Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Emerging

Emerging Threats, Before They Hit KEV.

Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.

Synced hourly · figures as of Oct 20, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
1,642 vulnerabilities · highest exploit probability first
  • CVE-2008-4687Critical 9.0
    mantis: code execution by registered users via sort parameter to manage_proj_page.php
    mantis · mantis
    EPSS67%
    3 exploits
    Published Oct 22, 2008
  • CVE-2008-4654Critical 9.3
    Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value.
    videolan · vlc media player
    EPSS58%
    4 exploits
    Published Oct 22, 2008
  • CVE-2008-4572Critical 10.0
    GuildFTPd 0.999.14, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long arguments to the CWD and LIST commands, which triggers heap corruption related to an improper free call, and possibly…
    guildftpd · guildftpd
    EPSS61%
    ·
    Published Oct 15, 2008
  • CVE-2008-3471Critical 9.3
    Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 SP3; Office Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac;…
    microsoft · excel
    EPSS52%
    ·
    Published Oct 14, 2008
  • CVE-2008-3466Critical 10.0
    Microsoft Host Integration Server (HIS) 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess…
    microsoft · host integration server 2000
    EPSS78%
    ·
    Published Oct 14, 2008
  • CVE-2008-4556Critical 10.0
    Stack-based buffer overflow in the adm_build_path function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted request.
    sun · solaris
    EPSS70%
    3 exploits
    Published Oct 14, 2008
  • CVE-2008-4008Critical 10.0
    Unspecified vulnerability in the WebLogic Server Plugins for Apache component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, and 6.1 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
    oracle · bea product suite
    EPSS56%
    2 exploits
    Published Oct 14, 2008
  • CVE-2008-4397Critical 10.0
    Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a ..
    broadcom · arcserve backup
    EPSS81%
    2 exploits
    Published Oct 14, 2008
  • CVE-2008-4385Critical 9.3
    Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of arbitrary programs via by specifiying a malicious website argument to the Init method in (1) a certain ActiveX control (sysreqlab2.cab,…
    systemrequirementslab · system requirements lab
    EPSS38%
    2 exploits
    Published Oct 14, 2008
  • CVE-2008-4384Critical 9.3
    Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods.
    iseemedia · lpviewer
    EPSS29%
    2 exploits
    Published Oct 7, 2008
  • CVE-2008-4449Critical 9.3
    Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIVMSG message.
    mirc · mirc
    EPSS39%
    2 exploits
    Published Oct 6, 2008
  • CVE-2008-4322Critical 10.0
    Stack-based buffer overflow in RealFlex Technologies Ltd.
    realflex technologies ltd · realwin server
    EPSS65%
    2 exploits
    Published Sep 29, 2008
  • CVE-2008-4193Critical 10.0
    Stack-based buffer overflow in SecurityGateway.dll in Alt-N Technologies SecurityGateway 1.0.1 allows remote attackers to execute arbitrary code via a long username parameter.
    alt-n · securitygateway
    EPSS75%
    2 exploits
    Published Sep 24, 2008
  • CVE-2008-3013Critical 9.3
    gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital…
    microsoft · digital image suite
    EPSS52%
    1 exploit
    Published Sep 10, 2008
  • CVE-2008-3008Critical 9.3
    Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote attackers to execute arbitrary code via a long first argument to the GetDetailsString method, aka "Windows Media Encoder Buffer Overrun…
    microsoft · windows media encoder
    EPSS56%
    2 exploits
    Published Sep 10, 2008
  • CVE-2007-5348Critical 9.3
    Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8,…
    microsoft · digital image suite
    EPSS53%
    1 exploit
    Published Sep 10, 2008
  • CVE-2008-3922Critical 9.3
    awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences in the sort parameter, which is used by the multisort function when dynamically creating an anonymous PHP function.
    telartis bv · awstats totals
    EPSS53%
    2 exploits
    Published Sep 4, 2008
  • CVE-2008-3878Critical 9.3
    Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the HttpUpload method.
    ultrashareware · ultra office control
    EPSS36%
    2 exploits
    Published Sep 2, 2008
  • CVE-2007-1682Critical 9.3
    Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute arbitrary code via unspecified calls to the (1) BuildPath, (2) GetDriveName, (3) DriveExists, or (4) DeleteFile method.
    softartisans · xfile
    EPSS30%
    2 exploits
    Published Aug 27, 2008
  • CVE-2008-3704Critical 9.3
    Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows…
    microsoft · visual basic
    EPSS56%
    2 exploits
    Published Aug 18, 2008
  • CVE-2008-3558Critical 9.3
    Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before 20.2008.2606.4919 allows remote attackers to execute arbitrary code via a long argument to the NewObject method.
    cisco · webex meeting manager
    EPSS65%
    2 exploits
    Published Aug 8, 2008
  • CVE-2008-3257Critical 10.0
    Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP…
    bea systems · weblogic server
    EPSS84%
    2 exploits
    Published Jul 22, 2008
  • CVE-2008-0086Critical 9.0
    Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop Engine (MSDE 2000) SP4, and 2000 Desktop Engine (WMSDE) allows remote authenticated users to execute arbitrary code via a crafted SQL expression.
    microsoft · sql server
    EPSS62%
    ·
    Published Jul 8, 2008
  • CVE-2008-2908Critical 9.3
    Multiple stack-based buffer overflows in a certain ActiveX control in ienipp.ocx in Novell iPrint Client for Windows before 4.36 allow remote attackers to execute arbitrary code via a long value of the (1) operation, (2) printer-url, or (3) target-frame parameter.
    novell · iprint client
    EPSS35%
    2 exploits
    Published Jun 30, 2008
  • CVE-2008-2703Critical 10.0
    Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow remote attackers to execute arbitrary code via "spoofed server responses" that contain a long string after the NM_A_SZ_TRANSACTION_ID field name.
    novell · groupwise messenger
    EPSS61%
    3 exploits
    Published Jun 13, 2008
  • CVE-2008-2683Critical 9.3
    The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to force the download and storage of arbitrary files by specifying the origin URL in the first argument to the DownloadImageFileURL method, and the local filename in…
    black ice · barcode sdk
    EPSS35%
    3 exploits
    Published Jun 12, 2008
  • CVE-2008-0960Critical 10.0
    SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 through 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3RC1 and 7.3RC2;…
    juniper · session and resource control
    EPSS69%
    1 exploit
    Published Jun 10, 2008
  • CVE-2008-2551Critical 9.3
    The DownloaderActiveX Control (DownloaderActiveX.ocx) in Icona SpA C6 Messenger 1.0.0.1 allows remote attackers to force the download and execution of arbitrary files via a URL in the propDownloadUrl parameter with the propPostDownloadAction parameter set to "run."
    icona · instant messenger
    EPSS47%
    2 exploits
    Published Jun 4, 2008
  • CVE-2008-1661Critical 10.0
    Stack-based buffer overflow in DoubleTake.exe in HP StorageWorks Storage Mirroring (SWSM) before 4.5 SP2 allows remote attackers to execute arbitrary code via a crafted encoded authentication request.
    hp · storageworks storage mirroring
    EPSS69%
    3 exploits
    Published Jun 4, 2008
  • CVE-2008-2158Critical 10.0
    Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1 for Windows allow remote attackers to execute arbitrary code via crafted TCP packets to port 41025.
    emc corporation · alphastor
    EPSS58%
    2 exploits
    Published May 29, 2008
  • CVE-2008-0955Critical 9.3
    Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote attackers to execute arbitrary code via a long CacheFolder property value.
    creative · creative software autoupdate engine
    EPSS41%
    2 exploits
    Published May 29, 2008
  • CVE-2008-2240Critical 10.0
    Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long Accept-Language HTTP header.
    ibm · lotus domino
    EPSS65%
    2 exploits
    Published May 22, 2008
  • CVE-2008-2161Critical 10.0
    Buffer overflow in TFTP Server SP 1.4 and 1.5 on Windows, and possibly other versions, allows remote attackers to execute arbitrary code via a long TFTP error packet.
    tftp · tftp server sp
    EPSS65%
    1 exploit
    Published May 12, 2008
  • CVE-2008-1914Critical 10.0
    Stack-based buffer overflow in the AntServer module (AntServer.exe) in BigAnt IM Server in BigAnt Messenger 2.2 allows remote attackers to execute arbitrary code via a long URI in a request to TCP port 6080.
    bigantsoft · bigant messenger
    EPSS74%
    6 exploits
    Published Apr 22, 2008
  • CVE-2008-1898Critical 9.3
    A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 and 2007, allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via an invalid WksPictureInterface property value, which…
    microsoft · office
    EPSS52%
    2 exploits
    Published Apr 21, 2008
  • CVE-2008-0320Critical 9.3
    openoffice.org: OLE files parsing heap overflows
    openoffice · openoffice.org
    EPSS57%
    2 exploits
    Published Apr 17, 2008
  • CVE-2008-1724Critical 9.3
    Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX control in vcst_en.dll 1.0.0.5 in Tumbleweed SecureTransport Server before 4.6.1 Hotfix 20 allows remote attackers to execute arbitrary code via a long remoteFile…
    tumbleweed · securetransport server app
    EPSS35%
    2 exploits
    Published Apr 11, 2008
  • CVE-2008-1087Critical 9.3
    Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF image file with crafted filename parameters, aka "GDI Stack Overflow Vulnerability."
    microsoft · windows 2000
    EPSS57%
    ·
    Published Apr 8, 2008
  • CVE-2008-1697Critical 10.0
    Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.53, 7.51, and earlier allows remote attackers to execute arbitrary code via a long URI in an HTTP request processed by ovas.exe, as demonstrated by a certain topology/homeBaseView request.
    hp · openview network node manager
    EPSS74%
    2 exploits
    Published Apr 8, 2008
  • CVE-2007-0071Critical 9.3
    Flash Player input validation error
    adobe · flash player
    EPSS93%
    ·
    Published Apr 8, 2008
  • CVE-2007-6019Critical 9.3
    Flash Player input validation error
    adobe · flash
    EPSS60%
    1 exploit
    Published Apr 8, 2008
  • CVE-2007-4620Critical 9.0
    Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and…
    broadcom · anti-virus for the enterprise
    EPSS52%
    2 exploits
    Published Apr 7, 2008
  • CVE-2008-1602Critical 10.0
    Stack-based buffer overflow in Orbit downloader 2.6.3 and 2.6.4 allows remote attackers to execute arbitrary code via a long download URL, which is not properly handled during Unicode conversion for a balloon notification after a download has failed.
    orbit downloader · orbit downloader
    EPSS67%
    2 exploits
    Published Apr 6, 2008
  • CVE-2008-0311Critical 9.3
    Stack-based buffer overflow in the PGMWebHandler::parse_request function in the StarTeam Multicast Service component (STMulticastService) 6.4 in Borland CaliberRM 2006 allows remote attackers to execute arbitrary code via a large HTTP request.
    borland · caliberrm
    EPSS31%
    2 exploits
    Published Apr 6, 2008
  • CVE-2008-1611Critical 10.0
    Stack-based buffer overflow in TFTP Server SP 1.4 for Windows allows remote attackers to cause a denial of service or execute arbitrary code via a long filename in a read or write request.
    tftp-server · winagents tftp server
    EPSS68%
    3 exploits
    Published Apr 1, 2008
  • CVE-2008-1491Critical 10.0
    Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 and 2.0.0.24 allows remote attackers to execute arbitrary code via a long string to TCP port 623.
    asus · remote console
    EPSS70%
    2 exploits
    Published Mar 25, 2008
  • CVE-2008-1472Critical 9.3
    Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including BrightStor ARCserve Backup R11.5, Desktop Management Suite r11.1 through r11.2, and Unicenter products r11.1 through r11.2, allows remote attackers to execute…
    computer associates · desktop management suite
    EPSS40%
    2 exploits
    Published Mar 24, 2008
  • CVE-2008-1117Critical 10.0
    Directory traversal vulnerability in the Notes (aka Flash Notes or instant messages) feature in tb2ftp.dll in Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, allows remote attackers to upload files to arbitrary locations via a destination filename with a \…
    netopia · timbuktu pro
    EPSS69%
    2 exploits
    Published Mar 14, 2008
  • CVE-2008-0532Critical 10.0
    Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control Server (ACS) for Windows and ACS Solution Engine allow remote attackers to execute arbitrary code via a long argument located immediately after…
    cisco · acs for windows
    EPSS57%
    1 exploit
    Published Mar 14, 2008
  • CVE-2008-1309Critical 9.3
    The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, RealPlayer 10.5 before build 6.0.12.1675, and RealPlayer 11 before 11.0.3 build 6.0.14.806 does not properly manage memory for the (1) Console or (2) Controls…
    realnetworks · realplayer
    EPSS46%
    3 exploits
    Published Mar 12, 2008
Showing 1,401–1,450 of 1,642

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.

Figures as of Oct 20, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.