Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
3,918 vulnerabilities · highest exploit probability first
- CVE-2018-7584Critical 9.8In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the php_stream_url_wrap_http_ex function in ext/standard/http_fopen_wrapper.c.php · phpEPSS87%2 exploitsPublished Mar 1, 2018
- CVE-2018-7573Critical 9.8A remote FTP server can send 400 characters of 'F' in conjunction with the FTP 220 response code to crash the application; after this overflow, one can run arbitrary code on the victim machine.ftpshell · ftpshell clientEPSS69%5 exploitsPublished Mar 1, 2018
- CVE-2018-6481Critical 9.8A buffer overflow vulnerability in the control protocol of Disk Savvy Enterprise v10.4.18 allows remote attackers to execute arbitrary code by sending a crafted packet to TCP port 9124.flexense · disksavvyEPSS21%5 exploitsPublished Feb 27, 2018
- CVE-2014-3206Critical 9.8Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the auth_name parameter to localhost/backupmgmt/pre_connect_check.php.seagate · blackarmor nas 110 firmwareEPSS51%1 exploitPublished Feb 23, 2018
- CVE-2018-7314Critical 9.8SQL Injection exists in the PrayerCenter 3.0.2 component for Joomla!mlwebtechnologies · prayercenterEPSS58%2 exploitsPublished Feb 22, 2018
- CVE-2018-7297Critical 9.8Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to obtain read/write access and execute system commands on the device.eq-3 · homematic central control unit ccu2 firmwareEPSS64%1 exploitPublished Feb 22, 2018
- CVE-2018-7286Medium 6.5res_pjsip allows remote authenticated users to crash Asterisk (segmentation fault) by sending a number of SIP INVITE messages on a TCP or TLS connection and then suddenly closing the connection.digium · asteriskEPSS53%2 exploitsPublished Feb 21, 2018
- CVE-2018-7284High 7.5A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2.digium · asteriskEPSS66%2 exploitsPublished Feb 21, 2018
- CVE-2018-5378Medium 5.9The Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent with a NOTIFY to a peer, if an attribute length is invalid.quagga · quaggaEPSS74%·Published Feb 19, 2018
- CVE-2017-14535High 8.8trixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php.netfortris · trixboxEPSS50%3 exploitsPublished Feb 16, 2018
- CVE-2017-5817Critical 9.8A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.hp · intelligent management centerEPSS83%5 exploitsPublished Feb 15, 2018
- CVE-2017-5816Critical 9.8A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.hp · intelligent management centerEPSS86%5 exploitsPublished Feb 15, 2018
- CVE-2017-12557Critical 9.8A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and earlier was found.hp · intelligent management centerEPSS80%3 exploitsPublished Feb 15, 2018
- CVE-2017-12542Critical 10.0A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found.hp · integrated lights-out 4 firmwareEPSS99%2 exploitsPublished Feb 15, 2018
- CVE-2018-0840High 7.5Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to…microsoft · edgeEPSS53%2 exploitsPublished Feb 14, 2018
- CVE-2018-6892Critical 9.8An unauthenticated remote attacker that can connect to the "CloudMe Sync" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition.cloudme · syncEPSS93%9 exploitsPublished Feb 11, 2018
- CVE-2018-1000049High 7.5Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner API.nanopool · claymore dual minerEPSS77%3 exploitsPublished Feb 9, 2018
- CVE-2018-3604High 8.8GetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.trendmicro · control managerEPSS68%·Published Feb 9, 2018
- CVE-2018-1161Critical 9.8This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13.quest · netvault backupEPSS67%·Published Feb 8, 2018
- CVE-2018-0127Critical 9.8A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to view configuration parameters for an affected device, which could lead to the disclosure of…cisco · rv132w firmwareEPSS78%·Published Feb 8, 2018
- CVE-2018-6389High 7.5In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registered .js files (from wp-includes/script-loader.php) to construct a series of requests to load every file many times.wordpress · wordpressEPSS73%3 exploitsPublished Feb 6, 2018
- CVE-2018-6605Critical 9.8SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla!zh baidumap project · zh baidumapEPSS58%2 exploitsPublished Feb 5, 2018
- CVE-2018-6377Medium 6.1In Joomla!joomla · joomla\!EPSS57%·Published Jan 30, 2018
- CVE-2018-0101Critical 10.0A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code.cisco · firepower threat defenseEPSS87%2 exploitsPublished Jan 29, 2018
- CVE-2017-13696Critical 9.8A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze Enterprise 9.9.16, and Disk Pulse Enterprise 9.9.16 where an attacker can craft a malicious GET request and exploit the web server component.flexense · diskpulseEPSS79%7 exploitsPublished Jan 24, 2018
- CVE-2017-2741Critical 9.8A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D.hp · d3q15a firmwareEPSS85%3 exploitsPublished Jan 23, 2018
- CVE-2018-1000006High 8.8Remote Code Execution in electronatom · electronEPSS84%2 exploitsPublished Jan 23, 2018
- CVE-2017-18048High 8.8Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php (lowercase) is blocked but .PHP (uppercase) is not.monstra · monstraEPSS63%2 exploitsPublished Jan 23, 2018
- CVE-2017-16603High 8.8This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.netgain-systems · enterprise managerEPSS54%·Published Jan 22, 2018
- CVE-2017-16597Critical 9.8This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.netgain-systems · enterprise managerEPSS57%·Published Jan 22, 2018
- CVE-2018-6000Critical 9.8The do_vpnupload_post function in router/httpd/web.c in vpnupload.cgi provides functionality for setting NVRAM configuration values, which allows attackers to set the admin password and launch an SSH daemon (or enable infosvr command mode), and consequently obtain remote…asus · asuswrtEPSS85%5 exploitsPublished Jan 22, 2018
- CVE-2018-5999Critical 9.8In the handle_request function in router/httpd/httpd.c, processing of POST requests continues even if authentication fails.asus · asuswrtEPSS88%5 exploitsPublished Jan 22, 2018
- CVE-2016-10709High 8.8pfSense before 2.3 allows remote authenticated users to execute arbitrary OS commands via a '|' character in the status_rrd_graph_img.php graph parameter, related to _rrd_graph_img.php.pfsense · pfsenseEPSS34%3 exploitsPublished Jan 22, 2018
- CVE-2018-5955Critical 9.8User controlled input is not sufficiently filtered, allowing an unauthenticated attacker to add a user to the server via the username and password fields to the rest/user/ URI.smartmobilesoftware · gitstackEPSS81%4 exploitsPublished Jan 21, 2018
- CVE-2017-12635Critical 9.8couchdb - security updateapache · couchdbEPSS100%3 exploitsPublished Jan 21, 2018
- CVE-2017-12636High 7.2couchdb - security updateapache · couchdbEPSS91%3 exploitsPublished Jan 21, 2018
- CVE-2017-18044Critical 9.8A Command Injection issue was discovered in ContentStore/Base/CVDataPipe.dll in Commvault before v11 SP6.commvault · commvaultEPSS70%2 exploitsPublished Jan 19, 2018
- CVE-2018-5712Medium 6.1There is Reflected XSS on the PHAR 404 error page via the URI of a request for a .phar file.php · phpEPSS80%·Published Jan 16, 2018
- CVE-2018-5347Critical 9.8Seagate Media Server in Seagate Personal Cloud has unauthenticated command injection in the uploadTelemetry and getLogs functions in views.py because .psp URLs are handled by the fastcgi.server component and shell metacharacters are mishandled.seagate · personal cloud firmwareEPSS54%2 exploitsPublished Jan 11, 2018
- CVE-2017-16666High 8.8Xplico before 1.2.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the name of an uploaded PCAP file.xplico · xplicoEPSS81%4 exploitsPublished Jan 5, 2018
- CVE-2017-16720Critical 9.8A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier.advantech · webaccessEPSS50%2 exploitsPublished Jan 5, 2018
- CVE-2014-7862Critical 9.8The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action.zohocorp · desktop centralEPSS81%1 exploitPublished Jan 4, 2018
- CVE-2017-5715Medium 5.6Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.EPSS74%3 exploitsPublished Jan 4, 2018
- CVE-2018-0780Medium 5.3Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure…microsoft · edgeEPSS59%2 exploitsPublished Jan 4, 2018
- CVE-2018-0777High 7.5Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS78%2 exploitsPublished Jan 4, 2018
- CVE-2018-0776High 7.5Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS78%2 exploitsPublished Jan 4, 2018
- CVE-2018-0775High 7.5Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS68%2 exploitsPublished Jan 4, 2018
- CVE-2018-0774High 7.5Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS68%2 exploitsPublished Jan 4, 2018
- CVE-2018-0770High 7.5Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS78%2 exploitsPublished Jan 4, 2018
- CVE-2018-0769High 7.5Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".microsoft · edgeEPSS79%2 exploitsPublished Jan 4, 2018
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-7584 | In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the php_stream_url_wrap_http_ex function in ext/standard/http_fopen_wrapper.c. php · php | Critical 9.8 | 87% | 2 exploits | |
| CVE-2018-7573 | A remote FTP server can send 400 characters of 'F' in conjunction with the FTP 220 response code to crash the application; after this overflow, one can run arbitrary code on the victim machine. ftpshell · ftpshell client | Critical 9.8 | 69% | 5 exploits | |
| CVE-2018-6481 | A buffer overflow vulnerability in the control protocol of Disk Savvy Enterprise v10.4.18 allows remote attackers to execute arbitrary code by sending a crafted packet to TCP port 9124. flexense · disksavvy | Critical 9.8 | 21% | 5 exploits | |
| CVE-2014-3206 | Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the auth_name parameter to localhost/backupmgmt/pre_connect_check.php. seagate · blackarmor nas 110 firmware | Critical 9.8 | 51% | 1 exploit | |
| CVE-2018-7314 | SQL Injection exists in the PrayerCenter 3.0.2 component for Joomla! mlwebtechnologies · prayercenter | Critical 9.8 | 58% | 2 exploits | |
| CVE-2018-7297 | Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to obtain read/write access and execute system commands on the device. eq-3 · homematic central control unit ccu2 firmware | Critical 9.8 | 64% | 1 exploit | |
| CVE-2018-7286 | res_pjsip allows remote authenticated users to crash Asterisk (segmentation fault) by sending a number of SIP INVITE messages on a TCP or TLS connection and then suddenly closing the connection. digium · asterisk | Medium 6.5 | 53% | 2 exploits | |
| CVE-2018-7284 | A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2. digium · asterisk | High 7.5 | 66% | 2 exploits | |
| CVE-2018-5378 | The Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent with a NOTIFY to a peer, if an attribute length is invalid. quagga · quagga | Medium 5.9 | 74% | · | |
| CVE-2017-14535 | trixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php. netfortris · trixbox | High 8.8 | 50% | 3 exploits | |
| CVE-2017-5817 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. hp · intelligent management center | Critical 9.8 | 83% | 5 exploits | |
| CVE-2017-5816 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. hp · intelligent management center | Critical 9.8 | 86% | 5 exploits | |
| CVE-2017-12557 | A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and earlier was found. hp · intelligent management center | Critical 9.8 | 80% | 3 exploits | |
| CVE-2017-12542 | A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found. hp · integrated lights-out 4 firmware | Critical 10.0 | 99% | 2 exploits | |
| CVE-2018-0840 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to… microsoft · edge | High 7.5 | 53% | 2 exploits | |
| CVE-2018-6892 | An unauthenticated remote attacker that can connect to the "CloudMe Sync" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition. cloudme · sync | Critical 9.8 | 93% | 9 exploits | |
| CVE-2018-1000049 | Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner API. nanopool · claymore dual miner | High 7.5 | 77% | 3 exploits | |
| CVE-2018-3604 | GetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations. trendmicro · control manager | High 8.8 | 68% | · | |
| CVE-2018-1161 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13. quest · netvault backup | Critical 9.8 | 67% | · | |
| CVE-2018-0127 | A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to view configuration parameters for an affected device, which could lead to the disclosure of… cisco · rv132w firmware | Critical 9.8 | 78% | · | |
| CVE-2018-6389 | In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registered .js files (from wp-includes/script-loader.php) to construct a series of requests to load every file many times. wordpress · wordpress | High 7.5 | 73% | 3 exploits | |
| CVE-2018-6605 | SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! zh baidumap project · zh baidumap | Critical 9.8 | 58% | 2 exploits | |
| CVE-2018-6377 | In Joomla! joomla · joomla\! | Medium 6.1 | 57% | · | |
| CVE-2018-0101 | A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. cisco · firepower threat defense | Critical 10.0 | 87% | 2 exploits | |
| CVE-2017-13696 | A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze Enterprise 9.9.16, and Disk Pulse Enterprise 9.9.16 where an attacker can craft a malicious GET request and exploit the web server component. flexense · diskpulse | Critical 9.8 | 79% | 7 exploits | |
| CVE-2017-2741 | A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. hp · d3q15a firmware | Critical 9.8 | 85% | 3 exploits | |
| CVE-2018-1000006 | Remote Code Execution in electron atom · electron | High 8.8 | 84% | 2 exploits | |
| CVE-2017-18048 | Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php (lowercase) is blocked but .PHP (uppercase) is not. monstra · monstra | High 8.8 | 63% | 2 exploits | |
| CVE-2017-16603 | This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. netgain-systems · enterprise manager | High 8.8 | 54% | · | |
| CVE-2017-16597 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. netgain-systems · enterprise manager | Critical 9.8 | 57% | · | |
| CVE-2018-6000 | The do_vpnupload_post function in router/httpd/web.c in vpnupload.cgi provides functionality for setting NVRAM configuration values, which allows attackers to set the admin password and launch an SSH daemon (or enable infosvr command mode), and consequently obtain remote… asus · asuswrt | Critical 9.8 | 85% | 5 exploits | |
| CVE-2018-5999 | In the handle_request function in router/httpd/httpd.c, processing of POST requests continues even if authentication fails. asus · asuswrt | Critical 9.8 | 88% | 5 exploits | |
| CVE-2016-10709 | pfSense before 2.3 allows remote authenticated users to execute arbitrary OS commands via a '|' character in the status_rrd_graph_img.php graph parameter, related to _rrd_graph_img.php. pfsense · pfsense | High 8.8 | 34% | 3 exploits | |
| CVE-2018-5955 | User controlled input is not sufficiently filtered, allowing an unauthenticated attacker to add a user to the server via the username and password fields to the rest/user/ URI. smartmobilesoftware · gitstack | Critical 9.8 | 81% | 4 exploits | |
| CVE-2017-12635 | couchdb - security update apache · couchdb | Critical 9.8 | 100% | 3 exploits | |
| CVE-2017-12636 | couchdb - security update apache · couchdb | High 7.2 | 91% | 3 exploits | |
| CVE-2017-18044 | A Command Injection issue was discovered in ContentStore/Base/CVDataPipe.dll in Commvault before v11 SP6. commvault · commvault | Critical 9.8 | 70% | 2 exploits | |
| CVE-2018-5712 | There is Reflected XSS on the PHAR 404 error page via the URI of a request for a .phar file. php · php | Medium 6.1 | 80% | · | |
| CVE-2018-5347 | Seagate Media Server in Seagate Personal Cloud has unauthenticated command injection in the uploadTelemetry and getLogs functions in views.py because .psp URLs are handled by the fastcgi.server component and shell metacharacters are mishandled. seagate · personal cloud firmware | Critical 9.8 | 54% | 2 exploits | |
| CVE-2017-16666 | Xplico before 1.2.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the name of an uploaded PCAP file. xplico · xplico | High 8.8 | 81% | 4 exploits | |
| CVE-2017-16720 | A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. advantech · webaccess | Critical 9.8 | 50% | 2 exploits | |
| CVE-2014-7862 | The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action. zohocorp · desktop central | Critical 9.8 | 81% | 1 exploit | |
| CVE-2017-5715 | Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. | Medium 5.6 | 74% | 3 exploits | |
| CVE-2018-0780 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure… microsoft · edge | Medium 5.3 | 59% | 2 exploits | |
| CVE-2018-0777 | Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 78% | 2 exploits | |
| CVE-2018-0776 | Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 78% | 2 exploits | |
| CVE-2018-0775 | Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 68% | 2 exploits | |
| CVE-2018-0774 | Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 68% | 2 exploits | |
| CVE-2018-0770 | Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 78% | 2 exploits | |
| CVE-2018-0769 | Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 79% | 2 exploits |
Showing 2,051–2,100 of 3,918
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.