Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
1,642 vulnerabilities · highest exploit probability first
- CVE-2009-4502Critical 9.3The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote attackers to bypass the EnableRemoteCommands setting and execute arbitrary commands via shell metacharacters in the argument to net.tcp.listen.zabbix · zabbixEPSS22%3 exploitsPublished Dec 31, 2009
- CVE-2007-2280Critical 10.0Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via an MSG_PROTOCOL command with long arguments,…hp · openview storage data protectorEPSS60%2 exploitsPublished Dec 18, 2009
- CVE-2009-4179Critical 10.0Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Accept-Language header in an OVABverbose action.hp · openview network node managerEPSS67%3 exploitsPublished Dec 10, 2009
- CVE-2009-4178Critical 10.0Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long Topic parameter.hp · openview network node managerEPSS74%3 exploitsPublished Dec 10, 2009
- CVE-2009-3849Critical 10.0Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long Template parameter to nnmRptConfig.exe, related to the strcat function; or (2) a long Oid parameter to snmp.exe.hp · openview network node managerEPSS74%2 exploitsPublished Dec 10, 2009
- CVE-2009-4265Critical 9.3Stack-based buffer overflow in Ideal Administration 2009 9.7.1, and possibly other versions, allows remote attackers to execute arbitrary code via a long Computer value in an .ipj project file.pointdev · ideal administration 2009EPSS31%4 exploitsPublished Dec 10, 2009
- CVE-2009-3844Critical 10.0Stack-based buffer overflow in the OmniInet process in HP OpenView Data Protector Application Recovery Manager 5.50 and 6.0 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted MSG_PROTOCOL packet.hp · openview data protector application recovery managerEPSS74%3 exploitsPublished Dec 8, 2009
- CVE-2009-1569Critical 9.3Multiple stack-based buffer overflows in Novell iPrint Client 4.38, 5.30, and possibly other versions before 5.32 allow remote attackers to execute arbitrary code via vectors related to (1) Date and (2) Time.novell · iprintEPSS38%2 exploitsPublished Dec 8, 2009
- CVE-2009-1568Critical 9.3Stack-based buffer overflow in ienipp.ocx in Novell iPrint Client 5.30, and possibly other versions before 5.32, allows remote attackers to execute arbitrary code via a long target-frame parameter.novell · iprint clientEPSS32%2 exploitsPublished Dec 8, 2009
- CVE-2009-4225Critical 9.3Stack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust PestPatrol allows remote attackers to execute arbitrary code via a long argument to the Initialize method.ca · etrust pestpatrole ppctl.dll activexEPSS31%2 exploitsPublished Dec 8, 2009
- CVE-2009-4195Critical 9.3Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execute arbitrary code via a long DSC comment in an Encapsulated PostScript (.eps) file.adobe · illustratorEPSS71%4 exploitsPublished Dec 4, 2009
- CVE-2009-4189Critical 10.0HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet…hp · operations managerEPSS79%3 exploitsPublished Dec 3, 2009
- CVE-2009-4188Critical 10.0HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat…hp · operations dashboardEPSS69%4 exploitsPublished Dec 3, 2009
- CVE-2009-3672Critical 9.3Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory that (1) were not properly initialized or (2) are deleted, which allows remote attackers to execute arbitrary code via vectors involving a call to the getElementsByTagName method for the STYLE tag…microsoft · internet explorerEPSS72%2 exploitsPublished Dec 2, 2009
- CVE-2009-3033Critical 9.3Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment Solution 6.9.x, Altiris Notification Server 6.0.x, and Management Platform 7.0.x allows remote…symantec · altiris deployment solutionEPSS40%2 exploitsPublished Nov 25, 2009
- CVE-2009-3843Critical 10.0HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the…hp · operations managerEPSS79%3 exploitsPublished Nov 23, 2009
- CVE-2009-4006Critical 10.0Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other versions before 9.1.0.0 allows remote attackers to execute arbitrary code via a long hexadecimal string.solarwinds · serv-u file serverEPSS83%2 exploitsPublished Nov 20, 2009
- CVE-2009-3976Critical 9.3Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service (application crash) or execute arbitrary code via a long 220 reply (aka connection greeting or welcome message).labtam-inc · proftpEPSS28%3 exploitsPublished Nov 18, 2009
- CVE-2009-2685Critical 10.0Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers to execute arbitrary code via the Login variable.hp · power managerEPSS77%3 exploitsPublished Nov 6, 2009
- CVE-2009-3853Critical 9.3Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7, 5.4 before 5.4.3, 5.5 before 5.5.2.2, and 6.1 before 6.1.0.2, and TSM Express 5.3.3.0 through 5.3.6.6, allows remote attackers to…ibm · tivoli storage managerEPSS37%2 exploitsPublished Nov 4, 2009
- CVE-2009-3031Critical 9.3Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSConsoleUtilities.dll in Symantec Altiris Notification Server (NS) 6.0 before R12, Deployment Server 6.8 and 6.9 in Symantec Altiris…symantec · altiris deployment solutionEPSS45%3 exploitsPublished Nov 3, 2009
- CVE-2009-3867Critical 9.3java-1.6.0-sun: Stack-based buffer overflow via a long file: URL argument (6854303)sun · jdkEPSS73%4 exploitsPublished Nov 3, 2009
- CVE-2009-3869Critical 9.3OpenJDK JRE AWT setDifflCM stack overflow (6872357)sun · jdkEPSS65%2 exploitsPublished Nov 3, 2009
- CVE-2009-3837Critical 9.3Stack-based buffer overflow in Eureka Email 2.2q allows remote POP3 servers to execute arbitrary code via a long error message.eureka-email · eureka emailEPSS32%4 exploitsPublished Nov 2, 2009
- CVE-2009-1979Critical 10.0Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.oracle · database serverEPSS76%3 exploitsPublished Oct 22, 2009
- CVE-2009-3711Critical 10.0Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.jasper · httpdxEPSS64%3 exploitsPublished Oct 16, 2009
- CVE-2009-3699Critical 10.0Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR string in the first argument to procedure 21 of rpc.cmsd.ibm · viosEPSS62%2 exploitsPublished Oct 15, 2009
- CVE-2009-2532Critical 10.0Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process the command value in an SMB Multi-Protocol Negotiate Request packet, which allows remote attackers to execute arbitrary code via a crafted SMBv2 packet to the…microsoft · windows server 2008EPSS62%2 exploitsPublished Oct 14, 2009
- CVE-2009-3693Critical 9.3Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows remote attackers to create arbitrary files via \..hp · loadrunnerEPSS42%3 exploitsPublished Oct 13, 2009
- CVE-2009-2990Critical 9.3acroread: Multiple arbitrary code execution fixes in 8.1.7 (APSB09-15)adobe · acrobatEPSS69%3 exploitsPublished Oct 13, 2009
- CVE-2009-3429Critical 9.3Stack-based buffer overflow in Pirate Radio Destiny Media Player 1.61 allows remote attackers to execute arbitrary code via a long string in a .pls playlist file.pirateradio · destiny media playerEPSS35%7 exploitsPublished Sep 25, 2009
- CVE-2009-3214Critical 9.3Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code via a crafted Slideshow project (.psh) file, related to the (1) cell[n].images[m].image and (2) cell[n].sound.file fields.photodex · proshow goldEPSS31%4 exploitsPublished Sep 16, 2009
- CVE-2008-7232Critical 10.0Buffer overflow in the report function in xtacacsd 4.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted CONNECT TACACS command.netplex-tech · xtacacsdEPSS25%2 exploitsPublished Sep 14, 2009
- CVE-2009-3103Critical 10.0Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an & (ampersand)…microsoft · windows server 2008EPSS92%7 exploitsPublished Sep 8, 2009
- CVE-2009-3068Critical 9.3Unrestricted file upload vulnerability in the RoboHelpServer Servlet (robohelp/server) in Adobe RoboHelp Server 8 allows remote attackers to execute arbitrary code by uploading a Java Archive (.jsp) file during a PUBLISH action, then accessing it via a direct request to the file…adobe · robohelp serverEPSS78%3 exploitsPublished Sep 4, 2009
- CVE-2009-3023Critical 9.0Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbitrary code via a crafted NLST (NAME LIST) command that uses wildcards, leading to memory corruption, aka "IIS FTP Service RCE and…microsoft · internet information serverEPSS91%6 exploitsPublished Aug 31, 2009
- CVE-2009-1534Critical 9.3Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and Visual Studio .NET 2003 SP1 allows remote attackers to execute arbitrary code via crafted property…microsoft · officeEPSS52%2 exploitsPublished Aug 12, 2009
- CVE-2009-2727Critical 9.3Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0 through 6.1.3, when the rpc.ttdbserver daemon is enabled in /etc/inetd.conf, allows remote attackers to execute arbitrary…ibm · aixEPSS27%2 exploitsPublished Aug 10, 2009
- CVE-2008-6898Critical 9.3Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long argument to the Get method and other unspecified methods.saschart · sascam webcam serverEPSS32%3 exploitsPublished Aug 5, 2009
- CVE-2009-2650Critical 9.3Heap-based buffer overflow in Sorcerer Software MultiMedia Jukebox 4.0 Build 020124 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted (1) .m3u or possibly (2) .pst file.sorcerersoftware · multimedia jukeboxEPSS31%4 exploitsPublished Jul 30, 2009
- CVE-2009-2566Critical 9.3Stack-based buffer overflow in TFM MMPlayer 2.0, and possibly 2.0.0.30, allows remote attackers to execute arbitrary code via a long string in a playlist (.m3u) file.tfm · mmplayerEPSS31%2 exploitsPublished Jul 21, 2009
- CVE-2009-2484Critical 9.3Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long…videolan · vlc media playerEPSS35%3 exploitsPublished Jul 16, 2009
- CVE-2009-2485Critical 9.3Stack-based buffer overflow in HT-MP3Player 1.0 allows remote attackers to execute arbitrary code via a long string in a .ht3 file.tingan · ht-mp3playerEPSS58%4 exploitsPublished Jul 16, 2009
- CVE-2009-1136Critical 9.3The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet…microsoft · isa serverEPSS62%3 exploitsPublished Jul 15, 2009
- CVE-2009-1978Critical 9.0Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.oracle · secure backupEPSS65%1 exploitPublished Jul 14, 2009
- CVE-2009-1977Critical 10.0Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.oracle · secure backupEPSS73%1 exploitPublished Jul 14, 2009
- CVE-2009-2477Critical 9.3firefox 3.5 various flawsmozilla · firefoxEPSS43%5 exploitsPublished Jul 14, 2009
- CVE-2009-2261Critical 9.3PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .zip archive with a .txt file whose name contains | (pipe) characters and a command.giorgio tani · peazipEPSS41%3 exploitsPublished Jun 30, 2009
- CVE-2009-2227Critical 10.0Stack-based buffer overflow in B Labs Bopup Communication Server 3.2.26.5460 allows remote attackers to execute arbitrary code via a crafted request to TCP port 19810.blabsoft · bopup communication serverEPSS69%4 exploitsPublished Jun 26, 2009
- CVE-2009-1394Critical 9.3Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote attackers to execute arbitrary code by sending a long malformed string over the PlughNTCommand named pipe.motorola · timbuktu proEPSS33%2 exploitsPublished Jun 26, 2009
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2009-4502 | The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote attackers to bypass the EnableRemoteCommands setting and execute arbitrary commands via shell metacharacters in the argument to net.tcp.listen. zabbix · zabbix | Critical 9.3 | 22% | 3 exploits | |
| CVE-2007-2280 | Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via an MSG_PROTOCOL command with long arguments,… hp · openview storage data protector | Critical 10.0 | 60% | 2 exploits | |
| CVE-2009-4179 | Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Accept-Language header in an OVABverbose action. hp · openview network node manager | Critical 10.0 | 67% | 3 exploits | |
| CVE-2009-4178 | Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long Topic parameter. hp · openview network node manager | Critical 10.0 | 74% | 3 exploits | |
| CVE-2009-3849 | Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long Template parameter to nnmRptConfig.exe, related to the strcat function; or (2) a long Oid parameter to snmp.exe. hp · openview network node manager | Critical 10.0 | 74% | 2 exploits | |
| CVE-2009-4265 | Stack-based buffer overflow in Ideal Administration 2009 9.7.1, and possibly other versions, allows remote attackers to execute arbitrary code via a long Computer value in an .ipj project file. pointdev · ideal administration 2009 | Critical 9.3 | 31% | 4 exploits | |
| CVE-2009-3844 | Stack-based buffer overflow in the OmniInet process in HP OpenView Data Protector Application Recovery Manager 5.50 and 6.0 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted MSG_PROTOCOL packet. hp · openview data protector application recovery manager | Critical 10.0 | 74% | 3 exploits | |
| CVE-2009-1569 | Multiple stack-based buffer overflows in Novell iPrint Client 4.38, 5.30, and possibly other versions before 5.32 allow remote attackers to execute arbitrary code via vectors related to (1) Date and (2) Time. novell · iprint | Critical 9.3 | 38% | 2 exploits | |
| CVE-2009-1568 | Stack-based buffer overflow in ienipp.ocx in Novell iPrint Client 5.30, and possibly other versions before 5.32, allows remote attackers to execute arbitrary code via a long target-frame parameter. novell · iprint client | Critical 9.3 | 32% | 2 exploits | |
| CVE-2009-4225 | Stack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust PestPatrol allows remote attackers to execute arbitrary code via a long argument to the Initialize method. ca · etrust pestpatrole ppctl.dll activex | Critical 9.3 | 31% | 2 exploits | |
| CVE-2009-4195 | Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execute arbitrary code via a long DSC comment in an Encapsulated PostScript (.eps) file. adobe · illustrator | Critical 9.3 | 71% | 4 exploits | |
| CVE-2009-4189 | HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet… hp · operations manager | Critical 10.0 | 79% | 3 exploits | |
| CVE-2009-4188 | HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat… hp · operations dashboard | Critical 10.0 | 69% | 4 exploits | |
| CVE-2009-3672 | Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory that (1) were not properly initialized or (2) are deleted, which allows remote attackers to execute arbitrary code via vectors involving a call to the getElementsByTagName method for the STYLE tag… microsoft · internet explorer | Critical 9.3 | 72% | 2 exploits | |
| CVE-2009-3033 | Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment Solution 6.9.x, Altiris Notification Server 6.0.x, and Management Platform 7.0.x allows remote… symantec · altiris deployment solution | Critical 9.3 | 40% | 2 exploits | |
| CVE-2009-3843 | HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the… hp · operations manager | Critical 10.0 | 79% | 3 exploits | |
| CVE-2009-4006 | Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other versions before 9.1.0.0 allows remote attackers to execute arbitrary code via a long hexadecimal string. solarwinds · serv-u file server | Critical 10.0 | 83% | 2 exploits | |
| CVE-2009-3976 | Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service (application crash) or execute arbitrary code via a long 220 reply (aka connection greeting or welcome message). labtam-inc · proftp | Critical 9.3 | 28% | 3 exploits | |
| CVE-2009-2685 | Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers to execute arbitrary code via the Login variable. hp · power manager | Critical 10.0 | 77% | 3 exploits | |
| CVE-2009-3853 | Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7, 5.4 before 5.4.3, 5.5 before 5.5.2.2, and 6.1 before 6.1.0.2, and TSM Express 5.3.3.0 through 5.3.6.6, allows remote attackers to… ibm · tivoli storage manager | Critical 9.3 | 37% | 2 exploits | |
| CVE-2009-3031 | Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSConsoleUtilities.dll in Symantec Altiris Notification Server (NS) 6.0 before R12, Deployment Server 6.8 and 6.9 in Symantec Altiris… symantec · altiris deployment solution | Critical 9.3 | 45% | 3 exploits | |
| CVE-2009-3867 | java-1.6.0-sun: Stack-based buffer overflow via a long file: URL argument (6854303) sun · jdk | Critical 9.3 | 73% | 4 exploits | |
| CVE-2009-3869 | OpenJDK JRE AWT setDifflCM stack overflow (6872357) sun · jdk | Critical 9.3 | 65% | 2 exploits | |
| CVE-2009-3837 | Stack-based buffer overflow in Eureka Email 2.2q allows remote POP3 servers to execute arbitrary code via a long error message. eureka-email · eureka email | Critical 9.3 | 32% | 4 exploits | |
| CVE-2009-1979 | Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. oracle · database server | Critical 10.0 | 76% | 3 exploits | |
| CVE-2009-3711 | Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request. jasper · httpdx | Critical 10.0 | 64% | 3 exploits | |
| CVE-2009-3699 | Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR string in the first argument to procedure 21 of rpc.cmsd. ibm · vios | Critical 10.0 | 62% | 2 exploits | |
| CVE-2009-2532 | Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process the command value in an SMB Multi-Protocol Negotiate Request packet, which allows remote attackers to execute arbitrary code via a crafted SMBv2 packet to the… microsoft · windows server 2008 | Critical 10.0 | 62% | 2 exploits | |
| CVE-2009-3693 | Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows remote attackers to create arbitrary files via \.. hp · loadrunner | Critical 9.3 | 42% | 3 exploits | |
| CVE-2009-2990 | acroread: Multiple arbitrary code execution fixes in 8.1.7 (APSB09-15) adobe · acrobat | Critical 9.3 | 69% | 3 exploits | |
| CVE-2009-3429 | Stack-based buffer overflow in Pirate Radio Destiny Media Player 1.61 allows remote attackers to execute arbitrary code via a long string in a .pls playlist file. pirateradio · destiny media player | Critical 9.3 | 35% | 7 exploits | |
| CVE-2009-3214 | Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code via a crafted Slideshow project (.psh) file, related to the (1) cell[n].images[m].image and (2) cell[n].sound.file fields. photodex · proshow gold | Critical 9.3 | 31% | 4 exploits | |
| CVE-2008-7232 | Buffer overflow in the report function in xtacacsd 4.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted CONNECT TACACS command. netplex-tech · xtacacsd | Critical 10.0 | 25% | 2 exploits | |
| CVE-2009-3103 | Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an & (ampersand)… microsoft · windows server 2008 | Critical 10.0 | 92% | 7 exploits | |
| CVE-2009-3068 | Unrestricted file upload vulnerability in the RoboHelpServer Servlet (robohelp/server) in Adobe RoboHelp Server 8 allows remote attackers to execute arbitrary code by uploading a Java Archive (.jsp) file during a PUBLISH action, then accessing it via a direct request to the file… adobe · robohelp server | Critical 9.3 | 78% | 3 exploits | |
| CVE-2009-3023 | Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbitrary code via a crafted NLST (NAME LIST) command that uses wildcards, leading to memory corruption, aka "IIS FTP Service RCE and… microsoft · internet information server | Critical 9.0 | 91% | 6 exploits | |
| CVE-2009-1534 | Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and Visual Studio .NET 2003 SP1 allows remote attackers to execute arbitrary code via crafted property… microsoft · office | Critical 9.3 | 52% | 2 exploits | |
| CVE-2009-2727 | Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0 through 6.1.3, when the rpc.ttdbserver daemon is enabled in /etc/inetd.conf, allows remote attackers to execute arbitrary… ibm · aix | Critical 9.3 | 27% | 2 exploits | |
| CVE-2008-6898 | Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long argument to the Get method and other unspecified methods. saschart · sascam webcam server | Critical 9.3 | 32% | 3 exploits | |
| CVE-2009-2650 | Heap-based buffer overflow in Sorcerer Software MultiMedia Jukebox 4.0 Build 020124 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted (1) .m3u or possibly (2) .pst file. sorcerersoftware · multimedia jukebox | Critical 9.3 | 31% | 4 exploits | |
| CVE-2009-2566 | Stack-based buffer overflow in TFM MMPlayer 2.0, and possibly 2.0.0.30, allows remote attackers to execute arbitrary code via a long string in a playlist (.m3u) file. tfm · mmplayer | Critical 9.3 | 31% | 2 exploits | |
| CVE-2009-2484 | Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long… videolan · vlc media player | Critical 9.3 | 35% | 3 exploits | |
| CVE-2009-2485 | Stack-based buffer overflow in HT-MP3Player 1.0 allows remote attackers to execute arbitrary code via a long string in a .ht3 file. tingan · ht-mp3player | Critical 9.3 | 58% | 4 exploits | |
| CVE-2009-1136 | The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet… microsoft · isa server | Critical 9.3 | 62% | 3 exploits | |
| CVE-2009-1978 | Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. oracle · secure backup | Critical 9.0 | 65% | 1 exploit | |
| CVE-2009-1977 | Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. oracle · secure backup | Critical 10.0 | 73% | 1 exploit | |
| CVE-2009-2477 | firefox 3.5 various flaws mozilla · firefox | Critical 9.3 | 43% | 5 exploits | |
| CVE-2009-2261 | PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .zip archive with a .txt file whose name contains | (pipe) characters and a command. giorgio tani · peazip | Critical 9.3 | 41% | 3 exploits | |
| CVE-2009-2227 | Stack-based buffer overflow in B Labs Bopup Communication Server 3.2.26.5460 allows remote attackers to execute arbitrary code via a crafted request to TCP port 19810. blabsoft · bopup communication server | Critical 10.0 | 69% | 4 exploits | |
| CVE-2009-1394 | Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote attackers to execute arbitrary code by sending a long malformed string over the PlughNTCommand named pipe. motorola · timbuktu pro | Critical 9.3 | 33% | 2 exploits |
Showing 1,301–1,350 of 1,642
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.