Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
1,642 vulnerabilities · highest exploit probability first
- CVE-2003-0545Critical 9.8Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an SSL client certificate with a certain invalid ASN.1 encoding.openssl · opensslEPSS87%·Published Nov 17, 2003
- CVE-2003-0831Critical 9.0ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which allows remote attackers to execute arbitrary code via a buffer overflow using certain files.proftpd project · proftpdEPSS58%3 exploitsPublished Nov 17, 2003
- CVE-2003-1192Critical 10.0Stack-based buffer overflow in IA WebMail Server 3.1.0 allows remote attackers to execute arbitrary code via a long GET request.truenorth software · ia webmail serverEPSS69%4 exploitsPublished Nov 3, 2003
- CVE-2003-0347Critical 10.0Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a document with a long ID parameter.microsoft · visual basicEPSS55%1 exploitPublished Oct 20, 2003
- CVE-2003-0694Critical 10.0The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.sendmail · sendmailEPSS66%·Published Oct 6, 2003
- CVE-2003-0722Critical 10.0The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets.sun · solarisEPSS89%3 exploitsPublished Sep 22, 2003
- CVE-2003-0780Critical 9.0Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field.mysql · mysqlEPSS78%2 exploitsPublished Sep 10, 2003
- CVE-2003-0466Critical 9.8Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow,…redhat · wu ftpdEPSS78%5 exploitsPublished Jul 31, 2003
- CVE-2003-0201Critical 10.0Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.samba · sambaEPSS85%16 exploitsPublished May 5, 2003
- CVE-2003-0085Critical 10.0Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remote attackers to execute arbitrary code.samba · sambaEPSS86%3 exploitsPublished Mar 31, 2003
- CVE-2002-1337Critical 10.0Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.sendmail · sendmailEPSS73%3 exploitsPublished Mar 7, 2003
- CVE-2002-2268Critical 9.4Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL.netdave · webster http serverEPSS52%4 exploitsPublished Dec 31, 2002
- CVE-2002-1359Critical 10.0Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite.cisco · iosEPSS80%3 exploitsPublished Dec 17, 2002
- CVE-2002-1318Critical 10.0Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS codepage string is converted to a little-endian UCS2 unicode…samba · sambaEPSS52%1 exploitPublished Dec 11, 2002
- CVE-2002-0391Critical 9.8Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as…sun · solarisEPSS58%·Published Aug 12, 2002
- CVE-2000-1209Critical 10.0The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6)…compaq · insight managerEPSS87%4 exploitsPublished Aug 12, 2002
- CVE-2002-0013Critical 10.0Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via (1) GetRequest, (2) GetNextRequest, and (3) SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test…snmp · snmpEPSS51%1 exploitPublished Feb 12, 2002
- CVE-2001-1583Critical 10.0lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program.sun · sunosEPSS83%5 exploitsPublished Dec 31, 2001
- CVE-2001-0797Critical 10.0Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.sun · solarisEPSS95%10 exploitsPublished Dec 12, 2001
- CVE-2001-0803Critical 10.0Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands.open group · cde common desktop environmentEPSS86%3 exploitsPublished Dec 6, 2001
- CVE-2001-0800Critical 10.0lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.sgi · irixEPSS54%2 exploitsPublished Dec 6, 2001
- CVE-2001-0779Critical 10.0Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username.sun · solarisEPSS62%1 exploitPublished Oct 18, 2001
- CVE-2001-0538Critical 10.0Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.microsoft · outlookEPSS53%2 exploitsPublished Aug 14, 2001
- CVE-2001-0500Critical 10.0Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as…microsoft · indexing serviceEPSS97%6 exploitsPublished Jul 21, 2001
- CVE-2001-0499Critical 10.0Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands (1) STATUS, (2) PING, (3) SERVICES, (4) TRC_FILE, (5) SAVE_CONFIG, or (6) RELOAD.oracle · oracle8iEPSS85%3 exploitsPublished Jul 21, 2001
- CVE-2001-0537Critical 9.3HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.cisco · iosEPSS68%4 exploitsPublished Jul 21, 2001
- CVE-2001-0241Critical 10.0Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0.microsoft · windows 2000EPSS86%8 exploitsPublished Jun 27, 2001
- CVE-2001-0236Critical 10.0Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event.sun · solarisEPSS72%2 exploitsPublished May 3, 2001
- CVE-2001-0168Critical 10.0Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0.att · winvncEPSS71%2 exploitsPublished May 3, 2001
- CVE-2001-0414Critical 10.0ntpd security holedave mills · ntpdEPSS92%4 exploitsPublished Apr 4, 2001
- CVE-2001-0098Critical 10.0Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a ".." string.bea · weblogic serverEPSS78%1 exploitPublished Feb 12, 2001
- CVE-2000-1089Critical 10.0Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability.microsoft · windows 2000EPSS75%3 exploitsPublished Jan 9, 2001
- CVE-2000-0681Critical 10.0Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extension.bea · weblogic serverEPSS51%·Published Oct 20, 2000
- CVE-2000-0573Critical 10.0The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command.hp · hp-uxEPSS96%8 exploitsPublished Jun 23, 2000
- CVE-2000-0248Critical 10.0The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands.redhat · linuxEPSS74%4 exploitsPublished Apr 24, 2000
- CVE-2000-0322Critical 10.0The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.redhat · linuxEPSS42%3 exploitsPublished Apr 24, 2000
- CVE-1999-1011Critical 10.0The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.microsoft · data access componentsEPSS77%3 exploitsPublished Jul 19, 1999
- CVE-1999-0874Critical 10.0Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.microsoft · internet information serverEPSS75%6 exploitsPublished Jun 16, 1999
- CVE-1999-0661Critical 10.0A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers 7.6, (2) util-linux 2.9g, (3) wuarchive ftpd (wuftpd) 2.2 and 2.1f, (4) IRC client (ircII) ircII 2.2.9, (5) OpenSSH 3.4p1, or (6) Sendmail…EPSS54%1 exploitPublished Jan 1, 1999
- CVE-1999-0526Critical 10.0An X server's access control is disabled (e.g.x.org · x11EPSS21%1 exploitPublished Jul 1, 1997
- CVE-1999-0046Critical 10.0Buffer overflow of rlogin program using TERM environmental variable.hp · hp-uxEPSS52%1 exploitPublished Feb 6, 1997
- CVE-1999-0067Critical 10.0phf CGI program allows remote command execution through shell metacharacters.apache · http serverEPSS87%·Published Mar 20, 1996
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2003-0545 | Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an SSL client certificate with a certain invalid ASN.1 encoding. openssl · openssl | Critical 9.8 | 87% | · | |
| CVE-2003-0831 | ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which allows remote attackers to execute arbitrary code via a buffer overflow using certain files. proftpd project · proftpd | Critical 9.0 | 58% | 3 exploits | |
| CVE-2003-1192 | Stack-based buffer overflow in IA WebMail Server 3.1.0 allows remote attackers to execute arbitrary code via a long GET request. truenorth software · ia webmail server | Critical 10.0 | 69% | 4 exploits | |
| CVE-2003-0347 | Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a document with a long ID parameter. microsoft · visual basic | Critical 10.0 | 55% | 1 exploit | |
| CVE-2003-0694 | The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c. sendmail · sendmail | Critical 10.0 | 66% | · | |
| CVE-2003-0722 | The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets. sun · solaris | Critical 10.0 | 89% | 3 exploits | |
| CVE-2003-0780 | Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field. mysql · mysql | Critical 9.0 | 78% | 2 exploits | |
| CVE-2003-0466 | Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow,… redhat · wu ftpd | Critical 9.8 | 78% | 5 exploits | |
| CVE-2003-0201 | Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code. samba · samba | Critical 10.0 | 85% | 16 exploits | |
| CVE-2003-0085 | Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remote attackers to execute arbitrary code. samba · samba | Critical 10.0 | 86% | 3 exploits | |
| CVE-2002-1337 | Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c. sendmail · sendmail | Critical 10.0 | 73% | 3 exploits | |
| CVE-2002-2268 | Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL. netdave · webster http server | Critical 9.4 | 52% | 4 exploits | |
| CVE-2002-1359 | Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite. cisco · ios | Critical 10.0 | 80% | 3 exploits | |
| CVE-2002-1318 | Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS codepage string is converted to a little-endian UCS2 unicode… samba · samba | Critical 10.0 | 52% | 1 exploit | |
| CVE-2002-0391 | Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as… sun · solaris | Critical 9.8 | 58% | · | |
| CVE-2000-1209 | The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6)… compaq · insight manager | Critical 10.0 | 87% | 4 exploits | |
| CVE-2002-0013 | Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via (1) GetRequest, (2) GetNextRequest, and (3) SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test… snmp · snmp | Critical 10.0 | 51% | 1 exploit | |
| CVE-2001-1583 | lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. sun · sunos | Critical 10.0 | 83% | 5 exploits | |
| CVE-2001-0797 | Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin. sun · solaris | Critical 10.0 | 95% | 10 exploits | |
| CVE-2001-0803 | Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands. open group · cde common desktop environment | Critical 10.0 | 86% | 3 exploits | |
| CVE-2001-0800 | lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters. sgi · irix | Critical 10.0 | 54% | 2 exploits | |
| CVE-2001-0779 | Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username. sun · solaris | Critical 10.0 | 62% | 1 exploit | |
| CVE-2001-0538 | Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page. microsoft · outlook | Critical 10.0 | 53% | 2 exploits | |
| CVE-2001-0500 | Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as… microsoft · indexing service | Critical 10.0 | 97% | 6 exploits | |
| CVE-2001-0499 | Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands (1) STATUS, (2) PING, (3) SERVICES, (4) TRC_FILE, (5) SAVE_CONFIG, or (6) RELOAD. oracle · oracle8i | Critical 10.0 | 85% | 3 exploits | |
| CVE-2001-0537 | HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL. cisco · ios | Critical 9.3 | 68% | 4 exploits | |
| CVE-2001-0241 | Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0. microsoft · windows 2000 | Critical 10.0 | 86% | 8 exploits | |
| CVE-2001-0236 | Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event. sun · solaris | Critical 10.0 | 72% | 2 exploits | |
| CVE-2001-0168 | Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0. att · winvnc | Critical 10.0 | 71% | 2 exploits | |
| CVE-2001-0414 | ntpd security hole dave mills · ntpd | Critical 10.0 | 92% | 4 exploits | |
| CVE-2001-0098 | Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a ".." string. bea · weblogic server | Critical 10.0 | 78% | 1 exploit | |
| CVE-2000-1089 | Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability. microsoft · windows 2000 | Critical 10.0 | 75% | 3 exploits | |
| CVE-2000-0681 | Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extension. bea · weblogic server | Critical 10.0 | 51% | · | |
| CVE-2000-0573 | The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command. hp · hp-ux | Critical 10.0 | 96% | 8 exploits | |
| CVE-2000-0248 | The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands. redhat · linux | Critical 10.0 | 74% | 4 exploits | |
| CVE-2000-0322 | The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters. redhat · linux | Critical 10.0 | 42% | 3 exploits | |
| CVE-1999-1011 | The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands. microsoft · data access components | Critical 10.0 | 77% | 3 exploits | |
| CVE-1999-0874 | Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions. microsoft · internet information server | Critical 10.0 | 75% | 6 exploits | |
| CVE-1999-0661 | A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers 7.6, (2) util-linux 2.9g, (3) wuarchive ftpd (wuftpd) 2.2 and 2.1f, (4) IRC client (ircII) ircII 2.2.9, (5) OpenSSH 3.4p1, or (6) Sendmail… | Critical 10.0 | 54% | 1 exploit | |
| CVE-1999-0526 | An X server's access control is disabled (e.g. x.org · x11 | Critical 10.0 | 21% | 1 exploit | |
| CVE-1999-0046 | Buffer overflow of rlogin program using TERM environmental variable. hp · hp-ux | Critical 10.0 | 52% | 1 exploit | |
| CVE-1999-0067 | phf CGI program allows remote command execution through shell metacharacters. apache · http server | Critical 10.0 | 87% | · |
Showing 1,601–1,642 of 1,642
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.