0x4c request.
    novell · zenworks configuration management
    EPSS70%
    3 exploits
    Published Apr 9, 2012
  • CVE-2011-3175Critical 10.0
    Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to execute arbitrary code via an opcode 0x6c request.
    novell · zenworks configuration management
    EPSS66%
    3 exploits
    Published Apr 9, 2012
  • CVE-2012-1775Critical 9.3
    Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS:// stream.
    videolan · vlc media player
    EPSS44%
    2 exploits
    Published Mar 19, 2012
  • CVE-2012-0124Critical 10.0
    Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors.
    hp · data protector express
    EPSS62%
    2 exploits
    Published Mar 14, 2012
  • CVE-2012-0002Critical 9.3
    The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to…
    microsoft · windows 7
    EPSS74%
    1 exploit
    Published Mar 13, 2012
  • CVE-2012-0198Critical 9.3
    Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allows remote attackers to execute arbitrary code via vectors related to an Asset Information file.
    ibm · tivoli provisioning manager express for software distribution
    EPSS37%
    2 exploits
    Published Mar 6, 2012
  • CVE-2012-0201Critical 9.3
    Stack-based buffer overflow in pcspref.dll in pcsws.exe in IBM Personal Communications 5.9.x before 5.9.8 and 6.0.x before 6.0.4 might allow remote attackers to execute arbitrary code via a long profile string in a WorkStation (aka .ws) file.
    ibm · personal communications
    EPSS36%
    3 exploits
    Published Mar 2, 2012
  • CVE-2012-0155Critical 9.3
    Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Remote Code Execution Vulnerability."
    microsoft · internet explorer
    EPSS65%
    ·
    Published Feb 14, 2012
  • CVE-2012-0500Critical 10.0
    JDK: unspecified vulnerability fixed in 6u31 and 7u3 (Deployment)
    oracle · javafx
    EPSS58%
    3 exploits
    Published Feb 14, 2012
  • CVE-2011-3659Critical 9.3
    Mozilla: child nodes from nsDOMAttribute still accessible after removal of nodes (MFSA 2012-04)
    mozilla · firefox
    EPSS37%
    2 exploits
    Published Jan 31, 2012
  • CVE-2011-4135Critical 10.0
    Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager) allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files.
    flexerasoftware · flexnet publisher
    EPSS30%
    1 exploit
    Published Jan 19, 2012
  • CVE-2012-0267Critical 9.3
    The StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to execute arbitrary code via a crafted lModule parameter that triggers use of an arbitrary memory address as a function pointer.
    ntrglobal · ntr activex control
    EPSS39%
    2 exploits
    Published Jan 15, 2012
  • CVE-2012-0266Critical 9.3
    Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitrary code via (1) a long bstrUrl parameter to the StartModule method, (2) a long bstrParams parameter to the Check method, a long bstrUrl parameter to the (3)…
    ntrglobal · ntr activex control
    EPSS42%
    2 exploits
    Published Jan 15, 2012
  • CVE-2011-4789Critical 10.0
    Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary code via a crafted size value in a packet.
    hp · diagnostics
    EPSS64%
    2 exploits
    Published Jan 13, 2012
  • CVE-2011-4786Critical 9.3
    A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and…
    hp · easy printer care software
    EPSS39%
    2 exploits
    Published Jan 12, 2012
  • CVE-2012-0013Critical 9.3
    Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a…
    microsoft · windows 7
    EPSS74%
    3 exploits
    Published Jan 10, 2012
  • CVE-2011-4862Critical 10.0
    Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long…
    gnu · inetutils
    EPSS95%
    6 exploits
    Published Dec 25, 2011
  • CVE-2011-5010Critical 10.0
    apps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via shell metacharacters in the PINGADDRESS parameter for a "u" action.
    ctekproducts · skyrouter
    EPSS66%
    3 exploits
    Published Dec 24, 2011
  • CVE-2011-5007Critical 10.0
    Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB AC500 PLC and possibly other products, allows remote attackers to execute arbitrary code via a long URI to TCP port 8080.
    3ssoftware · codesys
    EPSS73%
    4 exploits
    Published Dec 24, 2011
  • CVE-2011-5003Critical 10.0
    Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port 4659.
    avid · media composer
    EPSS62%
    2 exploits
    Published Dec 24, 2011
  • CVE-2011-5001Critical 10.0
    Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in CmdProcessor.exe in Trend Micro Control Manager 5.5 before Build 1613 allows remote attackers to execute arbitrary code via a crafted IPC packet to TCP port 20101.
    trend micro · control manager
    EPSS64%
    2 exploits
    Published Dec 24, 2011
  • CVE-2010-5081Critical 9.3
    Stack-based buffer overflow in Mini-Stream RM-MP3 Converter 3.1.2.1 allows remote attackers to execute arbitrary code via a long URL in a .pls file.
    mini-stream · rm-mp3 converter
    EPSS31%
    5 exploits
    Published Dec 24, 2011
  • CVE-2009-5109Critical 9.3
    Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long entry in a .pls file.
    mini-stream · ripper
    EPSS32%
    9 exploits
    Published Dec 24, 2011
  • CVE-2011-3400Critical 9.3
    Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 do not properly handle OLE objects in memory, which allows remote attackers to execute arbitrary code via a crafted object in a file, aka "OLE Property Vulnerability."
    microsoft · windows xp
    EPSS71%
    2 exploits
    Published Dec 13, 2011
  • CVE-2011-2653Critical 10.0
    Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management (ZAM) 7.5 allows remote attackers to execute arbitrary code by uploading an executable file.
    novell · zenworks asset management
    EPSS72%
    2 exploits
    Published Dec 8, 2011
  • CVE-2011-4051Critical 10.0
    CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows remote attackers to execute arbitrary code via vectors related to creation of a file, loading a DLL, and process control.
    indusoft · web studio
    EPSS69%
    2 exploits
    Published Dec 5, 2011
  • CVE-2011-4040Critical 10.0
    Buffer overflow in MiniSmtp 3.0.11818 in NJStar Communicator allows remote attackers to execute arbitrary code via a crafted packet.
    njstar · njstar communicator
    EPSS65%
    3 exploits
    Published Nov 21, 2011
  • CVE-2011-3167Critical 10.0
    Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1210.
    hp · openview network node manager
    EPSS65%
    2 exploits
    Published Nov 2, 2011
  • CVE-2011-1996Critical 9.3
    Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Option Element Remote Code Execution Vulnerability."
    microsoft · internet explorer
    EPSS59%
    2 exploits
    Published Oct 11, 2011
  • CVE-2011-3360Critical 9.3
    Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.
    wireshark · wireshark
    EPSS35%
    2 exploits
    Published Sep 20, 2011
  • CVE-2011-3497Critical 10.0
    service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method.
    measuresoft · scadapro
    EPSS57%
    2 exploits
    Published Sep 16, 2011
  • CVE-2011-3494Critical 10.0
    WinSig.exe in eSignal 10.6.2425 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a long StyleTemplate element in a QUO, SUM or POR file, which triggers a stack-based buffer overflow, or (2) a long Font->FaceName…
    interactivedata · esignal
    EPSS56%
    3 exploits
    Published Sep 16, 2011
  • CVE-2011-3492Critical 10.0
    Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted NETB packet to UDP port 20034.
    azeotech · daqfactory
    EPSS71%
    4 exploits
    Published Sep 16, 2011
  • CVE-2011-3322Critical 10.0
    Core Server HMI Service (Coreservice.exe) in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password to the Telnet (TCP/23) port, which triggers an…
    scadatec · procyon scada
    EPSS65%
    3 exploits
    Published Sep 15, 2011
  • CVE-2011-2595Critical 10.0
    Multiple stack-based buffer overflows in ACDSee FotoSlate 4.0 Build 146 allow remote attackers to execute arbitrary code via a long id parameter in a (1) String or (2) Int tag in a FotoSlate Project (aka PLP) file.
    acdsee · fotoslate
    EPSS60%
    2 exploits
    Published Sep 14, 2011
  • CVE-2011-2950Critical 9.3
    Heap-based buffer overflow in qcpfformat.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted QCP file.
    realnetworks · realplayer
    EPSS29%
    2 exploits
    Published Aug 18, 2011
  • CVE-2011-0257Critical 9.3
    Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PnSize opcode in a PICT file that triggers a stack-based buffer overflow.
    apple · quicktime
    EPSS60%
    2 exploits
    Published Aug 15, 2011
  • CVE-2011-1966Critical 10.0
    The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing, which allows remote attackers to execute arbitrary code via a crafted query, aka "DNS NAPTR Query Vulnerability."
    microsoft · windows server 2008
    EPSS55%
    ·
    Published Aug 10, 2011
  • CVE-2011-2140Critical 10.0
    flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)
    adobe · adobe air
    EPSS82%
    4 exploits
    Published Aug 9, 2011
  • CVE-2011-2882Critical 9.3
    Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 allows remote attackers to execute arbitrary code via crafted HTTP header data.
    citrix · access gateway
    EPSS56%
    2 exploits
    Published Jul 21, 2011
  • CVE-2011-1865Critical 10.0
    Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request containing crafted parameters.
    hp · openview storage data protector
    EPSS89%
    6 exploits
    Published Jul 1, 2011
  • CVE-2011-2371Critical 10.0
    Mozilla Integer overflow and arbitrary code execution (MFSA 2011-22)
    mozilla · firefox
    EPSS76%
    4 exploits
    Published Jun 21, 2011
  • CVE-2011-1260Critical 9.3
    Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Layout Memory Corruption Vulnerability."
    microsoft · internet explorer
    EPSS61%
    2 exploits
    Published Jun 16, 2011
  • CVE-2011-2110Critical 10.0
    flash-plugin: memory corruption can lead to arbitrary code execution (APSB11-18)
    adobe · flash player
    EPSS86%
    2 exploits
    Published Jun 14, 2011
  • CVE-2011-2386Critical 9.3
    VisiWaveReport.exe in AZO Technologies, Inc.
    visiwave · site survey
    EPSS45%
    3 exploits
    Published Jun 8, 2011
  • CVE-2011-2217Critical 9.3
    Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.237, as used in VI Client (aka VMware Infrastructure Client) 2.0.2 before Build 230598 and 2.5 before Build 204931 in VMware Infrastructure 3, do not properly…
    tomsawyer · get extension factory
    EPSS42%
    2 exploits
    Published Jun 6, 2011
  • CVE-2011-1220Critical 9.0
    Stack-based buffer overflow in lcfd.exe in Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 allows remote authenticated users to execute arbitrary code via a long opts field.
    ibm · tivoli management framework
    EPSS63%
    2 exploits
    Published Jun 2, 2011
Showing 1,151–1,200 of 1,642

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.

Figures as of Oct 20, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.