Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
3,918 vulnerabilities · highest exploit probability first
- CVE-2015-7297High 7.5SQL injection vulnerability in Joomla!joomla · joomla\!EPSS100%2 exploitsPublished Oct 29, 2015
- CVE-2015-7007High 7.5Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement for AppleScript execution via unspecified vectors.apple · mac os xEPSS53%2 exploitsPublished Oct 23, 2015
- CVE-2015-6058Medium 4.3Microsoft Edge mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection mechanism via unspecified vectors, aka "Microsoft Edge XSS Filter Bypass."microsoft · edgeEPSS70%·Published Oct 13, 2015
- CVE-2015-2342Critical 10.0The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol.vmware · vcenter serverEPSS89%2 exploitsPublished Oct 12, 2015
- CVE-2015-7768High 7.5Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD command.konicaminolta · ftp utilityEPSS63%6 exploitsPublished Oct 9, 2015
- CVE-2015-7766Critical 9.0PGSQL:SubmitQuery.do in ZOHO ManageEngine OpManager 11.6, 11.5, and earlier allows remote administrators to bypass SQL query restrictions via a comment in the query to api/json/admin/SubmitQuery, as demonstrated by "INSERT//INTO."zohocorp · manageengine opmanagerEPSS81%4 exploitsPublished Oct 9, 2015
- CVE-2015-7765Critical 9.0ZOHO ManageEngine OpManager 11.5 build 11600 and earlier uses a hardcoded password of "plugin" for the IntegrationUser account, which allows remote authenticated users to obtain administrator access by leveraging knowledge of this password.zohocorp · manageengine opmanagerEPSS67%4 exploitsPublished Oct 9, 2015
- CVE-2015-7709Critical 10.0The arkeiad daemon in the Arkeia Backup Agent in Western Digital Arkeia 11.0.12 and earlier allows remote attackers to bypass authentication and execute arbitrary commands via a series of crafted requests involving the ARKFS_EXEC_CMD operation.arkeia · western digital arkeiaEPSS79%4 exploitsPublished Oct 5, 2015
- CVE-2015-1538Critical 10.0Stagefright — Android libstagefright remote code executiongoogle · androidEPSS99%1 exploitPublished Oct 1, 2015
- CVE-2015-3864Critical 10.0Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted MPEG-4 data, aka internal bug 23034759.google · androidEPSS87%4 exploitsPublished Sep 30, 2015
- CVE-2015-3829Critical 10.0Off-by-one error in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption) via crafted MPEG-4 covr…google · androidEPSS90%·Published Sep 30, 2015
- CVE-2015-3828Critical 10.0The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not enforce a minimum size for UTF-16 strings containing a Byte Order Mark (BOM), which allows remote attackers to execute arbitrary code or cause a denial…google · androidEPSS85%·Published Sep 30, 2015
- CVE-2015-3827Critical 9.3The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not validate the relationship between chunk sizes and skip sizes, which allows remote attackers to execute arbitrary code or cause a denial of service (integer…google · androidEPSS81%·Published Sep 30, 2015
- CVE-2015-3826Medium 5.0The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not enforce a minimum size for UTF-16 strings containing a Byte Order Mark (BOM), which allows remote attackers to cause a denial of service (integer…google · androidEPSS74%·Published Sep 30, 2015
- CVE-2015-3824Critical 10.0The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly restrict size addition, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption)…google · androidEPSS90%·Published Sep 30, 2015
- CVE-2015-1539Critical 10.0Multiple integer underflows in the ESDS::parseESDescriptor function in ESDS.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code via crafted ESDS atoms, aka internal bug 20139950, a related issue to CVE-2015-4493.google · androidEPSS86%·Published Sep 30, 2015
- CVE-2015-7603High 7.8Directory traversal vulnerability in Konica Minolta FTP Utility 1.0 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in a RETR command.konicaminolta · ftp utilityEPSS61%2 exploitsPublished Sep 29, 2015
- CVE-2015-7602High 7.8Directory traversal vulnerability in BisonWare BisonFTP 3.5 allows remote attackers to read arbitrary files via a ../ (dot dot slash) in a RETR command.bisonware · bisonftpEPSS62%3 exploitsPublished Sep 29, 2015
- CVE-2015-7601High 7.8Directory traversal vulnerability in PCMan's FTP Server 2.0.7 allows remote attackers to read arbitrary files via a ..// (dot dot double slash) in a RETR command.pcman · ftp serverEPSS59%2 exploitsPublished Sep 29, 2015
- CVE-2015-7387High 7.5ZOHO ManageEngine EventLog Analyzer 10.6 build 10060 and earlier allows remote attackers to bypass intended restrictions and execute arbitrary SQL commands via an allowed query followed by a disallowed one in the query parameter to event/runQuery.do, as demonstrated by "SELECT…zohocorp · manageengine eventlog analyzerEPSS80%7 exploitsPublished Sep 28, 2015
- CVE-2015-5082Critical 10.0Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NEW_PASSWORD_1 or (2) NEW_PASSWORD_2 parameter to cgi-bin/chpasswd.cgi.endian firewall · endian firewallEPSS70%8 exploitsPublished Sep 28, 2015
- CVE-2015-7309Medium 6.5The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, which allows remote authenticated users to execute arbitrary code by renaming a crafted file and then directly accessing it.boltcms · boltEPSS39%4 exploitsPublished Sep 22, 2015
- CVE-2015-5603Medium 6.5The HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java code via unspecified vectors, related to "Velocity Template Injection Vulnerability."atlassian · hipchatEPSS59%3 exploitsPublished Sep 21, 2015
- CVE-2015-7243High 7.5Buffer overflow in Boxoft WAV to MP3 Converter allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted WAV file.boxoft · boxoft wav to mp3 converterEPSS58%6 exploitsPublished Sep 18, 2015
- CVE-2015-6973Medium 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to hijack the authentication of administrators for requests that (1) change a password via a crafted request to user-password.jsp, (2) add users via a crafted…igniterealtime · openfireEPSS65%2 exploitsPublished Sep 16, 2015
- CVE-2015-6967Medium 6.5Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in…nibbleblog · nibbleblogEPSS49%3 exploitsPublished Sep 16, 2015
- CVE-2015-2509Critical 9.3Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted Media Center link (mcl) file, aka "Windows Media Center RCE Vulnerability."microsoft · windows 7EPSS71%4 exploitsPublished Sep 8, 2015
- CVE-2015-1171Critical 10.0Stack-based buffer overflow in GSM SIM Utility (aka SIM Card Editor) 6.6 allows remote attackers to execute arbitrary code via a long entry in a .sms file.gsm · sim card editorEPSS63%3 exploitsPublished Aug 28, 2015
- CVE-2015-5560Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS66%1 exploitPublished Aug 12, 2015
- CVE-2015-5133Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS51%1 exploitPublished Aug 12, 2015
- CVE-2015-5132Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS51%1 exploitPublished Aug 12, 2015
- CVE-2015-5131Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS51%1 exploitPublished Aug 12, 2015
- CVE-2015-5134Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS50%1 exploitPublished Aug 12, 2015
- CVE-2015-5130Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS50%1 exploitPublished Aug 12, 2015
- CVE-2015-5127Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS50%1 exploitPublished Aug 12, 2015
- CVE-2015-6835Critical 9.8php: use-after-free vulnerability in session deserializerphp · phpEPSS36%2 exploitsPublished Aug 9, 2015
- CVE-2015-6522Critical 9.8WP Symposium <= 15.8 - Unauthenticated SQL Injectionwpsymposium · wp symposiumEPSS74%2 exploitsPublished Aug 8, 2015
- CVE-2015-1489High 8.5The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to gain privileges via unspecified vectors.symantec · endpoint protection managerEPSS25%2 exploitsPublished Jul 31, 2015
- CVE-2015-1487Medium 5.5The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to write to arbitrary files, and consequently obtain administrator privileges, via a crafted filename.symantec · endpoint protection managerEPSS52%2 exploitsPublished Jul 31, 2015
- CVE-2015-1486High 7.5The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers to bypass authentication via a crafted password-reset action that triggers a new administrative session.symantec · endpoint protection managerEPSS68%2 exploitsPublished Jul 31, 2015
- CVE-2015-3183Low 3.7The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remote attackers to conduct HTTP request smuggling attacks via a crafted request, related to mishandling of large chunk-size values and invalid…apache · http serverEPSS73%·Published Jul 20, 2015
- CVE-2015-5374High 7.8Specially crafted packets sent to port 50000/UDP could cause a denial-of-service of the affected device.siemens · siprotec firmwareEPSS74%1 exploitPublished Jul 18, 2015
- CVE-2015-1793Medium 6.5The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote attackers to spoof a Certification…openssl · opensslEPSS58%1 exploitPublished Jul 9, 2015
- CVE-2015-5453Medium 6.5Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the id parameter to ADMIN/mailqueue.spl.watchguard · xcsEPSS58%5 exploitsPublished Jul 8, 2015
- CVE-2015-5371Critical 10.0The AuthenticationFilter class in SolarWinds Storage Manager allows remote attackers to upload and execute arbitrary scripts via unspecified vectors.solarwinds · storage managerEPSS93%1 exploitPublished Jul 6, 2015
- CVE-2015-2797Critical 10.0Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the redirect parameter to cgi-bin/login.airties · air firmwareEPSS78%5 exploitsPublished Jun 19, 2015
- CVE-2015-1789High 7.5The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted length field in…openssl · opensslEPSS76%·Published Jun 12, 2015
- CVE-2015-3105Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-11adobe · airEPSS90%2 exploitsPublished Jun 9, 2015
- CVE-2015-2997Medium 5.0SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an invalid value in the accountid parameter to getAgentLogFile, as demonstrated by a large directory traversal sequence, which reveals the installation path in an error message.sysaid · sysaidEPSS57%2 exploitsPublished Jun 8, 2015
- CVE-2015-2996High 8.5Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitrary files via a ..sysaid · sysaidEPSS87%2 exploitsPublished Jun 8, 2015
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2015-7297 | SQL injection vulnerability in Joomla! joomla · joomla\! | High 7.5 | 100% | 2 exploits | |
| CVE-2015-7007 | Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement for AppleScript execution via unspecified vectors. apple · mac os x | High 7.5 | 53% | 2 exploits | |
| CVE-2015-6058 | Microsoft Edge mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection mechanism via unspecified vectors, aka "Microsoft Edge XSS Filter Bypass." microsoft · edge | Medium 4.3 | 70% | · | |
| CVE-2015-2342 | The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol. vmware · vcenter server | Critical 10.0 | 89% | 2 exploits | |
| CVE-2015-7768 | Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD command. konicaminolta · ftp utility | High 7.5 | 63% | 6 exploits | |
| CVE-2015-7766 | PGSQL:SubmitQuery.do in ZOHO ManageEngine OpManager 11.6, 11.5, and earlier allows remote administrators to bypass SQL query restrictions via a comment in the query to api/json/admin/SubmitQuery, as demonstrated by "INSERT//INTO." zohocorp · manageengine opmanager | Critical 9.0 | 81% | 4 exploits | |
| CVE-2015-7765 | ZOHO ManageEngine OpManager 11.5 build 11600 and earlier uses a hardcoded password of "plugin" for the IntegrationUser account, which allows remote authenticated users to obtain administrator access by leveraging knowledge of this password. zohocorp · manageengine opmanager | Critical 9.0 | 67% | 4 exploits | |
| CVE-2015-7709 | The arkeiad daemon in the Arkeia Backup Agent in Western Digital Arkeia 11.0.12 and earlier allows remote attackers to bypass authentication and execute arbitrary commands via a series of crafted requests involving the ARKFS_EXEC_CMD operation. arkeia · western digital arkeia | Critical 10.0 | 79% | 4 exploits | |
| CVE-2015-1538 | Stagefright — Android libstagefright remote code execution google · android | Critical 10.0 | 99% | 1 exploit | |
| CVE-2015-3864 | Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted MPEG-4 data, aka internal bug 23034759. google · android | Critical 10.0 | 87% | 4 exploits | |
| CVE-2015-3829 | Off-by-one error in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption) via crafted MPEG-4 covr… google · android | Critical 10.0 | 90% | · | |
| CVE-2015-3828 | The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not enforce a minimum size for UTF-16 strings containing a Byte Order Mark (BOM), which allows remote attackers to execute arbitrary code or cause a denial… google · android | Critical 10.0 | 85% | · | |
| CVE-2015-3827 | The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not validate the relationship between chunk sizes and skip sizes, which allows remote attackers to execute arbitrary code or cause a denial of service (integer… google · android | Critical 9.3 | 81% | · | |
| CVE-2015-3826 | The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not enforce a minimum size for UTF-16 strings containing a Byte Order Mark (BOM), which allows remote attackers to cause a denial of service (integer… google · android | Medium 5.0 | 74% | · | |
| CVE-2015-3824 | The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly restrict size addition, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption)… google · android | Critical 10.0 | 90% | · | |
| CVE-2015-1539 | Multiple integer underflows in the ESDS::parseESDescriptor function in ESDS.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code via crafted ESDS atoms, aka internal bug 20139950, a related issue to CVE-2015-4493. google · android | Critical 10.0 | 86% | · | |
| CVE-2015-7603 | Directory traversal vulnerability in Konica Minolta FTP Utility 1.0 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in a RETR command. konicaminolta · ftp utility | High 7.8 | 61% | 2 exploits | |
| CVE-2015-7602 | Directory traversal vulnerability in BisonWare BisonFTP 3.5 allows remote attackers to read arbitrary files via a ../ (dot dot slash) in a RETR command. bisonware · bisonftp | High 7.8 | 62% | 3 exploits | |
| CVE-2015-7601 | Directory traversal vulnerability in PCMan's FTP Server 2.0.7 allows remote attackers to read arbitrary files via a ..// (dot dot double slash) in a RETR command. pcman · ftp server | High 7.8 | 59% | 2 exploits | |
| CVE-2015-7387 | ZOHO ManageEngine EventLog Analyzer 10.6 build 10060 and earlier allows remote attackers to bypass intended restrictions and execute arbitrary SQL commands via an allowed query followed by a disallowed one in the query parameter to event/runQuery.do, as demonstrated by "SELECT… zohocorp · manageengine eventlog analyzer | High 7.5 | 80% | 7 exploits | |
| CVE-2015-5082 | Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NEW_PASSWORD_1 or (2) NEW_PASSWORD_2 parameter to cgi-bin/chpasswd.cgi. endian firewall · endian firewall | Critical 10.0 | 70% | 8 exploits | |
| CVE-2015-7309 | The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, which allows remote authenticated users to execute arbitrary code by renaming a crafted file and then directly accessing it. boltcms · bolt | Medium 6.5 | 39% | 4 exploits | |
| CVE-2015-5603 | The HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java code via unspecified vectors, related to "Velocity Template Injection Vulnerability." atlassian · hipchat | Medium 6.5 | 59% | 3 exploits | |
| CVE-2015-7243 | Buffer overflow in Boxoft WAV to MP3 Converter allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted WAV file. boxoft · boxoft wav to mp3 converter | High 7.5 | 58% | 6 exploits | |
| CVE-2015-6973 | Multiple cross-site request forgery (CSRF) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to hijack the authentication of administrators for requests that (1) change a password via a crafted request to user-password.jsp, (2) add users via a crafted… igniterealtime · openfire | Medium 6.8 | 65% | 2 exploits | |
| CVE-2015-6967 | Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in… nibbleblog · nibbleblog | Medium 6.5 | 49% | 3 exploits | |
| CVE-2015-2509 | Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted Media Center link (mcl) file, aka "Windows Media Center RCE Vulnerability." microsoft · windows 7 | Critical 9.3 | 71% | 4 exploits | |
| CVE-2015-1171 | Stack-based buffer overflow in GSM SIM Utility (aka SIM Card Editor) 6.6 allows remote attackers to execute arbitrary code via a long entry in a .sms file. gsm · sim card editor | Critical 10.0 | 63% | 3 exploits | |
| CVE-2015-5560 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 66% | 1 exploit | |
| CVE-2015-5133 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 51% | 1 exploit | |
| CVE-2015-5132 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 51% | 1 exploit | |
| CVE-2015-5131 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 51% | 1 exploit | |
| CVE-2015-5134 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 50% | 1 exploit | |
| CVE-2015-5130 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 50% | 1 exploit | |
| CVE-2015-5127 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 50% | 1 exploit | |
| CVE-2015-6835 | php: use-after-free vulnerability in session deserializer php · php | Critical 9.8 | 36% | 2 exploits | |
| CVE-2015-6522 | WP Symposium <= 15.8 - Unauthenticated SQL Injection wpsymposium · wp symposium | Critical 9.8 | 74% | 2 exploits | |
| CVE-2015-1489 | The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to gain privileges via unspecified vectors. symantec · endpoint protection manager | High 8.5 | 25% | 2 exploits | |
| CVE-2015-1487 | The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to write to arbitrary files, and consequently obtain administrator privileges, via a crafted filename. symantec · endpoint protection manager | Medium 5.5 | 52% | 2 exploits | |
| CVE-2015-1486 | The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers to bypass authentication via a crafted password-reset action that triggers a new administrative session. symantec · endpoint protection manager | High 7.5 | 68% | 2 exploits | |
| CVE-2015-3183 | The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remote attackers to conduct HTTP request smuggling attacks via a crafted request, related to mishandling of large chunk-size values and invalid… apache · http server | Low 3.7 | 73% | · | |
| CVE-2015-5374 | Specially crafted packets sent to port 50000/UDP could cause a denial-of-service of the affected device. siemens · siprotec firmware | High 7.8 | 74% | 1 exploit | |
| CVE-2015-1793 | The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote attackers to spoof a Certification… openssl · openssl | Medium 6.5 | 58% | 1 exploit | |
| CVE-2015-5453 | Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the id parameter to ADMIN/mailqueue.spl. watchguard · xcs | Medium 6.5 | 58% | 5 exploits | |
| CVE-2015-5371 | The AuthenticationFilter class in SolarWinds Storage Manager allows remote attackers to upload and execute arbitrary scripts via unspecified vectors. solarwinds · storage manager | Critical 10.0 | 93% | 1 exploit | |
| CVE-2015-2797 | Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the redirect parameter to cgi-bin/login. airties · air firmware | Critical 10.0 | 78% | 5 exploits | |
| CVE-2015-1789 | The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted length field in… openssl · openssl | High 7.5 | 76% | · | |
| CVE-2015-3105 | flash-plugin: multiple code execution issues fixed in APSB15-11 adobe · air | Critical 10.0 | 90% | 2 exploits | |
| CVE-2015-2997 | SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an invalid value in the accountid parameter to getAgentLogFile, as demonstrated by a large directory traversal sequence, which reveals the installation path in an error message. sysaid · sysaid | Medium 5.0 | 57% | 2 exploits | |
| CVE-2015-2996 | Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitrary files via a .. sysaid · sysaid | High 8.5 | 87% | 2 exploits |
Showing 2,401–2,450 of 3,918
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.