Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Emerging

Emerging Threats, Before They Hit KEV.

Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.

Synced hourly · figures as of Oct 20, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
1,474 vulnerabilities · highest exploit probability first
  • CVE-2005-3757High 7.5
    The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to obtain sensitive information and execute arbitrary code via dangerous Java class methods in select attribute of xsl:value-of tags in XSLT style sheets, such as…
    google · mini search appliance
    EPSS41%
    3 exploits
    Published Nov 22, 2005
  • CVE-2005-3683High 7.5
    Stack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled, allows remote attackers to cause a denial of service (application crash), and possibly execute arbitrary code, via a long USER command.
    freeftpd · freeftpd
    EPSS72%
    3 exploits
    Published Nov 18, 2005
  • CVE-2005-3314High 7.5
    Stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary code via "long verb arguments."
    novell · netmail
    EPSS66%
    2 exploits
    Published Nov 18, 2005
  • CVE-2005-3589High 7.8
    Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service (terminal crash) via a long USER ftp command.
    filezilla · filezilla server terminal
    EPSS53%
    1 exploit
    Published Nov 16, 2005
  • CVE-2005-3390High 7.5
    The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a "GLOBALS"…
    php · php
    EPSS66%
    1 exploit
    Published Oct 31, 2005
  • CVE-2005-3252High 7.5
    Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to execute arbitrary code via a crafted UDP packet.
    sourcefire · snort
    EPSS84%
    6 exploits
    Published Oct 18, 2005
  • CVE-2005-3190High 7.5
    Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to execute arbitrary code via HTTP GET requests.
    broadcom · igateway
    EPSS65%
    3 exploits
    Published Oct 13, 2005
  • CVE-2005-1978High 7.5
    COM+ in Microsoft Windows does not properly "create and use memory structures," which allows local users or remote attackers to execute arbitrary code.
    microsoft · windows 2000
    EPSS53%
    1 exploit
    Published Oct 12, 2005
  • CVE-2005-3155High 7.5
    Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute arbitrary code.
    mailenable · mailenable enterprise
    EPSS64%
    3 exploits
    Published Oct 5, 2005
  • CVE-2005-2877High 7.5
    The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers.
    twiki · twiki
    EPSS71%
    4 exploits
    Published Sep 16, 2005
  • CVE-2005-2799High 7.5
    Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remote attackers to execute arbitrary code via a long HTTP POST request.
    linksys · wrt54g
    EPSS71%
    4 exploits
    Published Sep 15, 2005
  • CVE-2005-2847High 7.5
    img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter.
    barracuda networks · barracuda spam firewall
    EPSS53%
    3 exploits
    Published Sep 8, 2005
  • CVE-2005-2733High 7.5
    upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which could allow remote attackers to execute arbitrary code.
    alexander palmo · simple php blog
    EPSS51%
    3 exploits
    Published Aug 30, 2005
  • CVE-2005-2127High 7.5
    Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet…
    microsoft · .net framework
    EPSS64%
    1 exploit
    Published Aug 19, 2005
  • CVE-2005-2612High 8.8
    Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP code via the cache_lastpostdate[server] cookie.
    wordpress · wordpress
    EPSS39%
    2 exploits
    Published Aug 17, 2005
  • CVE-2005-2551High 7.5
    Buffer overflow in dhost.exe in iMonitor for Novell eDirectory 8.7.3 on Windows allows attackers to cause a denial of service (crash) and obtain access to files via unknown vectors.
    novell · edirectory
    EPSS55%
    3 exploits
    Published Aug 12, 2005
  • CVE-2005-2535High 7.5
    Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packet to TCP port 41523, a different vulnerability than CVE-2005-0260.
    broadcom · brightstor arcserve backup
    EPSS81%
    3 exploits
    Published Aug 10, 2005
  • CVE-2005-1984High 7.5
    Buffer overflow in the Print Spooler service (Spoolsv.exe) for Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via a malicious message.
    microsoft · windows 2000
    EPSS55%
    ·
    Published Aug 10, 2005
  • CVE-2005-1272High 7.5
    Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code via a long string sent to port (1) 6070 or (2) 6050.
    ca · brightstor arcserve backup
    EPSS66%
    3 exploits
    Published Aug 5, 2005
  • CVE-2005-2373High 7.2
    Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long directory name to (1) LIST, (2) DELE or (3) RNFR commands.
    whitsoft development · slimftpd
    EPSS46%
    2 exploits
    Published Jul 26, 2005
  • CVE-2005-2278High 7.2
    Stack-based buffer overflow in the IMAP daemon (imapd) in MailEnable Professional 1.54 allows remote authenticated users to execute arbitrary code via the status command with a long mailbox name.
    mailenable · mailenable professional
    EPSS85%
    2 exploits
    Published Jul 18, 2005
  • CVE-2005-2086High 7.5
    PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute arbitrary PHP code.
    phpbb group · phpbb
    EPSS85%
    3 exploits
    Published Jul 5, 2005
  • CVE-2005-1921High 7.5
    Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7)…
    drupal · drupal
    EPSS79%
    6 exploits
    Published Jun 29, 2005
  • CVE-2005-0773High 7.5
    Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allows remote attackers to execute arbitrary code via a CONNECT_CLIENT_AUTH request with authentication method type 3 (Windows credentials) and…
    symantec veritas · backup exec
    EPSS86%
    2 exploits
    Published Jun 18, 2005
  • CVE-2005-1213High 7.5
    Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP servers to execute arbitrary code via a LIST response with a long second field.
    microsoft · outlook express
    EPSS74%
    3 exploits
    Published Jun 14, 2005
  • CVE-2005-1206High 7.5
    Buffer overflow in the Server Message Block (SMB) functionality for Microsoft Windows 2000, XP SP1 and SP2, and Server 2003 and SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka the "Server Message Block Vulnerability."
    microsoft · windows 2000
    EPSS59%
    ·
    Published Jun 14, 2005
  • CVE-2005-1543High 7.5
    Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENworks 6.5 Desktop and Server Management, ZENworks for Desktops 4.x, ZENworks for Servers 3.x, and Remote Management allows remote attackers to execute arbitrary…
    novell · zenworks
    EPSS66%
    3 exploits
    Published May 25, 2005
  • CVE-2005-1825High 7.5
    Multiple stack-based buffer overflows in the nvd_exec function in HP Radia Notify Daemon 3.1.2.0 (formerly by Novadigm), and other versions including 2.x, 3.x, and 4.x, allows remote attackers to execute arbitrary code via a command with crafted parameters to a RADEXECD process.
    hp · radia client
    EPSS62%
    ·
    Published May 3, 2005
  • CVE-2005-1348High 7.5
    Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to execute arbitrary code via a long HTTP Authorization header.
    mailenable · mailenable enterprise
    EPSS73%
    3 exploits
    Published May 2, 2005
  • CVE-2005-0045High 7.5
    The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to execute arbitrary code via Transaction responses containing (1) Trans or (2) Trans2 commands, aka the…
    microsoft · windows nt
    EPSS70%
    1 exploit
    Published May 2, 2005
  • CVE-2005-0560High 7.5
    Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allows remote attackers to execute arbitrary code via a crafted X-LINK2STATE extended verb request to the SMTP port.
    microsoft · exchange server
    EPSS69%
    1 exploit
    Published May 2, 2005
  • CVE-2005-0043High 7.5
    Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files.
    apple · itunes
    EPSS69%
    3 exploits
    Published May 2, 2005
  • CVE-2005-1323High 7.5
    Buffer overflow in NetFtpd for NetTerm 5.1.1 and earlier allows remote attackers to execute arbitrary code via a long USER command.
    intersoft · netterm
    EPSS63%
    3 exploits
    Published May 2, 2005
  • CVE-2005-0595High 7.5
    Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand parameter.
    working resources inc. · badblue
    EPSS60%
    3 exploits
    Published May 2, 2005
  • CVE-2005-0053High 7.5
    Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulnerability."
    microsoft · internet explorer
    EPSS60%
    1 exploit
    Published May 2, 2005
  • CVE-2005-0554High 7.5
    Buffer overflow in the URL processor of Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL with a long hostname, aka "URL Parsing Memory Corruption Vulnerability."
    microsoft · internet explorer
    EPSS58%
    1 exploit
    Published May 2, 2005
  • CVE-2005-1018High 7.5
    Buffer overflow in the UniversalAgent for Computer Associates (CA) BrightStor ARCserve Backup allows remote authenticated users to cause a denial of service or execute arbitrary code via an agent request to TCP port 6050 with a large argument before the option field.
    ca · brightstor arcserve backup
    EPSS52%
    2 exploits
    Published May 2, 2005
  • CVE-2005-0555High 7.5
    Buffer overflow in the Content Advisor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a crafted Content Advisor file, aka "Content Advisor Memory Corruption Vulnerability."
    microsoft · internet explorer
    EPSS58%
    1 exploit
    Published Apr 12, 2005
  • CVE-2005-0511High 7.5
    misc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled, allows remote attackers to execute arbitrary PHP code via nested variables in the template parameter.
    jelsoft · vbulletin
    EPSS36%
    3 exploits
    Published Feb 21, 2005
  • CVE-2004-0932High 7.5
    McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the…
    mcafee · antivirus engine
    EPSS64%
    1 exploit
    Published Jan 27, 2005
  • CVE-2005-0308High 7.5
    Buffer overflow in the wsprintf function in W32Dasm 8.93 and earlier allows remote attackers to execute arbitrary code via a large import or export function name.
    ursoftware · w32dasm
    EPSS69%
    2 exploits
    Published Jan 24, 2005
  • CVE-2005-0116High 7.5
    AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacters in the configdir parameter to aswtats.pl.
    awstats · awstats
    EPSS75%
    5 exploits
    Published Jan 18, 2005
  • CVE-2004-1561High 7.5
    Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a large number of headers.
    icecast · icecast
    EPSS78%
    4 exploits
    Published Dec 31, 2004
  • CVE-2004-1388High 7.5
    Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests containing format string specifiers that are not properly handled in syslog calls.
    berlios · gps daemon
    EPSS68%
    5 exploits
    Published Dec 31, 2004
  • CVE-2004-1317High 7.5
    Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbitrary code via a long DNS command.
    EPSS60%
    3 exploits
    Published Dec 31, 2004
  • CVE-2004-2111High 8.5
    Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via a long filename.
    solarwinds · serv-u file server
    EPSS87%
    6 exploits
    Published Dec 31, 2004
  • CVE-2004-2271High 7.5
    Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
    minishare · minimal http server
    EPSS72%
    4 exploits
    Published Dec 31, 2004
  • CVE-2004-1558High 7.5
    Multiple stack-based buffer overflows in YPOPs!
    ypops · ypops
    EPSS71%
    4 exploits
    Published Dec 31, 2004
  • CVE-2004-0567High 7.5
    The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 2003 does not properly validate the computer name value in a WINS packet, which allows remote attackers to execute…
    microsoft · windows 2000
    EPSS69%
    1 exploit
    Published Dec 31, 2004
  • CVE-2004-2416High 7.5
    Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP GET request.
    youngzsoft · ccproxy
    EPSS61%
    2 exploits
    Published Dec 31, 2004
Showing 1,351–1,400 of 1,474

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.

Figures as of Oct 20, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.