Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
3,919 vulnerabilities · highest exploit probability first
- CVE-2018-11763Medium 5.9In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any connection timeout coming to effect.apache · http serverEPSS51%·Published Sep 25, 2018
- CVE-2018-17281High 7.5There is a stack consumption vulnerability in the res_http_websocket.so module of Asterisk through 13.23.0, 14.7.x through 14.7.7, and 15.x through 15.6.0 and Certified Asterisk through 13.21-cert2.digium · asteriskEPSS52%·Published Sep 24, 2018
- CVE-2018-16283Critical 9.8The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter.wechat brodcast project · wechat brodcastEPSS63%2 exploitsPublished Sep 24, 2018
- CVE-2018-17173Critical 9.8LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail.lg · supersign cmsEPSS56%2 exploitsPublished Sep 21, 2018
- CVE-2018-16833Medium 6.1Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI.zohocorp · manageengine desktop centralEPSS65%·Published Sep 21, 2018
- CVE-2018-17283High 7.5Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /oputilsServlet?action=getAPIKey request that can be leveraged against Firewall Analyzer to add an admin user via /api/json/v2/admin/addUser or…zohocorp · manageengine opmanagerEPSS66%1 exploitPublished Sep 21, 2018
- CVE-2018-17254Critical 9.8The JCK Editor component 6.4.4 for Joomla!arkextensions · jck editorEPSS83%4 exploitsPublished Sep 20, 2018
- CVE-2018-17243Critical 9.8Global Search in Zoho ManageEngine OpManager before 12.3 123205 allows SQL Injection.zohocorp · manageengine opmanagerEPSS75%·Published Sep 20, 2018
- CVE-2018-17153Critical 9.8It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability.western digital · my cloud dl2100EPSS87%1 exploitPublished Sep 18, 2018
- CVE-2018-17128Medium 5.4A Persistent XSS issue was discovered in the Visual Editor in MyBB before 1.8.19 via a Video MyCode.mybb · mybbEPSS75%2 exploitsPublished Sep 17, 2018
- CVE-2018-16836Critical 9.8Rubedo through 3.4.0 contains a Directory Traversal vulnerability in the theme component, allowing unauthenticated attackers to read and execute arbitrary files outside of the service root path, as demonstrated by a /theme/default/img/%2e%2e/..//etc/passwd URI.rubedo project · rubedoEPSS61%3 exploitsPublished Sep 11, 2018
- CVE-2018-16763Critical 9.8FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter.thedaylightstudio · fuel cmsEPSS83%6 exploitsPublished Sep 9, 2018
- CVE-2015-9266Critical 9.8The web management interface of Ubiquiti airMAX, airFiber, airGateway and EdgeSwitch XP (formerly TOUGHSwitch) allows an unauthenticated attacker to upload and write arbitrary files using directory traversal techniques.ubnt · airos 4 xs2EPSS74%4 exploitsPublished Sep 5, 2018
- CVE-2018-16509High 7.8Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction.artifex · ghostscriptEPSS92%3 exploitsPublished Sep 5, 2018
- CVE-2018-15745High 7.5Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traversal, leading to File Disclosure via a ..%2F in the WEBACCOUNT.CGI RESULTPAGE parameter.argussurveillance · dvrEPSS98%1 exploitPublished Aug 30, 2018
- CVE-2018-12710High 8.0An issue was discovered on D-Link DIR-601 2.02NA devices.dlink · dir-601 firmwareEPSS77%2 exploitsPublished Aug 29, 2018
- CVE-2018-17207Critical 9.8Duplicator <= 1.2.41 - Sensitive Information Disclosure leading to Remote Code Executionawesomemotive · duplicatorEPSS60%1 exploitPublished Aug 28, 2018
- CVE-2018-15877High 8.8The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell metacharacters in the ip parameter of a wp-admin/admin.php?page=plainview_activity_monitor&tab=activity_tools request.plainview activity monitor project · plainview activity monitorEPSS77%7 exploitsPublished Aug 26, 2018
- CVE-2018-15473Medium 5.9OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.openbsd · opensshEPSS99%6 exploitsPublished Aug 17, 2018
- CVE-2018-14007Critical 9.8Citrix XenServer 7.1 and newer allows Directory Traversal.citrix · xenserverEPSS56%·Published Aug 15, 2018
- CVE-2018-8397High 8.8A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka "GDI+ Remote Code Execution Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.microsoft · windows 7EPSS68%·Published Aug 15, 2018
- CVE-2018-8353High 7.5A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.microsoft · internet explorerEPSS68%2 exploitsPublished Aug 15, 2018
- CVE-2018-15153High 8.8OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/main/daemon_frame.php after modifying the "hylafax_server" global variable in…open-emr · openemrEPSS62%1 exploitPublished Aug 15, 2018
- CVE-2018-5390High 7.5Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.linux · linux kernelEPSS71%·Published Aug 6, 2018
- CVE-2018-14417Critical 9.8A command injection vulnerability was found in the web administration console in SoftNAS Cloud before 4.0.3.softnas · cloudEPSS89%2 exploitsPublished Aug 3, 2018
- CVE-2018-14912High 7.5cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when enable-http-clone=1 is not turned off, as demonstrated by a cgit/cgit.cgi/git/objects/?path=../ request.cgit project · cgitEPSS92%2 exploitsPublished Aug 3, 2018
- CVE-2018-14728Critical 9.8upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter.tecrail · responsive filemanagerEPSS76%3 exploitsPublished Aug 3, 2018
- CVE-2017-15120High 7.5An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference when parsing a specially crafted answer containing a CNAME of a different class than IN.powerdns · recursorEPSS51%·Published Jul 27, 2018
- CVE-2018-5006High 7.5Adobe Experience Manager versions 6.4 and earlier have a Server-Side Request Forgery vulnerability.adobe · experience managerEPSS53%·Published Jul 20, 2018
- CVE-2017-5941Critical 9.8Code Execution through IIFE in node-serializenode-serialize project · node-serializeEPSS61%3 exploitsPublished Jul 18, 2018
- CVE-2018-8011High 7.5By specially crafting HTTP requests, the mod_md challenge handler would dereference a NULL pointer and cause the child process to segfault.apache · http serverEPSS56%·Published Jul 18, 2018
- CVE-2018-2894Critical 9.8Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server.oracle · weblogic serverEPSS50%·Published Jul 18, 2018
- CVE-2018-2893Critical 9.8Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server.oracle · weblogic serverEPSS70%·Published Jul 18, 2018
- CVE-2018-1612Medium 5.8IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and obtain sensitive information.ibm · qradar security information and event managerEPSS56%2 exploitsPublished Jul 17, 2018
- CVE-2018-0707High 7.2Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.qnap · q\'centerEPSS59%5 exploitsPublished Jul 16, 2018
- CVE-2018-0706High 8.8Exposure of Private Information in QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to access sensitive information.qnap · q\'centerEPSS48%5 exploitsPublished Jul 16, 2018
- CVE-2016-6563Critical 9.8Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers.dlink · dir-818l\(w\) firmwareEPSS80%3 exploitsPublished Jul 13, 2018
- CVE-2017-9462High 8.7Mercurial has Incorrect Permission Assignment for Critical Resourcemercurial · mercurialEPSS22%1 exploitPublished Jul 13, 2018
- CVE-2018-11529High 8.0VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via crafted MKV files.videolan · vlc media playerEPSS37%3 exploitsPublished Jul 11, 2018
- CVE-2017-16709High 7.2Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated administrators to execute arbitrary code via unspecified vectors.crestron · airmedia am-100 firmwareEPSS72%2 exploitsPublished Jul 11, 2018
- CVE-2018-8279High 7.5A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore.microsoft · chakracoreEPSS71%2 exploitsPublished Jul 10, 2018
- CVE-2018-4993High 7.5Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an NTLM SSO hash theft vulnerability.adobe · acrobat dcEPSS87%·Published Jul 9, 2018
- CVE-2018-8046Medium 6.1The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data.sencha · ext jsEPSS67%·Published Jul 5, 2018
- CVE-2018-12465High 7.2An OS command injection vulnerability in the web administration component of Micro Focus Secure Messaging Gateway (SMG) allows a remote attacker authenticated as a privileged user to execute arbitrary OS commands on the SMG server.microfocus · secure messaging gatewayEPSS80%2 exploitsPublished Jun 29, 2018
- CVE-2018-12464Critical 9.8A SQL injection vulnerability in the web administration and quarantine components of Micro Focus Secure Messaging Gateway allows an unauthenticated remote attacker to execute arbitrary SQL statements against the database.microfocus · secure messaging gatewayEPSS81%2 exploitsPublished Jun 29, 2018
- CVE-2018-12998Medium 6.1A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 allows remote…zohocorp · firewall analyzerEPSS99%2 exploitsPublished Jun 29, 2018
- CVE-2018-12895High 8.8WordPress through 4.9.6 allows Author users to execute arbitrary code by leveraging directory traversal in the wp-admin/post.php thumb parameter, which is passed to the PHP unlink function and can delete the wp-config.php file.wordpress · wordpressEPSS62%1 exploitPublished Jun 26, 2018
- CVE-2018-10594Critical 9.8Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHSIM_5x0, AHSIM_5x1) utilize a fixed-length stack buffer where an unverified length value can be read from the network…deltaww · commgrEPSS69%5 exploitsPublished Jun 26, 2018
- CVE-2018-10662Critical 9.8There is an Exposed Insecure Interface.axis · a1001 firmwareEPSS80%3 exploitsPublished Jun 26, 2018
- CVE-2018-10661Critical 9.8There is a bypass of access control.axis · a1001 firmwareEPSS87%3 exploitsPublished Jun 26, 2018
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-11763 | In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any connection timeout coming to effect. apache · http server | Medium 5.9 | 51% | · | |
| CVE-2018-17281 | There is a stack consumption vulnerability in the res_http_websocket.so module of Asterisk through 13.23.0, 14.7.x through 14.7.7, and 15.x through 15.6.0 and Certified Asterisk through 13.21-cert2. digium · asterisk | High 7.5 | 52% | · | |
| CVE-2018-16283 | The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter. wechat brodcast project · wechat brodcast | Critical 9.8 | 63% | 2 exploits | |
| CVE-2018-17173 | LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail. lg · supersign cms | Critical 9.8 | 56% | 2 exploits | |
| CVE-2018-16833 | Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI. zohocorp · manageengine desktop central | Medium 6.1 | 65% | · | |
| CVE-2018-17283 | Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /oputilsServlet?action=getAPIKey request that can be leveraged against Firewall Analyzer to add an admin user via /api/json/v2/admin/addUser or… zohocorp · manageengine opmanager | High 7.5 | 66% | 1 exploit | |
| CVE-2018-17254 | The JCK Editor component 6.4.4 for Joomla! arkextensions · jck editor | Critical 9.8 | 83% | 4 exploits | |
| CVE-2018-17243 | Global Search in Zoho ManageEngine OpManager before 12.3 123205 allows SQL Injection. zohocorp · manageengine opmanager | Critical 9.8 | 75% | · | |
| CVE-2018-17153 | It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. western digital · my cloud dl2100 | Critical 9.8 | 87% | 1 exploit | |
| CVE-2018-17128 | A Persistent XSS issue was discovered in the Visual Editor in MyBB before 1.8.19 via a Video MyCode. mybb · mybb | Medium 5.4 | 75% | 2 exploits | |
| CVE-2018-16836 | Rubedo through 3.4.0 contains a Directory Traversal vulnerability in the theme component, allowing unauthenticated attackers to read and execute arbitrary files outside of the service root path, as demonstrated by a /theme/default/img/%2e%2e/..//etc/passwd URI. rubedo project · rubedo | Critical 9.8 | 61% | 3 exploits | |
| CVE-2018-16763 | FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. thedaylightstudio · fuel cms | Critical 9.8 | 83% | 6 exploits | |
| CVE-2015-9266 | The web management interface of Ubiquiti airMAX, airFiber, airGateway and EdgeSwitch XP (formerly TOUGHSwitch) allows an unauthenticated attacker to upload and write arbitrary files using directory traversal techniques. ubnt · airos 4 xs2 | Critical 9.8 | 74% | 4 exploits | |
| CVE-2018-16509 | Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction. artifex · ghostscript | High 7.8 | 92% | 3 exploits | |
| CVE-2018-15745 | Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traversal, leading to File Disclosure via a ..%2F in the WEBACCOUNT.CGI RESULTPAGE parameter. argussurveillance · dvr | High 7.5 | 98% | 1 exploit | |
| CVE-2018-12710 | An issue was discovered on D-Link DIR-601 2.02NA devices. dlink · dir-601 firmware | High 8.0 | 77% | 2 exploits | |
| CVE-2018-17207 | Duplicator <= 1.2.41 - Sensitive Information Disclosure leading to Remote Code Execution awesomemotive · duplicator | Critical 9.8 | 60% | 1 exploit | |
| CVE-2018-15877 | The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell metacharacters in the ip parameter of a wp-admin/admin.php?page=plainview_activity_monitor&tab=activity_tools request. plainview activity monitor project · plainview activity monitor | High 8.8 | 77% | 7 exploits | |
| CVE-2018-15473 | OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c. openbsd · openssh | Medium 5.9 | 99% | 6 exploits | |
| CVE-2018-14007 | Citrix XenServer 7.1 and newer allows Directory Traversal. citrix · xenserver | Critical 9.8 | 56% | · | |
| CVE-2018-8397 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka "GDI+ Remote Code Execution Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. microsoft · windows 7 | High 8.8 | 68% | · | |
| CVE-2018-8353 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. microsoft · internet explorer | High 7.5 | 68% | 2 exploits | |
| CVE-2018-15153 | OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/main/daemon_frame.php after modifying the "hylafax_server" global variable in… open-emr · openemr | High 8.8 | 62% | 1 exploit | |
| CVE-2018-5390 | Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service. linux · linux kernel | High 7.5 | 71% | · | |
| CVE-2018-14417 | A command injection vulnerability was found in the web administration console in SoftNAS Cloud before 4.0.3. softnas · cloud | Critical 9.8 | 89% | 2 exploits | |
| CVE-2018-14912 | cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when enable-http-clone=1 is not turned off, as demonstrated by a cgit/cgit.cgi/git/objects/?path=../ request. cgit project · cgit | High 7.5 | 92% | 2 exploits | |
| CVE-2018-14728 | upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter. tecrail · responsive filemanager | Critical 9.8 | 76% | 3 exploits | |
| CVE-2017-15120 | An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference when parsing a specially crafted answer containing a CNAME of a different class than IN. powerdns · recursor | High 7.5 | 51% | · | |
| CVE-2018-5006 | Adobe Experience Manager versions 6.4 and earlier have a Server-Side Request Forgery vulnerability. adobe · experience manager | High 7.5 | 53% | · | |
| CVE-2017-5941 | Code Execution through IIFE in node-serialize node-serialize project · node-serialize | Critical 9.8 | 61% | 3 exploits | |
| CVE-2018-8011 | By specially crafting HTTP requests, the mod_md challenge handler would dereference a NULL pointer and cause the child process to segfault. apache · http server | High 7.5 | 56% | · | |
| CVE-2018-2894 | Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. oracle · weblogic server | Critical 9.8 | 50% | · | |
| CVE-2018-2893 | Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. oracle · weblogic server | Critical 9.8 | 70% | · | |
| CVE-2018-1612 | IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and obtain sensitive information. ibm · qradar security information and event manager | Medium 5.8 | 56% | 2 exploits | |
| CVE-2018-0707 | Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands. qnap · q\'center | High 7.2 | 59% | 5 exploits | |
| CVE-2018-0706 | Exposure of Private Information in QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to access sensitive information. qnap · q\'center | High 8.8 | 48% | 5 exploits | |
| CVE-2016-6563 | Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. dlink · dir-818l\(w\) firmware | Critical 9.8 | 80% | 3 exploits | |
| CVE-2017-9462 | Mercurial has Incorrect Permission Assignment for Critical Resource mercurial · mercurial | High 8.7 | 22% | 1 exploit | |
| CVE-2018-11529 | VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via crafted MKV files. videolan · vlc media player | High 8.0 | 37% | 3 exploits | |
| CVE-2017-16709 | Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated administrators to execute arbitrary code via unspecified vectors. crestron · airmedia am-100 firmware | High 7.2 | 72% | 2 exploits | |
| CVE-2018-8279 | A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. microsoft · chakracore | High 7.5 | 71% | 2 exploits | |
| CVE-2018-4993 | Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an NTLM SSO hash theft vulnerability. adobe · acrobat dc | High 7.5 | 87% | · | |
| CVE-2018-8046 | The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data. sencha · ext js | Medium 6.1 | 67% | · | |
| CVE-2018-12465 | An OS command injection vulnerability in the web administration component of Micro Focus Secure Messaging Gateway (SMG) allows a remote attacker authenticated as a privileged user to execute arbitrary OS commands on the SMG server. microfocus · secure messaging gateway | High 7.2 | 80% | 2 exploits | |
| CVE-2018-12464 | A SQL injection vulnerability in the web administration and quarantine components of Micro Focus Secure Messaging Gateway allows an unauthenticated remote attacker to execute arbitrary SQL statements against the database. microfocus · secure messaging gateway | Critical 9.8 | 81% | 2 exploits | |
| CVE-2018-12998 | A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 allows remote… zohocorp · firewall analyzer | Medium 6.1 | 99% | 2 exploits | |
| CVE-2018-12895 | WordPress through 4.9.6 allows Author users to execute arbitrary code by leveraging directory traversal in the wp-admin/post.php thumb parameter, which is passed to the PHP unlink function and can delete the wp-config.php file. wordpress · wordpress | High 8.8 | 62% | 1 exploit | |
| CVE-2018-10594 | Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHSIM_5x0, AHSIM_5x1) utilize a fixed-length stack buffer where an unverified length value can be read from the network… deltaww · commgr | Critical 9.8 | 69% | 5 exploits | |
| CVE-2018-10662 | There is an Exposed Insecure Interface. axis · a1001 firmware | Critical 9.8 | 80% | 3 exploits | |
| CVE-2018-10661 | There is a bypass of access control. axis · a1001 firmware | Critical 9.8 | 87% | 3 exploits |
Showing 1,951–2,000 of 3,919
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.