Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
3,919 vulnerabilities · highest exploit probability first
- CVE-2019-1166Medium 5.9A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) protection, aka 'Windows NTLM Tampering Vulnerability'.microsoft · windows 10EPSS68%·Published Oct 10, 2019
- CVE-2019-15226High 7.5Upon receiving each incoming request header data, Envoy will iterate over existing request headers to verify that the total size of the headers stays below a maximum limit.envoyproxy · envoyEPSS65%·Published Oct 9, 2019
- CVE-2019-17382Critical 9.1An attacker can bypass the login page and access the dashboard page, and then create a Dashboard, Report, Screen, or Map without any Username/Password (i.e., anonymously).zabbix · zabbixEPSS54%1 exploitPublished Oct 9, 2019
- CVE-2019-12630Critical 9.8A vulnerability in the Java deserialization function used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device.cisco · security managerEPSS66%·Published Oct 2, 2019
- CVE-2019-16667High 8.8diag_command.php in pfSense 2.4.4-p3 allows CSRF via the txtCommand or txtRecallBuffer field, as demonstrated by executing OS commands.netgate · pfsenseEPSS55%1 exploitPublished Sep 26, 2019
- CVE-2019-10097High 7.2In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference.apache · http serverEPSS53%·Published Sep 26, 2019
- CVE-2019-10092Medium 6.1In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page.apache · http serverEPSS81%2 exploitsPublished Sep 26, 2019
- CVE-2019-16724Critical 9.8File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler (SEH) based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331.upredsun · file sharing wizardEPSS72%2 exploitsPublished Sep 24, 2019
- CVE-2015-9406High 7.5Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an attacker to read arbitrary files via a ..mtheme-unus project · mtheme-unusEPSS55%1 exploitPublished Sep 20, 2019
- CVE-2019-5485Critical 10.0Command Injection in gitlabhookgitlabhook project · gitlabhookEPSS59%1 exploitPublished Sep 16, 2019
- CVE-2019-1252Medium 6.5An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'.microsoft · windows 10EPSS60%·Published Sep 11, 2019
- CVE-2019-8451Medium 6.5The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery (SSRF) vulnerability due to a logic bug in the JiraWhitelist class.atlassian · jira serverEPSS94%·Published Sep 11, 2019
- CVE-2019-8449Medium 5.3The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure vulnerability.atlassian · jiraEPSS85%2 exploitsPublished Sep 11, 2019
- CVE-2019-10669High 7.2There is a command injection vulnerability in html/includes/graphs/device/collectd.inc.php where user supplied parameters are filtered with the mysqli_escape_real_string function.librenms · librenmsEPSS81%3 exploitsPublished Sep 9, 2019
- CVE-2019-16113High 8.8Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg file name, and then this PHP code can write other PHP code to a ../ pathname.bludit · bluditEPSS78%8 exploitsPublished Sep 8, 2019
- CVE-2019-15043High 7.5In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use.grafana · grafanaEPSS63%·Published Sep 3, 2019
- CVE-2019-11500Critical 9.8In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings.dovecot · dovecotEPSS62%·Published Aug 29, 2019
- CVE-2019-11248High 8.2The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port.kubernetes · kubernetesEPSS75%·Published Aug 29, 2019
- CVE-2019-1937Critical 9.8A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to acquire a valid session token with administrator…cisco · ucs directorEPSS76%3 exploitsPublished Aug 21, 2019
- CVE-2019-1936High 7.2A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an authenticated, remote attacker to execute arbitrary commands on the underlying Linux…cisco · ucs directorEPSS39%3 exploitsPublished Aug 21, 2019
- CVE-2019-1935Critical 9.8A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to log in to the CLI of an affected system by using the SCP User account (scpuser), which…cisco · ucs directorEPSS83%3 exploitsPublished Aug 21, 2019
- CVE-2019-3964Medium 6.1In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the doc_id parameter.open-emr · openemrEPSS53%·Published Aug 20, 2019
- CVE-2019-3963Medium 6.1In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the patient_id parameter.open-emr · openemrEPSS53%·Published Aug 20, 2019
- CVE-2019-9851Critical 9.8LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from.libreoffice · libreofficeEPSS78%2 exploitsPublished Aug 15, 2019
- CVE-2019-1184Medium 6.7An elevation of privilege vulnerability exists when Windows Core Shell COM Server Registrar improperly handles COM calls.microsoft · windows 10EPSS70%1 exploitPublished Aug 14, 2019
- CVE-2019-1181Critical 9.8A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests.microsoft · remote desktopEPSS76%·Published Aug 14, 2019
- CVE-2019-9516Medium 6.5Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service.redhat · jboss core servicesEPSS56%·Published Aug 13, 2019
- CVE-2019-9515High 7.5Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service.redhat · jboss core servicesEPSS87%·Published Aug 13, 2019
- CVE-2019-9513High 7.5Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service.redhat · jboss core servicesEPSS82%·Published Aug 13, 2019
- CVE-2019-9511High 7.5Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service.redhat · jboss core servicesEPSS60%·Published Aug 13, 2019
- CVE-2019-14530High 8.8An attacker can download any file (that is readable by the user www-data) from server storage.open-emr · openemrEPSS66%5 exploitsPublished Aug 13, 2019
- CVE-2019-12255Critical 9.8Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4).windriver · vxworksEPSS75%2 exploitsPublished Aug 9, 2019
- CVE-2019-12265Medium 5.3Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component.windriver · vxworksEPSS60%·Published Aug 9, 2019
- CVE-2019-12257High 8.8Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component.windriver · vxworksEPSS84%·Published Aug 9, 2019
- CVE-2019-13101Critical 9.8An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices.dlink · dir-600m firmwareEPSS67%1 exploitPublished Aug 8, 2019
- CVE-2019-10267High 8.8An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50.ahsay · cloud backup suiteEPSS75%5 exploitsPublished Jul 26, 2019
- CVE-2019-10173Critical 9.8Deserialization of Untrusted Data and Code Injection in xstreamxstream · xstreamEPSS95%·Published Jul 26, 2019
- CVE-2019-14241High 7.5HAProxy through 2.0.2 allows attackers to cause a denial of service (ha_panic) via vectors related to htx_manage_client_side_cookies in proto_htx.c.haproxy · haproxyEPSS70%1 exploitPublished Jul 22, 2019
- CVE-2019-14205High 7.5A Local File Inclusion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for WordPress allows remote attackers to retrieve arbitrary files via the $REQUEST['adaptive-images-settings']['source_file'] parameter in adaptive-images-script.php.nevma · adaptive imagesEPSS63%1 exploitPublished Jul 21, 2019
- CVE-2019-12815Critical 9.8An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306.proftpd · proftpdEPSS58%·Published Jul 19, 2019
- CVE-2019-12725Critical 9.8Zeroshell 3.9.0 is prone to a remote command execution vulnerability.zeroshell · zeroshellEPSS90%2 exploitsPublished Jul 19, 2019
- CVE-2019-9848Critical 9.8LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc.libreoffice · libreofficeEPSS29%1 exploitPublished Jul 17, 2019
- CVE-2019-0887High 8.0A remote code execution vulnerability exists in Remote Desktop Services - formerly known as Terminal Services - when an authenticated attacker abuses clipboard redirection, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.microsoft · remote desktop clientEPSS71%·Published Jul 15, 2019
- CVE-2019-13396Medium 5.3FlightPath 4.x and 5.0-x allows directory traversal and Local File Inclusion through the form_include parameter in an index.php?q=system-handle-form-submit POST request because of an include_once in system_handle_form_submit in modules/system/system.module.getflightpath · flightpathEPSS63%2 exploitsPublished Jul 10, 2019
- CVE-2019-13373Critical 9.8Input does not get validated and arbitrary SQL statements can be executed in the database via the /web/Public/Conn.php parameter dbSQL.dlink · central wifimanagerEPSS68%·Published Jul 6, 2019
- CVE-2019-13372Critical 9.8/web/Lib/Action/IndexAction.class.php in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 allows remote attackers to execute arbitrary PHP code via a cookie because a cookie's username field allows eval injection, and an empty password bypasses authentication.dlink · central wifimanagerEPSS82%2 exploitsPublished Jul 6, 2019
- CVE-2018-15812High 7.5Insufficient Entropy in DotNetNukednnsoftware · dotnetnukeEPSS47%2 exploitsPublished Jul 5, 2019
- CVE-2018-18326High 7.5Insufficient Entropy in DotNetNukednnsoftware · dotnetnukeEPSS54%2 exploitsPublished Jul 5, 2019
- CVE-2019-13345Medium 6.1The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.squid-cache · squidEPSS74%·Published Jul 5, 2019
- CVE-2017-8229Critical 9.8Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administrative credentials.amcrest · ipm-721s firmwareEPSS74%1 exploitPublished Jul 3, 2019
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-1166 | A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) protection, aka 'Windows NTLM Tampering Vulnerability'. microsoft · windows 10 | Medium 5.9 | 68% | · | |
| CVE-2019-15226 | Upon receiving each incoming request header data, Envoy will iterate over existing request headers to verify that the total size of the headers stays below a maximum limit. envoyproxy · envoy | High 7.5 | 65% | · | |
| CVE-2019-17382 | An attacker can bypass the login page and access the dashboard page, and then create a Dashboard, Report, Screen, or Map without any Username/Password (i.e., anonymously). zabbix · zabbix | Critical 9.1 | 54% | 1 exploit | |
| CVE-2019-12630 | A vulnerability in the Java deserialization function used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. cisco · security manager | Critical 9.8 | 66% | · | |
| CVE-2019-16667 | diag_command.php in pfSense 2.4.4-p3 allows CSRF via the txtCommand or txtRecallBuffer field, as demonstrated by executing OS commands. netgate · pfsense | High 8.8 | 55% | 1 exploit | |
| CVE-2019-10097 | In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. apache · http server | High 7.2 | 53% | · | |
| CVE-2019-10092 | In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page. apache · http server | Medium 6.1 | 81% | 2 exploits | |
| CVE-2019-16724 | File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler (SEH) based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331. upredsun · file sharing wizard | Critical 9.8 | 72% | 2 exploits | |
| CVE-2015-9406 | Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an attacker to read arbitrary files via a .. mtheme-unus project · mtheme-unus | High 7.5 | 55% | 1 exploit | |
| CVE-2019-5485 | Command Injection in gitlabhook gitlabhook project · gitlabhook | Critical 10.0 | 59% | 1 exploit | |
| CVE-2019-1252 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. microsoft · windows 10 | Medium 6.5 | 60% | · | |
| CVE-2019-8451 | The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery (SSRF) vulnerability due to a logic bug in the JiraWhitelist class. atlassian · jira server | Medium 6.5 | 94% | · | |
| CVE-2019-8449 | The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure vulnerability. atlassian · jira | Medium 5.3 | 85% | 2 exploits | |
| CVE-2019-10669 | There is a command injection vulnerability in html/includes/graphs/device/collectd.inc.php where user supplied parameters are filtered with the mysqli_escape_real_string function. librenms · librenms | High 7.2 | 81% | 3 exploits | |
| CVE-2019-16113 | Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg file name, and then this PHP code can write other PHP code to a ../ pathname. bludit · bludit | High 8.8 | 78% | 8 exploits | |
| CVE-2019-15043 | In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. grafana · grafana | High 7.5 | 63% | · | |
| CVE-2019-11500 | In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings. dovecot · dovecot | Critical 9.8 | 62% | · | |
| CVE-2019-11248 | The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. kubernetes · kubernetes | High 8.2 | 75% | · | |
| CVE-2019-1937 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to acquire a valid session token with administrator… cisco · ucs director | Critical 9.8 | 76% | 3 exploits | |
| CVE-2019-1936 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an authenticated, remote attacker to execute arbitrary commands on the underlying Linux… cisco · ucs director | High 7.2 | 39% | 3 exploits | |
| CVE-2019-1935 | A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to log in to the CLI of an affected system by using the SCP User account (scpuser), which… cisco · ucs director | Critical 9.8 | 83% | 3 exploits | |
| CVE-2019-3964 | In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the doc_id parameter. open-emr · openemr | Medium 6.1 | 53% | · | |
| CVE-2019-3963 | In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the patient_id parameter. open-emr · openemr | Medium 6.1 | 53% | · | |
| CVE-2019-9851 | LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. libreoffice · libreoffice | Critical 9.8 | 78% | 2 exploits | |
| CVE-2019-1184 | An elevation of privilege vulnerability exists when Windows Core Shell COM Server Registrar improperly handles COM calls. microsoft · windows 10 | Medium 6.7 | 70% | 1 exploit | |
| CVE-2019-1181 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. microsoft · remote desktop | Critical 9.8 | 76% | · | |
| CVE-2019-9516 | Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. redhat · jboss core services | Medium 6.5 | 56% | · | |
| CVE-2019-9515 | Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. redhat · jboss core services | High 7.5 | 87% | · | |
| CVE-2019-9513 | Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. redhat · jboss core services | High 7.5 | 82% | · | |
| CVE-2019-9511 | Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. redhat · jboss core services | High 7.5 | 60% | · | |
| CVE-2019-14530 | An attacker can download any file (that is readable by the user www-data) from server storage. open-emr · openemr | High 8.8 | 66% | 5 exploits | |
| CVE-2019-12255 | Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). windriver · vxworks | Critical 9.8 | 75% | 2 exploits | |
| CVE-2019-12265 | Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. windriver · vxworks | Medium 5.3 | 60% | · | |
| CVE-2019-12257 | Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. windriver · vxworks | High 8.8 | 84% | · | |
| CVE-2019-13101 | An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. dlink · dir-600m firmware | Critical 9.8 | 67% | 1 exploit | |
| CVE-2019-10267 | An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. ahsay · cloud backup suite | High 8.8 | 75% | 5 exploits | |
| CVE-2019-10173 | Deserialization of Untrusted Data and Code Injection in xstream xstream · xstream | Critical 9.8 | 95% | · | |
| CVE-2019-14241 | HAProxy through 2.0.2 allows attackers to cause a denial of service (ha_panic) via vectors related to htx_manage_client_side_cookies in proto_htx.c. haproxy · haproxy | High 7.5 | 70% | 1 exploit | |
| CVE-2019-14205 | A Local File Inclusion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for WordPress allows remote attackers to retrieve arbitrary files via the $REQUEST['adaptive-images-settings']['source_file'] parameter in adaptive-images-script.php. nevma · adaptive images | High 7.5 | 63% | 1 exploit | |
| CVE-2019-12815 | An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306. proftpd · proftpd | Critical 9.8 | 58% | · | |
| CVE-2019-12725 | Zeroshell 3.9.0 is prone to a remote command execution vulnerability. zeroshell · zeroshell | Critical 9.8 | 90% | 2 exploits | |
| CVE-2019-9848 | LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc. libreoffice · libreoffice | Critical 9.8 | 29% | 1 exploit | |
| CVE-2019-0887 | A remote code execution vulnerability exists in Remote Desktop Services - formerly known as Terminal Services - when an authenticated attacker abuses clipboard redirection, aka 'Remote Desktop Services Remote Code Execution Vulnerability'. microsoft · remote desktop client | High 8.0 | 71% | · | |
| CVE-2019-13396 | FlightPath 4.x and 5.0-x allows directory traversal and Local File Inclusion through the form_include parameter in an index.php?q=system-handle-form-submit POST request because of an include_once in system_handle_form_submit in modules/system/system.module. getflightpath · flightpath | Medium 5.3 | 63% | 2 exploits | |
| CVE-2019-13373 | Input does not get validated and arbitrary SQL statements can be executed in the database via the /web/Public/Conn.php parameter dbSQL. dlink · central wifimanager | Critical 9.8 | 68% | · | |
| CVE-2019-13372 | /web/Lib/Action/IndexAction.class.php in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 allows remote attackers to execute arbitrary PHP code via a cookie because a cookie's username field allows eval injection, and an empty password bypasses authentication. dlink · central wifimanager | Critical 9.8 | 82% | 2 exploits | |
| CVE-2018-15812 | Insufficient Entropy in DotNetNuke dnnsoftware · dotnetnuke | High 7.5 | 47% | 2 exploits | |
| CVE-2018-18326 | Insufficient Entropy in DotNetNuke dnnsoftware · dotnetnuke | High 7.5 | 54% | 2 exploits | |
| CVE-2019-13345 | The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter. squid-cache · squid | Medium 6.1 | 74% | · | |
| CVE-2017-8229 | Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administrative credentials. amcrest · ipm-721s firmware | Critical 9.8 | 74% | 1 exploit |
Showing 1,751–1,800 of 3,919
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.