Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
3,919 vulnerabilities · highest exploit probability first
- CVE-2020-11547Medium 5.3PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server itself (CPU usage, memory, Windows version, and internal statistics) via an HTTP request, as demonstrated by type=probes to login.htm or…paessler · prtg network monitorEPSS52%·Published Apr 4, 2020
- CVE-2020-8143Medium 6.1An Open Redirect vulnerability was discovered in Revive Adserver version < 5.0.5 and reported by HackerOne user hoangn144.revive-adserver · revive adserverEPSS70%·Published Apr 3, 2020
- CVE-2020-11100High 8.8In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap via a crafted HTTP/2 request, possibly causing remote code execution.haproxy · haproxyEPSS62%·Published Apr 2, 2020
- CVE-2020-1934Medium 5.3In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.apache · http serverEPSS52%·Published Apr 1, 2020
- CVE-2020-1943Medium 6.1Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07.apache · ofbizEPSS97%·Published Apr 1, 2020
- CVE-2020-11456Medium 5.4LimeSurvey before 4.1.12+200324 has stored XSS in application/views/admin/surveysgroups/surveySettings.php and application/models/SurveysGroups.php (aka survey groups).limesurvey · limesurveyEPSS71%2 exploitsPublished Apr 1, 2020
- CVE-2020-11455Critical 9.8LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php.limesurvey · limesurveyEPSS97%2 exploitsPublished Apr 1, 2020
- CVE-2020-4241High 8.8IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the system.ibm · spectrum protect plusEPSS66%·Published Mar 31, 2020
- CVE-2020-10884High 8.8This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers.tp-link · ac1750 firmwareEPSS22%3 exploitsPublished Mar 25, 2020
- CVE-2020-10882High 8.8This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers.tp-link · ac1750 firmwareEPSS41%3 exploitsPublished Mar 25, 2020
- CVE-2020-10879Critical 9.8rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nodeId parameter is passed directly to the exec function without being escaped.rconfig · rconfigEPSS84%1 exploitPublished Mar 23, 2020
- CVE-2020-8864High 8.8This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04.dlink · dir-867 firmwareEPSS80%·Published Mar 23, 2020
- CVE-2020-8863High 8.8This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04.dlink · dir-867 firmwareEPSS77%·Published Mar 23, 2020
- CVE-2020-10821Medium 4.8Nagios XI 5.6.11 allows XSS via the account/main.php theme parameter.nagios · nagios xiEPSS71%·Published Mar 22, 2020
- CVE-2020-10819Medium 4.8Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ username parameter.nagios · nagios xiEPSS71%·Published Mar 22, 2020
- CVE-2020-10808High 8.8Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup Backup Listing Endpoint.vestacp · vesta control panelEPSS78%3 exploitsPublished Mar 22, 2020
- CVE-2019-16012High 8.1A vulnerability in the web UI of Cisco SD-WAN Solution vManage software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.cisco · sd-wan firmwareEPSS54%·Published Mar 19, 2020
- CVE-2020-10220Critical 9.8The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter.rconfig · rconfigEPSS100%4 exploitsPublished Mar 7, 2020
- CVE-2016-10045Critical 9.8Remote code execution in PHPMailerphpmailer project · phpmailerEPSS98%5 exploitsPublished Mar 5, 2020
- CVE-2020-10173High 8.8Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi.comtrend · vr-3033 firmwareEPSS77%1 exploitPublished Mar 5, 2020
- CVE-2019-20501High 7.8D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in the Web interface, using shell metacharacters in the admin.cgi?action=upgrade firmwareRestore or firmwareServerip parameter.dlink · dwl-2600ap firmwareEPSS90%1 exploitPublished Mar 5, 2020
- CVE-2019-20499High 7.8D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_restore configRestore or configServerip parameter.dlink · dwl-2600ap firmwareEPSS95%3 exploitsPublished Mar 5, 2020
- CVE-2020-9465Critical 9.8The eonweb web interface is prone to a SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the user_id field in a cookie.eyesofnetwork · eyesofnetworkEPSS82%2 exploitsPublished Feb 28, 2020
- CVE-2020-8794Critical 9.8OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies.opensmtpd · opensmtpdEPSS89%4 exploitsPublished Feb 25, 2020
- CVE-2020-4211Critical 9.8IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system.ibm · spectrum protectEPSS71%·Published Feb 24, 2020
- CVE-2020-8813High 8.8graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege.cacti · cactiEPSS74%3 exploitsPublished Feb 22, 2020
- CVE-2014-9614Critical 9.8The Web Panel in Netsweeper before 4.0.5 has a default password of branding for the branding account, which makes it easier for remote attackers to obtain access via a request to webadmin/.netsweeper · netsweeperEPSS69%·Published Feb 19, 2020
- CVE-2020-8012Critical 9.8CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (controller) component.broadcom · unified infrastructure managementEPSS77%4 exploitsPublished Feb 18, 2020
- CVE-2020-8010Critical 9.8CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot (controller) component.broadcom · unified infrastructure managementEPSS51%2 exploitsPublished Feb 18, 2020
- CVE-2014-7236Critical 9.1Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do/view/Main/WebHome.twiki · twikiEPSS56%3 exploitsPublished Feb 17, 2020
- CVE-2015-6922Critical 9.8Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before 9.1.0.9 does not properly require authentication, which allows remote attackers to bypass authentication and (1) add an administrative account via crafted…kaseya · virtual system administratorEPSS82%5 exploitsPublished Feb 17, 2020
- CVE-2020-8518Critical 9.8Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code execution.horde · groupwareEPSS72%3 exploitsPublished Feb 17, 2020
- CVE-2013-4211Critical 9.8A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, which could let a remote malicious user execute arbitrary PHP codeopenx · openxEPSS71%4 exploitsPublished Feb 14, 2020
- CVE-2020-7209Critical 9.8LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2.hp · linuxkiEPSS99%4 exploitsPublished Feb 12, 2020
- CVE-2011-4908Critical 9.8TinyBrowser plugin for Joomla!tiny · tinybrowserEPSS56%3 exploitsPublished Feb 12, 2020
- CVE-2020-7046High 7.5lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in command parameters, as demonstrated by the unauthenticated triggering of a submission-login infinite loop.dovecot · dovecotEPSS51%·Published Feb 12, 2020
- CVE-2013-2097High 7.8ZPanel through 10.1.0 has Remote Command Executionzpanel project · zpanelEPSS26%5 exploitsPublished Feb 12, 2020
- CVE-2013-2010Critical 9.8WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerabilityboldgrid · w3 total cacheEPSS74%4 exploitsPublished Feb 12, 2020
- CVE-2020-7471Critical 9.3SQL injection in Djangodjangoproject · djangoEPSS66%·Published Feb 11, 2020
- CVE-2020-0668High 7.8An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'.microsoft · windows 10EPSS26%3 exploitsPublished Feb 11, 2020
- CVE-2020-0655High 8.0A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an authenticated attacker abuses clipboard redirection, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.microsoft · windows 10EPSS66%·Published Feb 11, 2020
- CVE-2013-1359Critical 9.8An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0 via the skipSessionCheck parameter to the UMA…sonicwall · analyzerEPSS89%6 exploitsPublished Feb 11, 2020
- CVE-2013-0803Critical 9.8A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arbitrary code.polarbear cms project · polarbear cmsEPSS75%4 exploitsPublished Feb 11, 2020
- CVE-2014-7863High 7.5The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager before 11.9 build 11912, OpManager 8 through 11.5 build 11400, and IT360 10.5 and earlier does not properly restrict access, which allows remote attackers and remote authenticated users…zohocorp · manageengine applications managerEPSS83%2 exploitsPublished Feb 8, 2020
- CVE-2019-15605Critical 9.8HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformednodejs · node.jsEPSS57%·Published Feb 7, 2020
- CVE-2014-5468High 8.8A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cfm to specify a malicious PNG file, which could let a remote malicious user obtain sensitive information or execute arbitrary code.getrailo · railoEPSS53%4 exploitsPublished Feb 7, 2020
- CVE-2013-3629High 8.8ISPConfig 3.0.5.2 has Arbitrary PHP Code Executionispconfig · ispconfigEPSS43%3 exploitsPublished Feb 7, 2020
- CVE-2013-3628High 8.8Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerabilityzabbix · zabbixEPSS67%2 exploitsPublished Feb 7, 2020
- CVE-2013-3591High 8.8vTiger CRM 5.3 and 5.4: 'files' Upload Folder Arbitrary PHP Code Execution Vulnerabilityvtiger · vtiger crmEPSS43%3 exploitsPublished Feb 7, 2020
- CVE-2020-8656Critical 9.8The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the username field to getApiKey in include/api_functions.php.eyesofnetwork · eyesofnetworkEPSS85%5 exploitsPublished Feb 6, 2020
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-11547 | PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server itself (CPU usage, memory, Windows version, and internal statistics) via an HTTP request, as demonstrated by type=probes to login.htm or… paessler · prtg network monitor | Medium 5.3 | 52% | · | |
| CVE-2020-8143 | An Open Redirect vulnerability was discovered in Revive Adserver version < 5.0.5 and reported by HackerOne user hoangn144. revive-adserver · revive adserver | Medium 6.1 | 70% | · | |
| CVE-2020-11100 | In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap via a crafted HTTP/2 request, possibly causing remote code execution. haproxy · haproxy | High 8.8 | 62% | · | |
| CVE-2020-1934 | In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server. apache · http server | Medium 5.3 | 52% | · | |
| CVE-2020-1943 | Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07. apache · ofbiz | Medium 6.1 | 97% | · | |
| CVE-2020-11456 | LimeSurvey before 4.1.12+200324 has stored XSS in application/views/admin/surveysgroups/surveySettings.php and application/models/SurveysGroups.php (aka survey groups). limesurvey · limesurvey | Medium 5.4 | 71% | 2 exploits | |
| CVE-2020-11455 | LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php. limesurvey · limesurvey | Critical 9.8 | 97% | 2 exploits | |
| CVE-2020-4241 | IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the system. ibm · spectrum protect plus | High 8.8 | 66% | · | |
| CVE-2020-10884 | This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. tp-link · ac1750 firmware | High 8.8 | 22% | 3 exploits | |
| CVE-2020-10882 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. tp-link · ac1750 firmware | High 8.8 | 41% | 3 exploits | |
| CVE-2020-10879 | rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nodeId parameter is passed directly to the exec function without being escaped. rconfig · rconfig | Critical 9.8 | 84% | 1 exploit | |
| CVE-2020-8864 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04. dlink · dir-867 firmware | High 8.8 | 80% | · | |
| CVE-2020-8863 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04. dlink · dir-867 firmware | High 8.8 | 77% | · | |
| CVE-2020-10821 | Nagios XI 5.6.11 allows XSS via the account/main.php theme parameter. nagios · nagios xi | Medium 4.8 | 71% | · | |
| CVE-2020-10819 | Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ username parameter. nagios · nagios xi | Medium 4.8 | 71% | · | |
| CVE-2020-10808 | Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup Backup Listing Endpoint. vestacp · vesta control panel | High 8.8 | 78% | 3 exploits | |
| CVE-2019-16012 | A vulnerability in the web UI of Cisco SD-WAN Solution vManage software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. cisco · sd-wan firmware | High 8.1 | 54% | · | |
| CVE-2020-10220 | The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter. rconfig · rconfig | Critical 9.8 | 100% | 4 exploits | |
| CVE-2016-10045 | Remote code execution in PHPMailer phpmailer project · phpmailer | Critical 9.8 | 98% | 5 exploits | |
| CVE-2020-10173 | Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi. comtrend · vr-3033 firmware | High 8.8 | 77% | 1 exploit | |
| CVE-2019-20501 | D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in the Web interface, using shell metacharacters in the admin.cgi?action=upgrade firmwareRestore or firmwareServerip parameter. dlink · dwl-2600ap firmware | High 7.8 | 90% | 1 exploit | |
| CVE-2019-20499 | D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_restore configRestore or configServerip parameter. dlink · dwl-2600ap firmware | High 7.8 | 95% | 3 exploits | |
| CVE-2020-9465 | The eonweb web interface is prone to a SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the user_id field in a cookie. eyesofnetwork · eyesofnetwork | Critical 9.8 | 82% | 2 exploits | |
| CVE-2020-8794 | OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies. opensmtpd · opensmtpd | Critical 9.8 | 89% | 4 exploits | |
| CVE-2020-4211 | IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. ibm · spectrum protect | Critical 9.8 | 71% | · | |
| CVE-2020-8813 | graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege. cacti · cacti | High 8.8 | 74% | 3 exploits | |
| CVE-2014-9614 | The Web Panel in Netsweeper before 4.0.5 has a default password of branding for the branding account, which makes it easier for remote attackers to obtain access via a request to webadmin/. netsweeper · netsweeper | Critical 9.8 | 69% | · | |
| CVE-2020-8012 | CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (controller) component. broadcom · unified infrastructure management | Critical 9.8 | 77% | 4 exploits | |
| CVE-2020-8010 | CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot (controller) component. broadcom · unified infrastructure management | Critical 9.8 | 51% | 2 exploits | |
| CVE-2014-7236 | Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do/view/Main/WebHome. twiki · twiki | Critical 9.1 | 56% | 3 exploits | |
| CVE-2015-6922 | Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before 9.1.0.9 does not properly require authentication, which allows remote attackers to bypass authentication and (1) add an administrative account via crafted… kaseya · virtual system administrator | Critical 9.8 | 82% | 5 exploits | |
| CVE-2020-8518 | Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code execution. horde · groupware | Critical 9.8 | 72% | 3 exploits | |
| CVE-2013-4211 | A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, which could let a remote malicious user execute arbitrary PHP code openx · openx | Critical 9.8 | 71% | 4 exploits | |
| CVE-2020-7209 | LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2. hp · linuxki | Critical 9.8 | 99% | 4 exploits | |
| CVE-2011-4908 | TinyBrowser plugin for Joomla! tiny · tinybrowser | Critical 9.8 | 56% | 3 exploits | |
| CVE-2020-7046 | lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in command parameters, as demonstrated by the unauthenticated triggering of a submission-login infinite loop. dovecot · dovecot | High 7.5 | 51% | · | |
| CVE-2013-2097 | ZPanel through 10.1.0 has Remote Command Execution zpanel project · zpanel | High 7.8 | 26% | 5 exploits | |
| CVE-2013-2010 | WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability boldgrid · w3 total cache | Critical 9.8 | 74% | 4 exploits | |
| CVE-2020-7471 | SQL injection in Django djangoproject · django | Critical 9.3 | 66% | · | |
| CVE-2020-0668 | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. microsoft · windows 10 | High 7.8 | 26% | 3 exploits | |
| CVE-2020-0655 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an authenticated attacker abuses clipboard redirection, aka 'Remote Desktop Services Remote Code Execution Vulnerability'. microsoft · windows 10 | High 8.0 | 66% | · | |
| CVE-2013-1359 | An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0 via the skipSessionCheck parameter to the UMA… sonicwall · analyzer | Critical 9.8 | 89% | 6 exploits | |
| CVE-2013-0803 | A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arbitrary code. polarbear cms project · polarbear cms | Critical 9.8 | 75% | 4 exploits | |
| CVE-2014-7863 | The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager before 11.9 build 11912, OpManager 8 through 11.5 build 11400, and IT360 10.5 and earlier does not properly restrict access, which allows remote attackers and remote authenticated users… zohocorp · manageengine applications manager | High 7.5 | 83% | 2 exploits | |
| CVE-2019-15605 | HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed nodejs · node.js | Critical 9.8 | 57% | · | |
| CVE-2014-5468 | A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cfm to specify a malicious PNG file, which could let a remote malicious user obtain sensitive information or execute arbitrary code. getrailo · railo | High 8.8 | 53% | 4 exploits | |
| CVE-2013-3629 | ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution ispconfig · ispconfig | High 8.8 | 43% | 3 exploits | |
| CVE-2013-3628 | Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerability zabbix · zabbix | High 8.8 | 67% | 2 exploits | |
| CVE-2013-3591 | vTiger CRM 5.3 and 5.4: 'files' Upload Folder Arbitrary PHP Code Execution Vulnerability vtiger · vtiger crm | High 8.8 | 43% | 3 exploits | |
| CVE-2020-8656 | The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the username field to getApiKey in include/api_functions.php. eyesofnetwork · eyesofnetwork | Critical 9.8 | 85% | 5 exploits |
Showing 1,651–1,700 of 3,919
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.