Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
3,919 vulnerabilities · highest exploit probability first
- CVE-2018-11686Critical 9.8The Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code execution via setup.php and change_config.php.flowpaper · flexpaperEPSS53%1 exploitPublished Jul 3, 2019
- CVE-2019-7257Critical 10.0Linear eMerge E3-Series devices allow Unrestricted File Upload.nortekcontrol · linear emerge elite firmwareEPSS70%2 exploitsPublished Jul 2, 2019
- CVE-2019-7255Medium 6.1Linear eMerge E3-Series devices allow XSS.nortekcontrol · linear emerge elite firmwareEPSS56%2 exploitsPublished Jul 2, 2019
- CVE-2019-7254High 7.5Linear eMerge E3-Series devices allow File Inclusion.nortekcontrol · linear emerge elite firmwareEPSS82%2 exploitsPublished Jul 2, 2019
- CVE-2019-7276Critical 9.8Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console.optergy · enterpriseEPSS93%2 exploitsPublished Jul 1, 2019
- CVE-2019-1622Medium 5.3A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device.cisco · data center network managerEPSS79%2 exploitsPublished Jun 27, 2019
- CVE-2019-1620Critical 9.8A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to upload arbitrary files on an affected device.cisco · data center network managerEPSS84%2 exploitsPublished Jun 27, 2019
- CVE-2019-1619Critical 9.8A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device.cisco · data center network managerEPSS83%2 exploitsPublished Jun 27, 2019
- CVE-2019-10072High 7.5Improper Locking in Apache Tomcatapache · tomcatEPSS73%·Published Jun 26, 2019
- CVE-2019-7232High 8.8The ABB IDAL HTTP server is vulnerable to a buffer overflow when a long Host header is sent in a web request.abb · pb610 panel builder 600 firmwareEPSS52%1 exploitPublished Jun 24, 2019
- CVE-2019-12928Critical 9.8The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remote attacker to achieve code execution, denial of service, or information disclosure by sending a crafted QMP command to the listening server.qemu · qemuEPSS23%1 exploitPublished Jun 24, 2019
- CVE-2019-2729Critical 9.8Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server.oracle · weblogic serverEPSS89%2 exploitsPublished Jun 19, 2019
- CVE-2019-11479High 7.5Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes.linux · linux kernelEPSS92%·Published Jun 19, 2019
- CVE-2019-11478High 7.5Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences.linux · linux kernelEPSS95%·Published Jun 19, 2019
- CVE-2019-11477High 7.5Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs).linux · linux kernelEPSS99%·Published Jun 19, 2019
- CVE-2018-18852High 8.8Cerio DT-300N 1.1.6 through 1.1.12 devices allow OS command injection because of improper input validation of the web-interface PING feature's use of Save.cgi to execute a ping command, as exploited in the wild in October 2018.cerio · dt-300n firmwareEPSS64%·Published Jun 18, 2019
- CVE-2019-11409High 8.8app/operator_panel/exec.php in the Operator Panel module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validation that allows authenticated non-administrative attackers to execute commands on the host.fusionpbx · fusionpbxEPSS87%4 exploitsPublished Jun 17, 2019
- CVE-2019-12181High 8.8A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux.solarwinds · serv-u ftp serverEPSS65%6 exploitsPublished Jun 17, 2019
- CVE-2019-12840High 8.8In Webmin through 1.910, any user authorized to the "Package Updates" module can execute arbitrary commands with root privileges via the data parameter to update.cgi.webmin · webminEPSS77%2 exploitsPublished Jun 15, 2019
- CVE-2019-12780Critical 9.8The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the SmartDevURL argument to the SetSmartDevInfo action.belkin · crock-pot smart slow cooker with wemo firmwareEPSS71%2 exploitsPublished Jun 10, 2019
- CVE-2019-12276High 7.5A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEncryptController in GrandNode 4.40 allows remote, unauthenticated attackers to retrieve arbitrary files on the web server via specially crafted LetsEncrypt/Index?fileName= HTTP requests.grandnode · grandnodeEPSS57%1 exploitPublished Jun 5, 2019
- CVE-2019-12196Critical 9.8A SQL injection vulnerability in /client/api/json/v2/nfareports/compareReport in Zoho ManageEngine NetFlow Analyzer 12.3 allows attackers to execute arbitrary SQL commands via the DeviceID parameter.zohocorp · manageengine netflow analyzerEPSS69%·Published Jun 5, 2019
- CVE-2019-5355High 7.5A remote denial of service vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.hp · intelligent management centerEPSS54%·Published Jun 5, 2019
- CVE-2019-11945Critical 9.8A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.hp · intelligent management centerEPSS79%·Published Jun 5, 2019
- CVE-2018-7123High 7.5A remote denial of service vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.hp · intelligent management centerEPSS58%·Published Jun 5, 2019
- CVE-2018-13380Medium 6.1A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2 and below and Fortinet FortiProxy 2.0.0, 1.2.8 and below under SSL VPN web portal allows attacker to execute unauthorized malicious script code via the error or…fortinet · fortiproxyEPSS62%·Published Jun 4, 2019
- CVE-2019-10883Critical 9.8Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow Command Injection.citrix · citrix sd-wan centerEPSS65%·Published Jun 3, 2019
- CVE-2019-12169High 8.8ATutor 2.2.4 allows Arbitrary File Upload and Directory Traversal, resulting in remote code execution via a ".." pathname in a ZIP archive to the mods/_core/languages/language_import.php (aka Import New Language) or mods/_standard/patcher/index_admin.php (aka Patcher) component.atutor · atutorEPSS72%4 exploitsPublished Jun 3, 2019
- CVE-2019-10123Critical 9.8SQL Injection in Advanced InfoData Systems (AIS) ESEL-Server 67 (which is the backend for the AIS logistics mobile app) allows an anonymous attacker to execute arbitrary code in the context of the user of the MSSQL database.ais · logistic softwareEPSS66%3 exploitsPublished May 31, 2019
- CVE-2019-0221Medium 6.1Cross-site scripting in Apache Tomcatapache · tomcatEPSS59%1 exploitPublished May 30, 2019
- CVE-2013-7285Critical 9.8Command Injection in Xstreamxstream · xstreamEPSS84%1 exploitPublished May 29, 2019
- CVE-2019-12347Medium 6.1In pfSense 2.4.4-p3, a stored XSS vulnerability occurs when attackers inject a payload into the Name or Description field via an acme_accountkeys_edit.php action.netgate · pfsenseEPSS59%2 exploitsPublished May 29, 2019
- CVE-2019-7816Critical 9.8ColdFusion versions Update 2 and earlier, Update 9 and earlier, and Update 17 and earlier have a file upload restriction bypass vulnerability.adobe · coldfusionEPSS68%·Published May 24, 2019
- CVE-2019-12314Critical 9.8Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH_INFO, as demonstrated by a cgi-bin/Maconomy/MaconomyWS.macx1.W_MCS/etc/passwd URI.deltek · maconomyEPSS84%3 exploitsPublished May 24, 2019
- CVE-2019-7111High 8.8Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have an out-of-bounds write vulnerability.adobe · acrobat dcEPSS56%·Published May 23, 2019
- CVE-2019-3799Medium 6.5Path Traversal in Spring Cloud Configvmware · spring cloud configEPSS85%1 exploitPublished May 23, 2019
- CVE-2019-6814Critical 9.8A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 which could cause impact to confidentiality, integrity, and availability when a remote attacker crafts a malicious request to the encoder webUI.schneider-electric · net5500 firmwareEPSS37%2 exploitsPublished May 22, 2019
- CVE-2019-8442High 7.5The CachingResourceDownloadRewriteRule class in Jira before version 7.13.4, and from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to access files in the Jira webroot under the META-INF directory via a lax path access…atlassian · jiraEPSS60%·Published May 22, 2019
- CVE-2019-3403Medium 5.3The /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check.atlassian · jiraEPSS51%·Published May 22, 2019
- CVE-2019-11231Critical 9.8insufficient input sanitation in the theme-edit.php file allows upload of files with arbitrary content (PHP code, for example).get-simple · getsimple cmsEPSS72%3 exploitsPublished May 22, 2019
- CVE-2019-4279Critical 9.8IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources.ibm · websphere application serverEPSS80%2 exploitsPublished May 17, 2019
- CVE-2019-1821Critical 9.8A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system.cisco · prime infrastructureEPSS98%3 exploitsPublished May 15, 2019
- CVE-2019-0227High 7.5Server Side Request Forgery in Apache Axisapache · axisEPSS92%1 exploitPublished May 14, 2019
- CVE-2019-11600High 8.1A SQL injection vulnerability in the activities API in OpenProject before 8.3.2 allows a remote attacker to execute arbitrary SQL commands via the id parameter.openproject · openprojectEPSS80%2 exploitsPublished May 13, 2019
- CVE-2019-8387Critical 9.8MASTER IPCAMERA01 3.3.4.2103 devices allow Remote Command Execution, related to the thttpd component.barni · master ip camera01 firmwareEPSS56%3 exploitsPublished May 8, 2019
- CVE-2019-5434Critical 9.8An attacker could send a specifically crafted payload to the XML-RPC invocation script and trigger the unserialize() call on the "what" parameter in the "openads.spc" RPC method.revive-sas · revive adserverEPSS57%1 exploitPublished May 6, 2019
- CVE-2017-18372High 8.8The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerability in the Time Setting function, which is only accessible by an authenticated user.billion · 5200w-t firmwareEPSS22%1 exploitPublished May 2, 2019
- CVE-2017-18371Critical 9.8The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username supervisor and password zyad1234.zyxel · p660hn-t1a v1 firmwareEPSS23%1 exploitPublished May 2, 2019
- CVE-2017-18370High 8.8The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is only accessible by an authenticated user.zyxel · p660hn-t1a v1 firmwareEPSS24%1 exploitPublished May 2, 2019
- CVE-2017-18369Critical 9.8The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user.billion · 5200w-t firmwareEPSS68%1 exploitPublished May 2, 2019
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-11686 | The Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code execution via setup.php and change_config.php. flowpaper · flexpaper | Critical 9.8 | 53% | 1 exploit | |
| CVE-2019-7257 | Linear eMerge E3-Series devices allow Unrestricted File Upload. nortekcontrol · linear emerge elite firmware | Critical 10.0 | 70% | 2 exploits | |
| CVE-2019-7255 | Linear eMerge E3-Series devices allow XSS. nortekcontrol · linear emerge elite firmware | Medium 6.1 | 56% | 2 exploits | |
| CVE-2019-7254 | Linear eMerge E3-Series devices allow File Inclusion. nortekcontrol · linear emerge elite firmware | High 7.5 | 82% | 2 exploits | |
| CVE-2019-7276 | Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console. optergy · enterprise | Critical 9.8 | 93% | 2 exploits | |
| CVE-2019-1622 | A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. cisco · data center network manager | Medium 5.3 | 79% | 2 exploits | |
| CVE-2019-1620 | A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to upload arbitrary files on an affected device. cisco · data center network manager | Critical 9.8 | 84% | 2 exploits | |
| CVE-2019-1619 | A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. cisco · data center network manager | Critical 9.8 | 83% | 2 exploits | |
| CVE-2019-10072 | Improper Locking in Apache Tomcat apache · tomcat | High 7.5 | 73% | · | |
| CVE-2019-7232 | The ABB IDAL HTTP server is vulnerable to a buffer overflow when a long Host header is sent in a web request. abb · pb610 panel builder 600 firmware | High 8.8 | 52% | 1 exploit | |
| CVE-2019-12928 | The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remote attacker to achieve code execution, denial of service, or information disclosure by sending a crafted QMP command to the listening server. qemu · qemu | Critical 9.8 | 23% | 1 exploit | |
| CVE-2019-2729 | Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. oracle · weblogic server | Critical 9.8 | 89% | 2 exploits | |
| CVE-2019-11479 | Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. linux · linux kernel | High 7.5 | 92% | · | |
| CVE-2019-11478 | Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. linux · linux kernel | High 7.5 | 95% | · | |
| CVE-2019-11477 | Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). linux · linux kernel | High 7.5 | 99% | · | |
| CVE-2018-18852 | Cerio DT-300N 1.1.6 through 1.1.12 devices allow OS command injection because of improper input validation of the web-interface PING feature's use of Save.cgi to execute a ping command, as exploited in the wild in October 2018. cerio · dt-300n firmware | High 8.8 | 64% | · | |
| CVE-2019-11409 | app/operator_panel/exec.php in the Operator Panel module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validation that allows authenticated non-administrative attackers to execute commands on the host. fusionpbx · fusionpbx | High 8.8 | 87% | 4 exploits | |
| CVE-2019-12181 | A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux. solarwinds · serv-u ftp server | High 8.8 | 65% | 6 exploits | |
| CVE-2019-12840 | In Webmin through 1.910, any user authorized to the "Package Updates" module can execute arbitrary commands with root privileges via the data parameter to update.cgi. webmin · webmin | High 8.8 | 77% | 2 exploits | |
| CVE-2019-12780 | The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the SmartDevURL argument to the SetSmartDevInfo action. belkin · crock-pot smart slow cooker with wemo firmware | Critical 9.8 | 71% | 2 exploits | |
| CVE-2019-12276 | A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEncryptController in GrandNode 4.40 allows remote, unauthenticated attackers to retrieve arbitrary files on the web server via specially crafted LetsEncrypt/Index?fileName= HTTP requests. grandnode · grandnode | High 7.5 | 57% | 1 exploit | |
| CVE-2019-12196 | A SQL injection vulnerability in /client/api/json/v2/nfareports/compareReport in Zoho ManageEngine NetFlow Analyzer 12.3 allows attackers to execute arbitrary SQL commands via the DeviceID parameter. zohocorp · manageengine netflow analyzer | Critical 9.8 | 69% | · | |
| CVE-2019-5355 | A remote denial of service vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09. hp · intelligent management center | High 7.5 | 54% | · | |
| CVE-2019-11945 | A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09. hp · intelligent management center | Critical 9.8 | 79% | · | |
| CVE-2018-7123 | A remote denial of service vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09. hp · intelligent management center | High 7.5 | 58% | · | |
| CVE-2018-13380 | A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2 and below and Fortinet FortiProxy 2.0.0, 1.2.8 and below under SSL VPN web portal allows attacker to execute unauthorized malicious script code via the error or… fortinet · fortiproxy | Medium 6.1 | 62% | · | |
| CVE-2019-10883 | Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow Command Injection. citrix · citrix sd-wan center | Critical 9.8 | 65% | · | |
| CVE-2019-12169 | ATutor 2.2.4 allows Arbitrary File Upload and Directory Traversal, resulting in remote code execution via a ".." pathname in a ZIP archive to the mods/_core/languages/language_import.php (aka Import New Language) or mods/_standard/patcher/index_admin.php (aka Patcher) component. atutor · atutor | High 8.8 | 72% | 4 exploits | |
| CVE-2019-10123 | SQL Injection in Advanced InfoData Systems (AIS) ESEL-Server 67 (which is the backend for the AIS logistics mobile app) allows an anonymous attacker to execute arbitrary code in the context of the user of the MSSQL database. ais · logistic software | Critical 9.8 | 66% | 3 exploits | |
| CVE-2019-0221 | Cross-site scripting in Apache Tomcat apache · tomcat | Medium 6.1 | 59% | 1 exploit | |
| CVE-2013-7285 | Command Injection in Xstream xstream · xstream | Critical 9.8 | 84% | 1 exploit | |
| CVE-2019-12347 | In pfSense 2.4.4-p3, a stored XSS vulnerability occurs when attackers inject a payload into the Name or Description field via an acme_accountkeys_edit.php action. netgate · pfsense | Medium 6.1 | 59% | 2 exploits | |
| CVE-2019-7816 | ColdFusion versions Update 2 and earlier, Update 9 and earlier, and Update 17 and earlier have a file upload restriction bypass vulnerability. adobe · coldfusion | Critical 9.8 | 68% | · | |
| CVE-2019-12314 | Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH_INFO, as demonstrated by a cgi-bin/Maconomy/MaconomyWS.macx1.W_MCS/etc/passwd URI. deltek · maconomy | Critical 9.8 | 84% | 3 exploits | |
| CVE-2019-7111 | Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have an out-of-bounds write vulnerability. adobe · acrobat dc | High 8.8 | 56% | · | |
| CVE-2019-3799 | Path Traversal in Spring Cloud Config vmware · spring cloud config | Medium 6.5 | 85% | 1 exploit | |
| CVE-2019-6814 | A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 which could cause impact to confidentiality, integrity, and availability when a remote attacker crafts a malicious request to the encoder webUI. schneider-electric · net5500 firmware | Critical 9.8 | 37% | 2 exploits | |
| CVE-2019-8442 | The CachingResourceDownloadRewriteRule class in Jira before version 7.13.4, and from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to access files in the Jira webroot under the META-INF directory via a lax path access… atlassian · jira | High 7.5 | 60% | · | |
| CVE-2019-3403 | The /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check. atlassian · jira | Medium 5.3 | 51% | · | |
| CVE-2019-11231 | insufficient input sanitation in the theme-edit.php file allows upload of files with arbitrary content (PHP code, for example). get-simple · getsimple cms | Critical 9.8 | 72% | 3 exploits | |
| CVE-2019-4279 | IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources. ibm · websphere application server | Critical 9.8 | 80% | 2 exploits | |
| CVE-2019-1821 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. cisco · prime infrastructure | Critical 9.8 | 98% | 3 exploits | |
| CVE-2019-0227 | Server Side Request Forgery in Apache Axis apache · axis | High 7.5 | 92% | 1 exploit | |
| CVE-2019-11600 | A SQL injection vulnerability in the activities API in OpenProject before 8.3.2 allows a remote attacker to execute arbitrary SQL commands via the id parameter. openproject · openproject | High 8.1 | 80% | 2 exploits | |
| CVE-2019-8387 | MASTER IPCAMERA01 3.3.4.2103 devices allow Remote Command Execution, related to the thttpd component. barni · master ip camera01 firmware | Critical 9.8 | 56% | 3 exploits | |
| CVE-2019-5434 | An attacker could send a specifically crafted payload to the XML-RPC invocation script and trigger the unserialize() call on the "what" parameter in the "openads.spc" RPC method. revive-sas · revive adserver | Critical 9.8 | 57% | 1 exploit | |
| CVE-2017-18372 | The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerability in the Time Setting function, which is only accessible by an authenticated user. billion · 5200w-t firmware | High 8.8 | 22% | 1 exploit | |
| CVE-2017-18371 | The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username supervisor and password zyad1234. zyxel · p660hn-t1a v1 firmware | Critical 9.8 | 23% | 1 exploit | |
| CVE-2017-18370 | The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is only accessible by an authenticated user. zyxel · p660hn-t1a v1 firmware | High 8.8 | 24% | 1 exploit | |
| CVE-2017-18369 | The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. billion · 5200w-t firmware | Critical 9.8 | 68% | 1 exploit |
Showing 1,801–1,850 of 3,919
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.