Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
3,919 vulnerabilities · highest exploit probability first
- CVE-2019-11577Critical 9.8dhcpcd before 7.2.1 contains a buffer overflow in dhcp6_findna in dhcp6.c when reading NA/TA addresses.dhcpcd project · dhcpcdEPSS53%·Published Apr 28, 2019
- CVE-2019-11358Medium 6.1XSS in jQuery as used in Drupal, Backdrop CMS, and other productsbackdropcms · backdropEPSS87%1 exploitPublished Apr 26, 2019
- CVE-2019-11542High 7.2In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before…ivanti · connect secureEPSS66%·Published Apr 25, 2019
- CVE-2019-7214Critical 9.8SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data.smartertools · smartermailEPSS85%2 exploitsPublished Apr 24, 2019
- CVE-2019-2578High 8.6The supported version that is affected is 12.2.1.3.0.oracle · webcenter sitesEPSS72%·Published Apr 23, 2019
- CVE-2019-7304Critical 9.8Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root.canonical · snapdEPSS61%2 exploitsPublished Apr 23, 2019
- CVE-2019-11447High 8.8An attacker can infiltrate the server through the avatar upload process in the profile area via the avatar_file field to index.php?mod=main&opt=personal.cutephp · cutenewsEPSS53%3 exploitsPublished Apr 22, 2019
- CVE-2019-9733Critical 9.8By default, the access-admin account is used to reset the password of the admin account in case an administrator gets locked out from the Artifactory console.jfrog · artifactoryEPSS54%1 exploitPublished Apr 11, 2019
- CVE-2018-19300Critical 9.8On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware version 1.02v02, DWR-116 (A1) before firmware version 1.06b03, DWR-512 (B1) before firmware version 2.02b01, DWR-711 (A1) through firmware version…d-link · dap-1530 firmwareEPSS74%·Published Apr 11, 2019
- CVE-2019-11072Critical 9.8lighttpd before 1.4.54 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a malicious HTTP GET request, as demonstrated by mishandling of /%2F?lighttpd · lighttpdEPSS74%·Published Apr 10, 2019
- CVE-2019-0726Critical 9.8A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'.microsoft · windows 10EPSS54%·Published Apr 8, 2019
- CVE-2019-0698Critical 9.8A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'.microsoft · windows 10EPSS63%·Published Apr 8, 2019
- CVE-2019-6553Critical 9.8An input validation issue in a .dll file of RSLinx Classic where the data in a Forward Open service request is passed to a fixed size buffer, allowing an attacker to exploit a stack-based buffer overflow condition.rockwellautomation · rslinxEPSS66%·Published Apr 4, 2019
- CVE-2019-10692Critical 9.8In the wp-google-maps plugin before 7.11.18 for WordPress, includes/class.rest-api.php in the REST API does not sanitize field names before a SELECT statement.codecabin · wp go mapsEPSS77%1 exploitPublished Apr 2, 2019
- CVE-2019-9193High 7.2In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_server_program' group to execute arbitrary code in the context of the database's operating system user.postgresql · postgresqlEPSS92%2 exploitsPublished Apr 1, 2019
- CVE-2019-10662High 8.8Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the backupUCMConfig file-backup parameter to the /cgi?grandstream · ucm6204 firmwareEPSS44%1 exploitPublished Mar 30, 2019
- CVE-2017-18365Critical 9.8The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated remote attackers to execute arbitrary code.github · githubEPSS21%1 exploitPublished Mar 28, 2019
- CVE-2019-3829Medium 5.3A memory corruption (double free) vulnerability in the certificate verification API.gnu · gnutlsEPSS59%·Published Mar 27, 2019
- CVE-2019-9053High 8.1It is possible with the News module, through a crafted URL, to achieve unauthenticated blind time-based SQL injection via the m1_idlist parameter.cmsmadesimple · cms made simpleEPSS69%3 exploitsPublished Mar 26, 2019
- CVE-2018-16858High 7.8It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document.EPSS67%5 exploitsPublished Mar 25, 2019
- CVE-2019-6441Critical 9.8An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices.coship · rt3050 firmwareEPSS54%4 exploitsPublished Mar 21, 2019
- CVE-2018-20526Critical 9.8Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php.roxyfileman · roxy filemanEPSS73%1 exploitPublished Mar 21, 2019
- CVE-2018-20323High 8.8www/soap/application/MCSoap/Logs.php in MailCleaner Community Edition 2018.08 allows remote attackers to execute arbitrary OS commands.mailcleaner · mailcleanerEPSS54%2 exploitsPublished Mar 21, 2019
- CVE-2018-19524Critical 9.8An issue was discovered on Shenzhen Skyworth DT741 Converged Intelligent Terminal (G/EPON+IPTV) SDOTBGN1, DT721-cb SDOTBGN1, and DT741-cb SDOTBGN1 devices.skyworthdigital · dt721-cb firmwareEPSS51%3 exploitsPublished Mar 21, 2019
- CVE-2018-19276Critical 9.8OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body.openmrs · openmrsEPSS99%5 exploitsPublished Mar 21, 2019
- CVE-2018-10093High 8.8AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution.audiocodes · 420hd ip phone firmwareEPSS68%3 exploitsPublished Mar 21, 2019
- CVE-2019-0192Critical 9.8Critical severity vulnerability that affects org.apache.solr:solr-coreapache · solrEPSS78%·Published Mar 14, 2019
- CVE-2019-9760Critical 9.8FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-controlled machine that sends crafted responses.ftpgetter · ftpgetterEPSS53%4 exploitsPublished Mar 13, 2019
- CVE-2019-5420Critical 9.8Use of Insufficiently Random Values in Railties Allows Remote Code Executionrubyonrails · railsEPSS89%2 exploitsPublished Mar 13, 2019
- CVE-2019-9692Medium 6.5class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a watermark file has a standard image file extension (GIF, JPG, JPEG, or PNG).cmsmadesimple · cms made simpleEPSS46%6 exploitsPublished Mar 11, 2019
- CVE-2019-9624High 7.8Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI.webmin · webminEPSS24%2 exploitsPublished Mar 7, 2019
- CVE-2019-0626Critical 9.8A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.microsoft · windows 10EPSS69%·Published Mar 5, 2019
- CVE-2019-0618High 8.8A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.microsoft · windows 10EPSS67%·Published Mar 5, 2019
- CVE-2019-1663Critical 9.8A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected…cisco · rv110w firmwareEPSS96%5 exploitsPublished Feb 28, 2019
- CVE-2019-8903High 7.5Path Traversal in total.jstotaljs · total.jsEPSS72%·Published Feb 20, 2019
- CVE-2019-8953Medium 6.1The HAProxy package before 0.59_16 for pfSense has XSS via the desc (aka Description) or table_actionsaclN parameter, related to haproxy_listeners.php and haproxy_listeners_edit.php.netgate · haproxyEPSS52%2 exploitsPublished Feb 20, 2019
- CVE-2019-8943Medium 6.5WordPress through 5.0.3 allows Path Traversal in wp_crop_image().wordpress · wordpressEPSS92%7 exploitsPublished Feb 20, 2019
- CVE-2019-8942High 8.8WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry can be changed to an arbitrary string, such as one ending with a .jpg?file.php substring.wordpress · wordpressEPSS83%6 exploitsPublished Feb 20, 2019
- CVE-2019-6453High 8.1mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers.mirc · mircEPSS54%3 exploitsPublished Feb 18, 2019
- CVE-2019-5736High 8.6runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new…docker · dockerEPSS98%8 exploitsPublished Feb 11, 2019
- CVE-2018-11803High 7.5Subversion's mod_dav_svn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash after dereferencing an uninitialized pointer if the client omits the root path in a recursive directory listing operation.apache · subversionEPSS58%·Published Feb 5, 2019
- CVE-2019-6111Medium 5.9Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client.openbsd · opensshEPSS58%3 exploitsPublished Jan 31, 2019
- CVE-2019-0190High 7.5A remote attacker could send a carefully crafted request that would cause mod_ssl to enter a loop leading to a denial of service.apache · http serverEPSS59%·Published Jan 30, 2019
- CVE-2018-17431Critical 9.8Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL.comodo · unified threat management firewallEPSS84%3 exploitsPublished Jan 30, 2019
- CVE-2019-6977High 8.8gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow.libgd · libgdEPSS71%1 exploitPublished Jan 27, 2019
- CVE-2018-16042Medium 6.5Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a security bypass…adobe · readerEPSS82%·Published Jan 18, 2019
- CVE-2018-5740High 7.5"deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers.isc · bindEPSS60%·Published Jan 16, 2019
- CVE-2017-3144High 7.5A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server.isc · dhcpEPSS73%·Published Jan 16, 2019
- CVE-2019-6447High 8.1The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute applications via TCP port 59777 requests on the local Wi-Fi network.estrongs · es file explorer file managerEPSS64%3 exploitsPublished Jan 16, 2019
- CVE-2019-6443Critical 9.1Because of a bug in ctl_getitem, there is a stack-based buffer over-read in read_sysvars in ntp_control.c in ntpd.ntpsec · ntpsecEPSS67%2 exploitsPublished Jan 16, 2019
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-11577 | dhcpcd before 7.2.1 contains a buffer overflow in dhcp6_findna in dhcp6.c when reading NA/TA addresses. dhcpcd project · dhcpcd | Critical 9.8 | 53% | · | |
| CVE-2019-11358 | XSS in jQuery as used in Drupal, Backdrop CMS, and other products backdropcms · backdrop | Medium 6.1 | 87% | 1 exploit | |
| CVE-2019-11542 | In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before… ivanti · connect secure | High 7.2 | 66% | · | |
| CVE-2019-7214 | SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. smartertools · smartermail | Critical 9.8 | 85% | 2 exploits | |
| CVE-2019-2578 | The supported version that is affected is 12.2.1.3.0. oracle · webcenter sites | High 8.6 | 72% | · | |
| CVE-2019-7304 | Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root. canonical · snapd | Critical 9.8 | 61% | 2 exploits | |
| CVE-2019-11447 | An attacker can infiltrate the server through the avatar upload process in the profile area via the avatar_file field to index.php?mod=main&opt=personal. cutephp · cutenews | High 8.8 | 53% | 3 exploits | |
| CVE-2019-9733 | By default, the access-admin account is used to reset the password of the admin account in case an administrator gets locked out from the Artifactory console. jfrog · artifactory | Critical 9.8 | 54% | 1 exploit | |
| CVE-2018-19300 | On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware version 1.02v02, DWR-116 (A1) before firmware version 1.06b03, DWR-512 (B1) before firmware version 2.02b01, DWR-711 (A1) through firmware version… d-link · dap-1530 firmware | Critical 9.8 | 74% | · | |
| CVE-2019-11072 | lighttpd before 1.4.54 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a malicious HTTP GET request, as demonstrated by mishandling of /%2F? lighttpd · lighttpd | Critical 9.8 | 74% | · | |
| CVE-2019-0726 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. microsoft · windows 10 | Critical 9.8 | 54% | · | |
| CVE-2019-0698 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. microsoft · windows 10 | Critical 9.8 | 63% | · | |
| CVE-2019-6553 | An input validation issue in a .dll file of RSLinx Classic where the data in a Forward Open service request is passed to a fixed size buffer, allowing an attacker to exploit a stack-based buffer overflow condition. rockwellautomation · rslinx | Critical 9.8 | 66% | · | |
| CVE-2019-10692 | In the wp-google-maps plugin before 7.11.18 for WordPress, includes/class.rest-api.php in the REST API does not sanitize field names before a SELECT statement. codecabin · wp go maps | Critical 9.8 | 77% | 1 exploit | |
| CVE-2019-9193 | In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_server_program' group to execute arbitrary code in the context of the database's operating system user. postgresql · postgresql | High 7.2 | 92% | 2 exploits | |
| CVE-2019-10662 | Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the backupUCMConfig file-backup parameter to the /cgi? grandstream · ucm6204 firmware | High 8.8 | 44% | 1 exploit | |
| CVE-2017-18365 | The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated remote attackers to execute arbitrary code. github · github | Critical 9.8 | 21% | 1 exploit | |
| CVE-2019-3829 | A memory corruption (double free) vulnerability in the certificate verification API. gnu · gnutls | Medium 5.3 | 59% | · | |
| CVE-2019-9053 | It is possible with the News module, through a crafted URL, to achieve unauthenticated blind time-based SQL injection via the m1_idlist parameter. cmsmadesimple · cms made simple | High 8.1 | 69% | 3 exploits | |
| CVE-2018-16858 | It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. | High 7.8 | 67% | 5 exploits | |
| CVE-2019-6441 | An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices. coship · rt3050 firmware | Critical 9.8 | 54% | 4 exploits | |
| CVE-2018-20526 | Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php. roxyfileman · roxy fileman | Critical 9.8 | 73% | 1 exploit | |
| CVE-2018-20323 | www/soap/application/MCSoap/Logs.php in MailCleaner Community Edition 2018.08 allows remote attackers to execute arbitrary OS commands. mailcleaner · mailcleaner | High 8.8 | 54% | 2 exploits | |
| CVE-2018-19524 | An issue was discovered on Shenzhen Skyworth DT741 Converged Intelligent Terminal (G/EPON+IPTV) SDOTBGN1, DT721-cb SDOTBGN1, and DT741-cb SDOTBGN1 devices. skyworthdigital · dt721-cb firmware | Critical 9.8 | 51% | 3 exploits | |
| CVE-2018-19276 | OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body. openmrs · openmrs | Critical 9.8 | 99% | 5 exploits | |
| CVE-2018-10093 | AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution. audiocodes · 420hd ip phone firmware | High 8.8 | 68% | 3 exploits | |
| CVE-2019-0192 | Critical severity vulnerability that affects org.apache.solr:solr-core apache · solr | Critical 9.8 | 78% | · | |
| CVE-2019-9760 | FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-controlled machine that sends crafted responses. ftpgetter · ftpgetter | Critical 9.8 | 53% | 4 exploits | |
| CVE-2019-5420 | Use of Insufficiently Random Values in Railties Allows Remote Code Execution rubyonrails · rails | Critical 9.8 | 89% | 2 exploits | |
| CVE-2019-9692 | class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a watermark file has a standard image file extension (GIF, JPG, JPEG, or PNG). cmsmadesimple · cms made simple | Medium 6.5 | 46% | 6 exploits | |
| CVE-2019-9624 | Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI. webmin · webmin | High 7.8 | 24% | 2 exploits | |
| CVE-2019-0626 | A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'. microsoft · windows 10 | Critical 9.8 | 69% | · | |
| CVE-2019-0618 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. microsoft · windows 10 | High 8.8 | 67% | · | |
| CVE-2019-1663 | A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected… cisco · rv110w firmware | Critical 9.8 | 96% | 5 exploits | |
| CVE-2019-8903 | Path Traversal in total.js totaljs · total.js | High 7.5 | 72% | · | |
| CVE-2019-8953 | The HAProxy package before 0.59_16 for pfSense has XSS via the desc (aka Description) or table_actionsaclN parameter, related to haproxy_listeners.php and haproxy_listeners_edit.php. netgate · haproxy | Medium 6.1 | 52% | 2 exploits | |
| CVE-2019-8943 | WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). wordpress · wordpress | Medium 6.5 | 92% | 7 exploits | |
| CVE-2019-8942 | WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry can be changed to an arbitrary string, such as one ending with a .jpg?file.php substring. wordpress · wordpress | High 8.8 | 83% | 6 exploits | |
| CVE-2019-6453 | mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. mirc · mirc | High 8.1 | 54% | 3 exploits | |
| CVE-2019-5736 | runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new… docker · docker | High 8.6 | 98% | 8 exploits | |
| CVE-2018-11803 | Subversion's mod_dav_svn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash after dereferencing an uninitialized pointer if the client omits the root path in a recursive directory listing operation. apache · subversion | High 7.5 | 58% | · | |
| CVE-2019-6111 | Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. openbsd · openssh | Medium 5.9 | 58% | 3 exploits | |
| CVE-2019-0190 | A remote attacker could send a carefully crafted request that would cause mod_ssl to enter a loop leading to a denial of service. apache · http server | High 7.5 | 59% | · | |
| CVE-2018-17431 | Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL. comodo · unified threat management firewall | Critical 9.8 | 84% | 3 exploits | |
| CVE-2019-6977 | gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. libgd · libgd | High 8.8 | 71% | 1 exploit | |
| CVE-2018-16042 | Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a security bypass… adobe · reader | Medium 6.5 | 82% | · | |
| CVE-2018-5740 | "deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. isc · bind | High 7.5 | 60% | · | |
| CVE-2017-3144 | A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. isc · dhcp | High 7.5 | 73% | · | |
| CVE-2019-6447 | The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute applications via TCP port 59777 requests on the local Wi-Fi network. estrongs · es file explorer file manager | High 8.1 | 64% | 3 exploits | |
| CVE-2019-6443 | Because of a bug in ctl_getitem, there is a stack-based buffer over-read in read_sysvars in ntp_control.c in ntpd. ntpsec · ntpsec | Critical 9.1 | 67% | 2 exploits |
Showing 1,851–1,900 of 3,919
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.