Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
1,474 vulnerabilities · highest exploit probability first
- CVE-2009-4655High 7.5The dhost web service in Novell eDirectory 8.8.5 uses a predictable session cookie, which makes it easier for remote attackers to hijack sessions via a modified cookie.novell · edirectoryEPSS51%1 exploitPublished Feb 26, 2010
- CVE-2010-0242High 7.8The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service (system hang) via crafted packets with malformed TCP selective acknowledgement (SACK) values, aka "TCP/IP Selective…microsoft · windows vistaEPSS66%·Published Feb 10, 2010
- CVE-2010-0022High 7.8The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate the share and servername fields in SMB…microsoft · windows 2000EPSS79%·Published Feb 10, 2010
- CVE-2010-0557High 7.5IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leveraging hardcoded credentials.ibm · cognos expressEPSS52%3 exploitsPublished Feb 5, 2010
- CVE-2010-0304High 7.5Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demonstrated using a stack-based buffer overflow to the…wireshark · wiresharkEPSS74%5 exploitsPublished Feb 3, 2010
- CVE-2009-4484High 7.5mysql: yaSSL certificate parsing buffer overflow (vulndisco)oracle · mysqlEPSS70%2 exploitsPublished Jan 25, 2010
- CVE-2010-0248High 8.1Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Object…microsoft · internet explorerEPSS53%2 exploitsPublished Jan 22, 2010
- CVE-2009-4223High 7.5PHP remote file inclusion vulnerability in adm/krgourl.php in KR-Web 1.1b2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter.gianni tommasi · kr-php web content serverEPSS55%2 exploitsPublished Dec 7, 2009
- CVE-2009-3548High 7.5The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges.apache · tomcatEPSS79%4 exploitsPublished Nov 12, 2009
- CVE-2009-4140High 8.8Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer, as used in Piwik 0.2.35 through 0.4.3, Woopra Analytics Plugin before 1.4.3.2, and possibly other products, when register_globals is enabled, allows remote…teethgrinder.co.uk · open flash chartEPSS76%8 exploitsPublished Oct 20, 2009
- CVE-2009-2526High 7.8Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 do not properly validate fields in SMBv2 packets, which allows remote attackers to cause a denial of service (infinite loop and system hang) via a crafted packet to the Server service, aka "SMBv2 Infinite…microsoft · windows vistaEPSS82%2 exploitsPublished Oct 14, 2009
- CVE-2009-2629High 7.5Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests.f5 · nginxEPSS75%1 exploitPublished Sep 15, 2009
- CVE-2009-2765High 8.3httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a cgi-bin/ URI.dd-wrt · dd-wrtEPSS83%4 exploitsPublished Aug 14, 2009
- CVE-2009-2265High 7.5moin: embedded fckeditor multiple directory traversal vulnsfckeditor · fckeditorEPSS84%3 exploitsPublished Jul 3, 2009
- CVE-2009-2288High 7.5nagios: remote code execution via statuswml.cgi CGI scriptnagios · nagiosEPSS83%4 exploitsPublished Jun 18, 2009
- CVE-2009-1122High 7.5The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication, and possibly read or create files, via a crafted HTTP request, aka "IIS 5.0 WebDAV Authentication…microsoft · internet information servicesEPSS98%1 exploitPublished Jun 10, 2009
- CVE-2009-1535High 7.5The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI-based protection mechanisms, and list folders or read, create, or modify files, via a %c0%af (Unicode / character) at an arbitrary position in the URI, as…microsoft · internet information servicesEPSS98%2 exploitsPublished Jun 10, 2009
- CVE-2009-1955High 7.5The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document…apache · apr-utilEPSS53%1 exploitPublished Jun 8, 2009
- CVE-2009-0714High 7.2Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Express and Express SSE 3.x before build 47065, and Express and Express SSE 4.x before build 46537, allows remote attackers to cause a denial of service (application…hp · data protector expressEPSS52%2 exploitsPublished May 14, 2009
- CVE-2009-1185High 7.2udev: Uncheck origin of NETLINK messagesudev project · udevEPSS81%4 exploitsPublished Apr 15, 2009
- CVE-2009-0920High 7.5Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long OvOSLocale cookie, a variant of CVE-2008-0067.hp · network node managerEPSS75%2 exploitsPublished Mar 24, 2009
- CVE-2008-6508High 7.5Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to bypass authentication and access the admin interface via a ..igniterealtime · openfireEPSS84%2 exploitsPublished Mar 23, 2009
- CVE-2008-6221High 7.5PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager (com_dadamail) component 2.6 for Joomla!dadamailproject · dada mail managerEPSS54%·Published Feb 20, 2009
- CVE-2009-0658High 7.8acroread: multiple JBIG2-related security flawsadobe · acrobatEPSS88%5 exploitsPublished Feb 19, 2009
- CVE-2009-0542High 7.5SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" (percent) character in the username, which introduces a "'" (single quote) character during variable substitution by mod_sql.proftpd project · proftpdEPSS74%2 exploitsPublished Feb 12, 2009
- CVE-2009-0182High 8.8Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line.vuplayer · vuplayerEPSS48%4 exploitsPublished Jan 20, 2009
- CVE-2008-3656High 7.8ruby: WEBrick DoS vulnerability (CPU consumption)ruby-lang · rubyEPSS70%1 exploitPublished Aug 8, 2008
- CVE-2008-2789High 7.5SQL injection vulnerability in pages/index.php in BASIC-CMS allows remote attackers to execute arbitrary SQL commands via the page_id parameter.basic-cms · basic-cmsEPSS23%1 exploitPublished Jun 20, 2008
- CVE-2008-2639High 7.6Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows remote attackers to execute arbitrary code via a long string in the second application packet in a TCP session on port 20222.citect · citectfacilitiesEPSS78%2 exploitsPublished Jun 16, 2008
- CVE-2008-1105High 7.5Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.samba · sambaEPSS69%1 exploitPublished May 29, 2008
- CVE-2008-2499High 7.5Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code via a crafted URL.ibm · lotus sametimeEPSS77%3 exploitsPublished May 29, 2008
- CVE-2008-2286High 7.5SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via unspecified string fields in a notification packet.symantec · altiris deployment solutionEPSS33%2 exploitsPublished May 18, 2008
- CVE-2008-0166High 7.5OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which makes it easier for remote attackers to conduct brute force guessing attacks against cryptographic keys.openssl · opensslEPSS71%3 exploitsPublished May 13, 2008
- CVE-2008-1083High 8.1Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF or WMF image file with a malformed header that triggers…microsoft · windows 2000EPSS57%1 exploitPublished Apr 8, 2008
- CVE-2008-1610High 7.5Stack-based buffer overflow in TallSoft Quick TFTP Server Pro 2.1 allows remote attackers to cause a denial of service or execute arbitrary code via a long mode field in a read or write request.tallsoft quick · tftp server proEPSS54%3 exploitsPublished Apr 1, 2008
- CVE-2008-0926High 7.5The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on client-side authentication, which allows remote attackers to bypass authentication via requests for /SOAP URIs, and cause a denial of service (daemon shutdown) or…novell · edirectoryEPSS58%1 exploitPublished Mar 28, 2008
- CVE-2008-0084High 7.8Unspecified vulnerability in the TCP/IP support in Microsoft Windows Vista allows remote DHCP servers to cause a denial of service (hang and restart) via a crafted DHCP packet.microsoft · windows vistaEPSS74%·Published Feb 12, 2008
- CVE-2008-0621High 7.5Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands.sap · saplpdEPSS73%2 exploitsPublished Feb 6, 2008
- CVE-2008-0226High 7.5Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "input_buffer& operator>>" in yassl_imp.cpp.mysql · mysqlEPSS92%5 exploitsPublished Jan 28, 2008
- CVE-2007-6509High 7.8Unspecified vulnerability in Appian Enterprise Business Process Management (BPM) Suite 5.6 SP1 allows remote attackers to cause a denial of service via a crafted packet to port 5400/tcp.appian · business process management suiteEPSS55%1 exploitPublished Dec 21, 2007
- CVE-2007-6377High 7.5Stack-based buffer overflow in the PassThru functionality in ext.dll in BadBlue 2.72b and earlier allows remote attackers to execute arbitrary code via a long query string.badblue · badblueEPSS66%3 exploitsPublished Dec 14, 2007
- CVE-2007-3901High 8.5Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted SAMI file.microsoft · directxEPSS46%2 exploitsPublished Dec 11, 2007
- CVE-2007-5779High 7.5Buffer overflow in the GomManager (GomWeb Control) ActiveX control in GomWeb3.dll 1.0.0.12 in Gretech Online Movie Player (GOM Player) 2.1.6.3499 allows remote attackers to execute arbitrary code via a long argument to the OpenUrl method.gom player · gom playerEPSS72%2 exploitsPublished Nov 1, 2007
- CVE-2007-5208High 7.6hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail.hp · linux imaging and printing projectEPSS67%2 exploitsPublished Oct 13, 2007
- CVE-2007-5423High 7.5tiki-graph_formula.php in TikiWiki 1.9.8 allows remote attackers to execute arbitrary code via PHP sequences in the f array parameter, which are processed by create_function.tiki · tikiwiki cms\/groupwareEPSS77%2 exploitsPublished Oct 12, 2007
- CVE-2007-5365High 7.2dhcpd stack-based buffer overlowopenbsd · openbsdEPSS80%1 exploitPublished Oct 8, 2007
- CVE-2007-5099High 7.5PHP remote file inclusion vulnerability in show.php in David Watters Helplink 0.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter.david watters · helplinkEPSS53%·Published Sep 26, 2007
- CVE-2007-5067High 7.5Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow remote attackers to execute arbitrary code via a long If-Modified-Since header to (1) xigui32.exe or (2) xitami.exe.imatix · xitamiEPSS73%2 exploitsPublished Sep 24, 2007
- CVE-2007-4921High 7.5PHP remote file inclusion vulnerability in _includes/settings.inc.php in Ajax File Browser 3 Beta allows remote attackers to execute arbitrary PHP code via a URL in the approot parameter.ajax · file browserEPSS53%·Published Sep 17, 2007
- CVE-2007-4834High 7.5Multiple PHP remote file inclusion vulnerabilities in phpRealty 0.02 allow remote attackers to execute arbitrary PHP code via a URL in the MGR parameter to (1) index.php, (2) p_ins.php, and (3) u_ins.php in manager/admin/.phprealty · phprealtyEPSS59%·Published Sep 12, 2007
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2009-4655 | The dhost web service in Novell eDirectory 8.8.5 uses a predictable session cookie, which makes it easier for remote attackers to hijack sessions via a modified cookie. novell · edirectory | High 7.5 | 51% | 1 exploit | |
| CVE-2010-0242 | The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service (system hang) via crafted packets with malformed TCP selective acknowledgement (SACK) values, aka "TCP/IP Selective… microsoft · windows vista | High 7.8 | 66% | · | |
| CVE-2010-0022 | The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate the share and servername fields in SMB… microsoft · windows 2000 | High 7.8 | 79% | · | |
| CVE-2010-0557 | IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leveraging hardcoded credentials. ibm · cognos express | High 7.5 | 52% | 3 exploits | |
| CVE-2010-0304 | Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demonstrated using a stack-based buffer overflow to the… wireshark · wireshark | High 7.5 | 74% | 5 exploits | |
| CVE-2009-4484 | mysql: yaSSL certificate parsing buffer overflow (vulndisco) oracle · mysql | High 7.5 | 70% | 2 exploits | |
| CVE-2010-0248 | Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Object… microsoft · internet explorer | High 8.1 | 53% | 2 exploits | |
| CVE-2009-4223 | PHP remote file inclusion vulnerability in adm/krgourl.php in KR-Web 1.1b2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter. gianni tommasi · kr-php web content server | High 7.5 | 55% | 2 exploits | |
| CVE-2009-3548 | The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges. apache · tomcat | High 7.5 | 79% | 4 exploits | |
| CVE-2009-4140 | Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer, as used in Piwik 0.2.35 through 0.4.3, Woopra Analytics Plugin before 1.4.3.2, and possibly other products, when register_globals is enabled, allows remote… teethgrinder.co.uk · open flash chart | High 8.8 | 76% | 8 exploits | |
| CVE-2009-2526 | Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 do not properly validate fields in SMBv2 packets, which allows remote attackers to cause a denial of service (infinite loop and system hang) via a crafted packet to the Server service, aka "SMBv2 Infinite… microsoft · windows vista | High 7.8 | 82% | 2 exploits | |
| CVE-2009-2629 | Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests. f5 · nginx | High 7.5 | 75% | 1 exploit | |
| CVE-2009-2765 | httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a cgi-bin/ URI. dd-wrt · dd-wrt | High 8.3 | 83% | 4 exploits | |
| CVE-2009-2265 | moin: embedded fckeditor multiple directory traversal vulns fckeditor · fckeditor | High 7.5 | 84% | 3 exploits | |
| CVE-2009-2288 | nagios: remote code execution via statuswml.cgi CGI script nagios · nagios | High 7.5 | 83% | 4 exploits | |
| CVE-2009-1122 | The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication, and possibly read or create files, via a crafted HTTP request, aka "IIS 5.0 WebDAV Authentication… microsoft · internet information services | High 7.5 | 98% | 1 exploit | |
| CVE-2009-1535 | The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI-based protection mechanisms, and list folders or read, create, or modify files, via a %c0%af (Unicode / character) at an arbitrary position in the URI, as… microsoft · internet information services | High 7.5 | 98% | 2 exploits | |
| CVE-2009-1955 | The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document… apache · apr-util | High 7.5 | 53% | 1 exploit | |
| CVE-2009-0714 | Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Express and Express SSE 3.x before build 47065, and Express and Express SSE 4.x before build 46537, allows remote attackers to cause a denial of service (application… hp · data protector express | High 7.2 | 52% | 2 exploits | |
| CVE-2009-1185 | udev: Uncheck origin of NETLINK messages udev project · udev | High 7.2 | 81% | 4 exploits | |
| CVE-2009-0920 | Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long OvOSLocale cookie, a variant of CVE-2008-0067. hp · network node manager | High 7.5 | 75% | 2 exploits | |
| CVE-2008-6508 | Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to bypass authentication and access the admin interface via a .. igniterealtime · openfire | High 7.5 | 84% | 2 exploits | |
| CVE-2008-6221 | PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager (com_dadamail) component 2.6 for Joomla! dadamailproject · dada mail manager | High 7.5 | 54% | · | |
| CVE-2009-0658 | acroread: multiple JBIG2-related security flaws adobe · acrobat | High 7.8 | 88% | 5 exploits | |
| CVE-2009-0542 | SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" (percent) character in the username, which introduces a "'" (single quote) character during variable substitution by mod_sql. proftpd project · proftpd | High 7.5 | 74% | 2 exploits | |
| CVE-2009-0182 | Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line. vuplayer · vuplayer | High 8.8 | 48% | 4 exploits | |
| CVE-2008-3656 | ruby: WEBrick DoS vulnerability (CPU consumption) ruby-lang · ruby | High 7.8 | 70% | 1 exploit | |
| CVE-2008-2789 | SQL injection vulnerability in pages/index.php in BASIC-CMS allows remote attackers to execute arbitrary SQL commands via the page_id parameter. basic-cms · basic-cms | High 7.5 | 23% | 1 exploit | |
| CVE-2008-2639 | Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows remote attackers to execute arbitrary code via a long string in the second application packet in a TCP session on port 20222. citect · citectfacilities | High 7.6 | 78% | 2 exploits | |
| CVE-2008-1105 | Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response. samba · samba | High 7.5 | 69% | 1 exploit | |
| CVE-2008-2499 | Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code via a crafted URL. ibm · lotus sametime | High 7.5 | 77% | 3 exploits | |
| CVE-2008-2286 | SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via unspecified string fields in a notification packet. symantec · altiris deployment solution | High 7.5 | 33% | 2 exploits | |
| CVE-2008-0166 | OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which makes it easier for remote attackers to conduct brute force guessing attacks against cryptographic keys. openssl · openssl | High 7.5 | 71% | 3 exploits | |
| CVE-2008-1083 | Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF or WMF image file with a malformed header that triggers… microsoft · windows 2000 | High 8.1 | 57% | 1 exploit | |
| CVE-2008-1610 | Stack-based buffer overflow in TallSoft Quick TFTP Server Pro 2.1 allows remote attackers to cause a denial of service or execute arbitrary code via a long mode field in a read or write request. tallsoft quick · tftp server pro | High 7.5 | 54% | 3 exploits | |
| CVE-2008-0926 | The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on client-side authentication, which allows remote attackers to bypass authentication via requests for /SOAP URIs, and cause a denial of service (daemon shutdown) or… novell · edirectory | High 7.5 | 58% | 1 exploit | |
| CVE-2008-0084 | Unspecified vulnerability in the TCP/IP support in Microsoft Windows Vista allows remote DHCP servers to cause a denial of service (hang and restart) via a crafted DHCP packet. microsoft · windows vista | High 7.8 | 74% | · | |
| CVE-2008-0621 | Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands. sap · saplpd | High 7.5 | 73% | 2 exploits | |
| CVE-2008-0226 | Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "input_buffer& operator>>" in yassl_imp.cpp. mysql · mysql | High 7.5 | 92% | 5 exploits | |
| CVE-2007-6509 | Unspecified vulnerability in Appian Enterprise Business Process Management (BPM) Suite 5.6 SP1 allows remote attackers to cause a denial of service via a crafted packet to port 5400/tcp. appian · business process management suite | High 7.8 | 55% | 1 exploit | |
| CVE-2007-6377 | Stack-based buffer overflow in the PassThru functionality in ext.dll in BadBlue 2.72b and earlier allows remote attackers to execute arbitrary code via a long query string. badblue · badblue | High 7.5 | 66% | 3 exploits | |
| CVE-2007-3901 | Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted SAMI file. microsoft · directx | High 8.5 | 46% | 2 exploits | |
| CVE-2007-5779 | Buffer overflow in the GomManager (GomWeb Control) ActiveX control in GomWeb3.dll 1.0.0.12 in Gretech Online Movie Player (GOM Player) 2.1.6.3499 allows remote attackers to execute arbitrary code via a long argument to the OpenUrl method. gom player · gom player | High 7.5 | 72% | 2 exploits | |
| CVE-2007-5208 | hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail. hp · linux imaging and printing project | High 7.6 | 67% | 2 exploits | |
| CVE-2007-5423 | tiki-graph_formula.php in TikiWiki 1.9.8 allows remote attackers to execute arbitrary code via PHP sequences in the f array parameter, which are processed by create_function. tiki · tikiwiki cms\/groupware | High 7.5 | 77% | 2 exploits | |
| CVE-2007-5365 | dhcpd stack-based buffer overlow openbsd · openbsd | High 7.2 | 80% | 1 exploit | |
| CVE-2007-5099 | PHP remote file inclusion vulnerability in show.php in David Watters Helplink 0.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter. david watters · helplink | High 7.5 | 53% | · | |
| CVE-2007-5067 | Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow remote attackers to execute arbitrary code via a long If-Modified-Since header to (1) xigui32.exe or (2) xitami.exe. imatix · xitami | High 7.5 | 73% | 2 exploits | |
| CVE-2007-4921 | PHP remote file inclusion vulnerability in _includes/settings.inc.php in Ajax File Browser 3 Beta allows remote attackers to execute arbitrary PHP code via a URL in the approot parameter. ajax · file browser | High 7.5 | 53% | · | |
| CVE-2007-4834 | Multiple PHP remote file inclusion vulnerabilities in phpRealty 0.02 allow remote attackers to execute arbitrary PHP code via a URL in the MGR parameter to (1) index.php, (2) p_ins.php, and (3) u_ins.php in manager/admin/. phprealty · phprealty | High 7.5 | 59% | · |
Showing 1,201–1,250 of 1,474
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.