Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
1,642 vulnerabilities · highest exploit probability first
- CVE-2009-2011Critical 9.3Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a plug-in for Firefox, does not restrict access to the shell.execute JavaScript API method, which allows remote attackers to execute arbitrary commands via a…dxstudio · dx studio playerEPSS40%2 exploitsPublished Jun 16, 2009
- CVE-2009-1943Critical 10.0Stack-based buffer overflow in the IKE service (ireIke.exe) in SafeNet SoftRemote before 10.8.6 allows remote attackers to execute arbitrary code via a long request to UDP port 62514.safenet-inc · softremoteEPSS72%2 exploitsPublished Jun 5, 2009
- CVE-2009-0950Critical 9.3Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an itms: URL with a long URL component after a colon.apple · itunesEPSS29%3 exploitsPublished Jun 2, 2009
- CVE-2009-1831Critical 9.3The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow.nullsoft · winampEPSS36%2 exploitsPublished May 29, 2009
- CVE-2009-1730Critical 10.0Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read or modify arbitrary files via directory traversal sequences in the (1) GET or (2) PUT command.netmechanica · netdecision tftp serverEPSS55%2 exploitsPublished May 20, 2009
- CVE-2009-1641Critical 9.3Multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file.mini-stream · ripperEPSS31%1 exploitPublished May 15, 2009
- CVE-2009-1612Critical 9.3Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009.baofeng · stormEPSS33%2 exploitsPublished May 11, 2009
- CVE-2008-4828Critical 10.0Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, and 5.4.0.0 through 5.4.1.96, and the TSM Express client 5.3.3.0 through…ibm · tivoli storage manager clientEPSS71%2 exploitsPublished May 5, 2009
- CVE-2009-1430Critical 9.3Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV)…symantec · antivirusEPSS55%2 exploitsPublished Apr 29, 2009
- CVE-2009-1429Critical 10.0The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1…symantec · antivirusEPSS88%3 exploitsPublished Apr 29, 2009
- CVE-2009-1350Critical 10.0Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute arbitrary code by establishing an IPC$ connection to the XTIERRPCPIPE named pipe, and sending RPC messages that trigger a dereference of an arbitrary pointer.novell · netidentity client1.2.3EPSS66%2 exploitsPublished Apr 21, 2009
- CVE-2008-4830Critical 9.3Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 Patch 5 (KWEDIT.DLL 7100.1.1.43) allows remote attackers to (1) overwrite arbitrary files via the SaveDocumentAs method or (2) read or execute arbitrary files…sap · sap guiEPSS28%2 exploitsPublished Apr 16, 2009
- CVE-2007-2238Critical 9.3Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft Intelligent Application Gateway (IAG) before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the (1) CheckForUpdates or (2)…microsoft · intelligent application gateway 2007EPSS46%2 exploitsPublished Apr 16, 2009
- CVE-2009-1260Critical 9.3Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted (1) CCD or (2) IMG file.ezbsystems · ultraisoEPSS43%2 exploitsPublished Apr 7, 2009
- CVE-2007-4475Critical 9.3Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute arbitrary code via a long argument to the SaveViewToSessionFile method.sap · sapguiEPSS40%3 exploitsPublished Apr 1, 2009
- CVE-2009-0215Critical 9.3Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors.ibm · access support activex controlEPSS36%2 exploitsPublished Mar 25, 2009
- CVE-2009-1029Critical 9.3Stack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to execute arbitrary code via a long Date header, related to Imap.dll.poppeeper · pop peeperEPSS32%4 exploitsPublished Mar 19, 2009
- CVE-2009-1028Critical 9.3Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file.edisys · ezip wizardEPSS33%3 exploitsPublished Mar 19, 2009
- CVE-2009-0837Critical 10.0Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary code via a long (1) relative path or (2) absolute path in the filename argument in an action, as demonstrated by the "Open/Execute a file"…foxit · reader3.0EPSS76%3 exploitsPublished Mar 10, 2009
- CVE-2009-0187Critical 9.3Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote attackers to execute arbitrary code via a crafted HTTP URL with a long host name, which is not properly handled when constructing a "Connecting" log message.orbitdownloader · orbit downloaderEPSS40%3 exploitsPublished Feb 26, 2009
- CVE-2009-0546Critical 9.3Stack-based buffer overflow in NewsGator FeedDemon 2.7 and earlier allows user-assisted remote attackers to execute arbitrary code via a long text attribute in an outline element in a .opml file.newsgator · feeddemonEPSS37%3 exploitsPublished Feb 12, 2009
- CVE-2009-0545Critical 10.0cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action.zeroshell · zeroshellEPSS90%1 exploitPublished Feb 12, 2009
- CVE-2009-0075Critical 9.3Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to CFunctionPointer and the appending of document objects, aka "Uninitialized…microsoft · internet explorerEPSS85%3 exploitsPublished Feb 10, 2009
- CVE-2009-0476Critical 9.3Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedia Soft audio components for .NET, allows remote attackers to execute arbitrary code via a long string in a playlist (.pls) file, as originally reported for…multimediasoft · audio dj studio for .netEPSS37%7 exploitsPublished Feb 8, 2009
- CVE-2009-0184Critical 9.3Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allow remote attackers to execute arbitrary code via (1) a long file name within a torrent file, (2) a long tracker URL in a torrent file, or (3) a long…free download manager · free download managerEPSS28%3 exploitsPublished Feb 3, 2009
- CVE-2009-0183Critical 10.0Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute arbitrary code via a long Authorization header in an HTTP request.free download manager · free download managerEPSS67%2 exploitsPublished Feb 3, 2009
- CVE-2009-0323Critical 10.0Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrary code via (1) a long type parameter in an input tag, which is not properly handled by the EndOfXmlAttributeValue function; (2) an "HTML GI" in a start tag,…w3 · amayaEPSS62%2 exploitsPublished Jan 28, 2009
- CVE-2008-4388Critical 9.3The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods.symantec · appstream clientEPSS38%2 exploitsPublished Jan 20, 2009
- CVE-2009-0133Critical 10.0Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Index file" field, possibly a related issue to CVE-2006-0564.microsoft · html help workshopEPSS67%7 exploitsPublished Jan 15, 2009
- CVE-2008-5457Critical 10.0Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via…oracle · bea product suiteEPSS61%3 exploitsPublished Jan 14, 2009
- CVE-2008-5444Critical 10.0Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5448 and CVE-2008-5449.oracle · secure backupEPSS61%2 exploitsPublished Jan 13, 2009
- CVE-2009-0043Critical 10.0The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors.ca · service level managementEPSS53%1 exploitPublished Jan 8, 2009
- CVE-2008-0067Critical 10.0Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program,…hp · openview network node managerEPSS63%2 exploitsPublished Jan 8, 2009
- CVE-2008-5711Critical 9.3Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value.facebook · photouploaderEPSS33%3 exploitsPublished Dec 24, 2008
- CVE-2008-5664Critical 9.3Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows remote attackers to execute arbitrary code via a crafted playlist (PLA) file.realtek · realtek media playerEPSS36%2 exploitsPublished Dec 18, 2008
- CVE-2008-5499Critical 9.3flash-plugin: Linux-specific code execution flaw via crafted SWF fileadobe · flash player for linuxEPSS79%2 exploitsPublished Dec 17, 2008
- CVE-2008-5492Critical 9.3Heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OCX Control allows remote attackers to execute arbitrary code via a long first argument to the OpenPDF method.verypdf · verydoc pdf viewerEPSS35%3 exploitsPublished Dec 12, 2008
- CVE-2008-4844Critical 9.3Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via DSO bindings involving (1) an XML Island, (2) XML DSOs, or (3) Tabular…microsoft · internet explorerEPSS67%2 exploitsPublished Dec 11, 2008
- CVE-2008-5416Critical 9.0Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 Desktop Engine (WMSDE) on Windows Server 2003 SP1 and SP2; and Windows Internal…microsoft · sql serverEPSS87%4 exploitsPublished Dec 10, 2008
- CVE-2008-4255Critical 9.3Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, and Office Project 2003 SP3 and 2007 Gold…microsoft · projectEPSS54%1 exploitPublished Dec 10, 2008
- CVE-2008-5405Critical 9.3Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier, allows remote attackers to execute arbitrary code via an RDP file containing a long string.oxid · cain and abelEPSS47%3 exploitsPublished Dec 10, 2008
- CVE-2008-5353Critical 10.0OpenJDK calendar object deserialization allows privilege escalation (6734167)sun · jdkEPSS86%5 exploitsPublished Dec 4, 2008
- CVE-2008-2431Critical 9.3Multiple buffer overflows in Novell iPrint Client before 5.06 allow remote attackers to execute arbitrary code by calling the Novell iPrint ActiveX control (aka ienipp.ocx) with (1) a long third argument to the GetDriverFile method; a long first argument to the (2)…novell · iprintEPSS51%·Published Nov 25, 2008
- CVE-2008-5159Critical 10.0Integer overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to cause a denial of service (crash) via a large string length argument, which triggers memory corruption.clientsoftware · wincome mpd totalEPSS60%3 exploitsPublished Nov 18, 2008
- CVE-2008-5053Critical 10.0PHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader (com_rssreader) 1.0 component for Joomla!joomla · com rssreaderEPSS64%1 exploitPublished Nov 13, 2008
- CVE-2008-4037Critical 9.3Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka…microsoft · windows 2000EPSS59%3 exploitsPublished Nov 12, 2008
- CVE-2008-5036Critical 9.3Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText (rt) subtitle file, related to the ParseRealText function in modules/demux/subtitle.c.videolan · vlc media playerEPSS41%3 exploitsPublished Nov 10, 2008
- CVE-2008-5002Critical 9.3Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilkat Crypt ActiveX Component allows remote attackers to create and overwrite arbitrary files via the WriteFile method.chilkat software · chilkat crypt activex controlEPSS41%2 exploitsPublished Nov 10, 2008
- CVE-2008-4922Critical 9.3Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll) allows remote attackers to execute arbitrary code via a long (1) ImageURL property, and possibly the (2) Mode, (3) Page, or (4) Zoom properties.djvu · activex control for microsoft office 2000EPSS33%2 exploitsPublished Nov 4, 2008
- CVE-2008-4779Critical 10.0Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash) or execute arbitrary code via a long filename in a .zip file.tguzip · tguzipEPSS65%3 exploitsPublished Oct 29, 2008
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2009-2011 | Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a plug-in for Firefox, does not restrict access to the shell.execute JavaScript API method, which allows remote attackers to execute arbitrary commands via a… dxstudio · dx studio player | Critical 9.3 | 40% | 2 exploits | |
| CVE-2009-1943 | Stack-based buffer overflow in the IKE service (ireIke.exe) in SafeNet SoftRemote before 10.8.6 allows remote attackers to execute arbitrary code via a long request to UDP port 62514. safenet-inc · softremote | Critical 10.0 | 72% | 2 exploits | |
| CVE-2009-0950 | Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an itms: URL with a long URL component after a colon. apple · itunes | Critical 9.3 | 29% | 3 exploits | |
| CVE-2009-1831 | The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow. nullsoft · winamp | Critical 9.3 | 36% | 2 exploits | |
| CVE-2009-1730 | Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read or modify arbitrary files via directory traversal sequences in the (1) GET or (2) PUT command. netmechanica · netdecision tftp server | Critical 10.0 | 55% | 2 exploits | |
| CVE-2009-1641 | Multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file. mini-stream · ripper | Critical 9.3 | 31% | 1 exploit | |
| CVE-2009-1612 | Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. baofeng · storm | Critical 9.3 | 33% | 2 exploits | |
| CVE-2008-4828 | Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, and 5.4.0.0 through 5.4.1.96, and the TSM Express client 5.3.3.0 through… ibm · tivoli storage manager client | Critical 10.0 | 71% | 2 exploits | |
| CVE-2009-1430 | Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV)… symantec · antivirus | Critical 9.3 | 55% | 2 exploits | |
| CVE-2009-1429 | The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1… symantec · antivirus | Critical 10.0 | 88% | 3 exploits | |
| CVE-2009-1350 | Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute arbitrary code by establishing an IPC$ connection to the XTIERRPCPIPE named pipe, and sending RPC messages that trigger a dereference of an arbitrary pointer. novell · netidentity client1.2.3 | Critical 10.0 | 66% | 2 exploits | |
| CVE-2008-4830 | Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 Patch 5 (KWEDIT.DLL 7100.1.1.43) allows remote attackers to (1) overwrite arbitrary files via the SaveDocumentAs method or (2) read or execute arbitrary files… sap · sap gui | Critical 9.3 | 28% | 2 exploits | |
| CVE-2007-2238 | Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft Intelligent Application Gateway (IAG) before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the (1) CheckForUpdates or (2)… microsoft · intelligent application gateway 2007 | Critical 9.3 | 46% | 2 exploits | |
| CVE-2009-1260 | Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted (1) CCD or (2) IMG file. ezbsystems · ultraiso | Critical 9.3 | 43% | 2 exploits | |
| CVE-2007-4475 | Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute arbitrary code via a long argument to the SaveViewToSessionFile method. sap · sapgui | Critical 9.3 | 40% | 3 exploits | |
| CVE-2009-0215 | Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors. ibm · access support activex control | Critical 9.3 | 36% | 2 exploits | |
| CVE-2009-1029 | Stack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to execute arbitrary code via a long Date header, related to Imap.dll. poppeeper · pop peeper | Critical 9.3 | 32% | 4 exploits | |
| CVE-2009-1028 | Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file. edisys · ezip wizard | Critical 9.3 | 33% | 3 exploits | |
| CVE-2009-0837 | Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary code via a long (1) relative path or (2) absolute path in the filename argument in an action, as demonstrated by the "Open/Execute a file"… foxit · reader3.0 | Critical 10.0 | 76% | 3 exploits | |
| CVE-2009-0187 | Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote attackers to execute arbitrary code via a crafted HTTP URL with a long host name, which is not properly handled when constructing a "Connecting" log message. orbitdownloader · orbit downloader | Critical 9.3 | 40% | 3 exploits | |
| CVE-2009-0546 | Stack-based buffer overflow in NewsGator FeedDemon 2.7 and earlier allows user-assisted remote attackers to execute arbitrary code via a long text attribute in an outline element in a .opml file. newsgator · feeddemon | Critical 9.3 | 37% | 3 exploits | |
| CVE-2009-0545 | cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action. zeroshell · zeroshell | Critical 10.0 | 90% | 1 exploit | |
| CVE-2009-0075 | Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to CFunctionPointer and the appending of document objects, aka "Uninitialized… microsoft · internet explorer | Critical 9.3 | 85% | 3 exploits | |
| CVE-2009-0476 | Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedia Soft audio components for .NET, allows remote attackers to execute arbitrary code via a long string in a playlist (.pls) file, as originally reported for… multimediasoft · audio dj studio for .net | Critical 9.3 | 37% | 7 exploits | |
| CVE-2009-0184 | Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allow remote attackers to execute arbitrary code via (1) a long file name within a torrent file, (2) a long tracker URL in a torrent file, or (3) a long… free download manager · free download manager | Critical 9.3 | 28% | 3 exploits | |
| CVE-2009-0183 | Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute arbitrary code via a long Authorization header in an HTTP request. free download manager · free download manager | Critical 10.0 | 67% | 2 exploits | |
| CVE-2009-0323 | Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrary code via (1) a long type parameter in an input tag, which is not properly handled by the EndOfXmlAttributeValue function; (2) an "HTML GI" in a start tag,… w3 · amaya | Critical 10.0 | 62% | 2 exploits | |
| CVE-2008-4388 | The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods. symantec · appstream client | Critical 9.3 | 38% | 2 exploits | |
| CVE-2009-0133 | Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Index file" field, possibly a related issue to CVE-2006-0564. microsoft · html help workshop | Critical 10.0 | 67% | 7 exploits | |
| CVE-2008-5457 | Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via… oracle · bea product suite | Critical 10.0 | 61% | 3 exploits | |
| CVE-2008-5444 | Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5448 and CVE-2008-5449. oracle · secure backup | Critical 10.0 | 61% | 2 exploits | |
| CVE-2009-0043 | The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors. ca · service level management | Critical 10.0 | 53% | 1 exploit | |
| CVE-2008-0067 | Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program,… hp · openview network node manager | Critical 10.0 | 63% | 2 exploits | |
| CVE-2008-5711 | Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value. facebook · photouploader | Critical 9.3 | 33% | 3 exploits | |
| CVE-2008-5664 | Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows remote attackers to execute arbitrary code via a crafted playlist (PLA) file. realtek · realtek media player | Critical 9.3 | 36% | 2 exploits | |
| CVE-2008-5499 | flash-plugin: Linux-specific code execution flaw via crafted SWF file adobe · flash player for linux | Critical 9.3 | 79% | 2 exploits | |
| CVE-2008-5492 | Heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OCX Control allows remote attackers to execute arbitrary code via a long first argument to the OpenPDF method. verypdf · verydoc pdf viewer | Critical 9.3 | 35% | 3 exploits | |
| CVE-2008-4844 | Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via DSO bindings involving (1) an XML Island, (2) XML DSOs, or (3) Tabular… microsoft · internet explorer | Critical 9.3 | 67% | 2 exploits | |
| CVE-2008-5416 | Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 Desktop Engine (WMSDE) on Windows Server 2003 SP1 and SP2; and Windows Internal… microsoft · sql server | Critical 9.0 | 87% | 4 exploits | |
| CVE-2008-4255 | Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, and Office Project 2003 SP3 and 2007 Gold… microsoft · project | Critical 9.3 | 54% | 1 exploit | |
| CVE-2008-5405 | Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier, allows remote attackers to execute arbitrary code via an RDP file containing a long string. oxid · cain and abel | Critical 9.3 | 47% | 3 exploits | |
| CVE-2008-5353 | OpenJDK calendar object deserialization allows privilege escalation (6734167) sun · jdk | Critical 10.0 | 86% | 5 exploits | |
| CVE-2008-2431 | Multiple buffer overflows in Novell iPrint Client before 5.06 allow remote attackers to execute arbitrary code by calling the Novell iPrint ActiveX control (aka ienipp.ocx) with (1) a long third argument to the GetDriverFile method; a long first argument to the (2)… novell · iprint | Critical 9.3 | 51% | · | |
| CVE-2008-5159 | Integer overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to cause a denial of service (crash) via a large string length argument, which triggers memory corruption. clientsoftware · wincome mpd total | Critical 10.0 | 60% | 3 exploits | |
| CVE-2008-5053 | PHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader (com_rssreader) 1.0 component for Joomla! joomla · com rssreader | Critical 10.0 | 64% | 1 exploit | |
| CVE-2008-4037 | Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka… microsoft · windows 2000 | Critical 9.3 | 59% | 3 exploits | |
| CVE-2008-5036 | Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText (rt) subtitle file, related to the ParseRealText function in modules/demux/subtitle.c. videolan · vlc media player | Critical 9.3 | 41% | 3 exploits | |
| CVE-2008-5002 | Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilkat Crypt ActiveX Component allows remote attackers to create and overwrite arbitrary files via the WriteFile method. chilkat software · chilkat crypt activex control | Critical 9.3 | 41% | 2 exploits | |
| CVE-2008-4922 | Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll) allows remote attackers to execute arbitrary code via a long (1) ImageURL property, and possibly the (2) Mode, (3) Page, or (4) Zoom properties. djvu · activex control for microsoft office 2000 | Critical 9.3 | 33% | 2 exploits | |
| CVE-2008-4779 | Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash) or execute arbitrary code via a long filename in a .zip file. tguzip · tguzip | Critical 10.0 | 65% | 3 exploits |
Showing 1,351–1,400 of 1,642
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.