Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 19, 2026
1,642 vulnerabilities · highest exploit probability first
- CVE-2023-3368Critical 9.8Command injection in /main/webservices/additional_webservices.php in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to obtain remote code execution via improper neutralisation of special characters.chamilo · chamiloEPSS70%·Published Nov 28, 2023
- CVE-2023-6329Critical 9.8An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0.controlid · idsecureEPSS65%·Published Nov 27, 2023
- CVE-2023-5652Critical 9.8The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not escape user input before using it in a SQL statement of a function hooked to admin_init, allowing unauthenticated users to perform SQL injectionsthimpress · wp hotel bookingEPSS64%·Published Nov 20, 2023
- CVE-2023-43177Critical 9.8CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes.crushftp · crushftpEPSS82%1 exploitPublished Nov 17, 2023
- CVE-2023-6019Critical 9.8Ray OS Command Injection vulnerabilityray project · rayEPSS75%2 exploitsPublished Nov 16, 2023
- CVE-2023-44353Critical 9.8Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution.adobe · coldfusionEPSS80%·Published Nov 15, 2023
- CVE-2023-44350Critical 9.8Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution.adobe · coldfusionEPSS65%·Published Nov 15, 2023
- CVE-2023-44351Critical 9.8Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution.adobe · coldfusionEPSS50%·Published Nov 15, 2023
- CVE-2023-45878Critical 9.8GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubrics_visualise_saveAjax.phps does not require authentication.gibbonedu · gibbonEPSS63%·Published Nov 14, 2023
- CVE-2023-46731Critical 9.8XWiki Platform vulnerable to remote code execution through the section parameter in Administration as guestxwiki · xwikiEPSS89%1 exploitPublished Nov 8, 2023
- CVE-2023-5360Critical 9.8Royal Elementor Addons and Templates <= 1.3.78 - Unauthenticated Arbitrary File Uploadroyal-elementor-addons · royal elementor addonsEPSS86%2 exploitsPublished Nov 1, 2023
- CVE-2023-5830Critical 9.8A vulnerability classified as critical has been found in ColumbiaSoft Document Locator.documentlocator · document locatorEPSS61%·Published Oct 27, 2023
- CVE-2023-45498Critical 9.8VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain a command injection vulnerability.vinchin · vinchin backup and recoveryEPSS20%1 exploitPublished Oct 27, 2023
- CVE-2023-43795Critical 9.8WPS Server Side Request Forgery vulnerabilityosgeo · geoserverEPSS68%·Published Oct 26, 2023
- CVE-2023-46574Critical 9.8An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the FileName parameter of the UploadFirmwareFile function.totolink · a3700r firmwareEPSS65%1 exploitPublished Oct 25, 2023
- CVE-2023-5684Critical 9.8It has been declared as critical.byzoro · smart s85f firmwareEPSS78%1 exploitPublished Oct 21, 2023
- CVE-2023-45138Critical 9.6XWiki Change Request Application UI XSS and remote code execution through change request titlexwiki · change requestEPSS72%·Published Oct 17, 2023
- CVE-2023-34992Critical 9.8A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to execute unauthorized code or commands via crafted API requests.fortinet · fortisiemEPSS82%Ransomware1 actorPublished Oct 11, 2023
- CVE-2023-32645Critical 9.8A leftover debug code vulnerability exists in the httpd debug credentials functionality of Yifan YF325 v1.0_20221108.yifanwireless · yf325 firmwareEPSS55%·Published Oct 11, 2023
- CVE-2023-30806Critical 9.8The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability.sangfor · next-gen application firewallEPSS65%·Published Oct 10, 2023
- CVE-2023-30805Critical 9.8The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability.sangfor · next-gen application firewallEPSS65%·Published Oct 10, 2023
- CVE-2023-43654Critical 9.8TorchServe Server-Side Request Forgery vulnerabilitypytorch · torchserveEPSS42%1 exploitPublished Oct 2, 2023
- CVE-2023-5222Critical 9.8A vulnerability classified as critical was found in Viessmann Vitogate 300 up to 2.1.3.0.viessmann · vitogate 300 firmwareEPSS80%2 exploitsPublished Sep 27, 2023
- CVE-2023-5074Critical 9.8Use of a static key to protect a JWT token used in user authentication can allow an for an authentication bypass in D-Link D-View 8 v2.0.1.28dlink · d-view 8EPSS70%·Published Sep 20, 2023
- CVE-2023-41892Critical 9.8Craft CMS Remote Code Execution vulnerabilitycraftcms · craft cmsEPSS94%1 exploitPublished Sep 13, 2023
- CVE-2023-38408Critical 9.8openssh - security updateopenbsd · opensshEPSS80%1 exploitPublished Sep 7, 2023
- CVE-2023-39361Critical 9.8Affected versions are subject to a SQL injection discovered in graph_view.php.cacti · cactiEPSS89%1 exploitPublished Sep 6, 2023
- CVE-2023-4634Critical 9.8Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Executiondavidlingren · media library assistantEPSS86%2 exploitsPublished Sep 4, 2023
- CVE-2023-34039Critical 9.8Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation.vmware · aria operations for networksEPSS67%2 exploitsPublished Aug 30, 2023
- CVE-2023-41109Critical 9.8SmartNode SN200 (aka SN200) 3.21.2-23021 allows unauthenticated OS Command Injection.patton · smartnode sn200 firmwareEPSS65%·Published Aug 28, 2023
- CVE-2023-4542Critical 9.8It has been classified as critical.dlink · dar-8000-10 firmwareEPSS85%1 exploitPublished Aug 25, 2023
- CVE-2022-24989Critical 9.8TerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via the raidtype and diskstring parameters for PHP Object Instantiation to the api.php?mobile/createRaid URI.terra-master · terramaster operating systemEPSS32%3 exploitsPublished Aug 20, 2023
- CVE-2023-2915Critical 9.1The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, Due to improper input validation, a path traversal vulnerability exists when the ThinManager software processes a certain function.rockwellautomation · thinmanager thinserverEPSS82%·Published Aug 18, 2023
- CVE-2023-2917Critical 9.8The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability.rockwellautomation · thinmanager thinserverEPSS72%·Published Aug 18, 2023
- CVE-2023-26469Critical 9.8In Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server.jorani · joraniEPSS83%3 exploitsPublished Aug 17, 2023
- CVE-2023-32563Critical 9.8An unauthenticated attacker could achieve the code execution through a RemoteControl server.ivanti · avalancheEPSS89%·Published Aug 10, 2023
- CVE-2023-32560Critical 9.8An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution.ivanti · avalancheEPSS99%2 exploitsPublished Aug 10, 2023
- CVE-2023-39143Critical 9.8PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files.papercut · papercut mfEPSS80%Ransomware3 actorsPublished Aug 9, 2023
- CVE-2023-29689Critical 9.8PyroCMS remote code execution vulnerabilitypyrocms · pyrocmsEPSS53%1 exploitPublished Aug 4, 2023
- CVE-2023-4120Critical 9.8The manipulation of the argument sql leads to command injection.byzoro · smart s85fEPSS62%1 exploitPublished Aug 3, 2023
- CVE-2023-37679Critical 9.8A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server.nextgen · mirth connectEPSS99%1 exploitPublished Aug 3, 2023
- CVE-2022-39986Critical 9.8RaspAP Command Injection vulnerabilityraspap · raspapEPSS99%1 exploitPublished Aug 1, 2023
- CVE-2023-34960Critical 9.8A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name.chamilo · chamiloEPSS99%2 exploitsPublished Jul 31, 2023
- CVE-2023-38992Critical 9.8SQL injection in jeecg-bootjeecg · jeecg bootEPSS73%·Published Jul 28, 2023
- CVE-2023-3836Critical 9.8A vulnerability classified as critical was found in Dahua Smart Park Management up to 20230713.dahuasecurity · smart parking managementEPSS74%1 exploitPublished Jul 22, 2023
- CVE-2023-38646Critical 9.8Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level.metabase · metabaseEPSS99%1 exploitPublished Jul 21, 2023
- CVE-2023-38204Critical 9.8Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution.adobe · coldfusionEPSS67%·Published Jul 21, 2023
- CVE-2023-3765Critical 10.0MLflow Path Traversal vulnerabilitylfprojects · mlflowEPSS68%·Published Jul 19, 2023
- CVE-2023-34124Critical 9.8The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass.sonicwall · analyticsEPSS50%1 exploitPublished Jul 13, 2023
- CVE-2023-3643Critical 9.8It has been classified as critical.carel · boss mini firmwareEPSS75%1 exploitPublished Jul 12, 2023
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-3368 | Command injection in /main/webservices/additional_webservices.php in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to obtain remote code execution via improper neutralisation of special characters. chamilo · chamilo | Critical 9.8 | 70% | · | |
| CVE-2023-6329 | An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. controlid · idsecure | Critical 9.8 | 65% | · | |
| CVE-2023-5652 | The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not escape user input before using it in a SQL statement of a function hooked to admin_init, allowing unauthenticated users to perform SQL injections thimpress · wp hotel booking | Critical 9.8 | 64% | · | |
| CVE-2023-43177 | CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes. crushftp · crushftp | Critical 9.8 | 82% | 1 exploit | |
| CVE-2023-6019 | Ray OS Command Injection vulnerability ray project · ray | Critical 9.8 | 75% | 2 exploits | |
| CVE-2023-44353 | Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. adobe · coldfusion | Critical 9.8 | 80% | · | |
| CVE-2023-44350 | Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. adobe · coldfusion | Critical 9.8 | 65% | · | |
| CVE-2023-44351 | Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. adobe · coldfusion | Critical 9.8 | 50% | · | |
| CVE-2023-45878 | GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubrics_visualise_saveAjax.phps does not require authentication. gibbonedu · gibbon | Critical 9.8 | 63% | · | |
| CVE-2023-46731 | XWiki Platform vulnerable to remote code execution through the section parameter in Administration as guest xwiki · xwiki | Critical 9.8 | 89% | 1 exploit | |
| CVE-2023-5360 | Royal Elementor Addons and Templates <= 1.3.78 - Unauthenticated Arbitrary File Upload royal-elementor-addons · royal elementor addons | Critical 9.8 | 86% | 2 exploits | |
| CVE-2023-5830 | A vulnerability classified as critical has been found in ColumbiaSoft Document Locator. documentlocator · document locator | Critical 9.8 | 61% | · | |
| CVE-2023-45498 | VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain a command injection vulnerability. vinchin · vinchin backup and recovery | Critical 9.8 | 20% | 1 exploit | |
| CVE-2023-43795 | WPS Server Side Request Forgery vulnerability osgeo · geoserver | Critical 9.8 | 68% | · | |
| CVE-2023-46574 | An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the FileName parameter of the UploadFirmwareFile function. totolink · a3700r firmware | Critical 9.8 | 65% | 1 exploit | |
| CVE-2023-5684 | It has been declared as critical. byzoro · smart s85f firmware | Critical 9.8 | 78% | 1 exploit | |
| CVE-2023-45138 | XWiki Change Request Application UI XSS and remote code execution through change request title xwiki · change request | Critical 9.6 | 72% | · | |
| CVE-2023-34992 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to execute unauthorized code or commands via crafted API requests. fortinet · fortisiem | Critical 9.8 | 82% | Ransomware1 actor | |
| CVE-2023-32645 | A leftover debug code vulnerability exists in the httpd debug credentials functionality of Yifan YF325 v1.0_20221108. yifanwireless · yf325 firmware | Critical 9.8 | 55% | · | |
| CVE-2023-30806 | The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. sangfor · next-gen application firewall | Critical 9.8 | 65% | · | |
| CVE-2023-30805 | The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. sangfor · next-gen application firewall | Critical 9.8 | 65% | · | |
| CVE-2023-43654 | TorchServe Server-Side Request Forgery vulnerability pytorch · torchserve | Critical 9.8 | 42% | 1 exploit | |
| CVE-2023-5222 | A vulnerability classified as critical was found in Viessmann Vitogate 300 up to 2.1.3.0. viessmann · vitogate 300 firmware | Critical 9.8 | 80% | 2 exploits | |
| CVE-2023-5074 | Use of a static key to protect a JWT token used in user authentication can allow an for an authentication bypass in D-Link D-View 8 v2.0.1.28 dlink · d-view 8 | Critical 9.8 | 70% | · | |
| CVE-2023-41892 | Craft CMS Remote Code Execution vulnerability craftcms · craft cms | Critical 9.8 | 94% | 1 exploit | |
| CVE-2023-38408 | openssh - security update openbsd · openssh | Critical 9.8 | 80% | 1 exploit | |
| CVE-2023-39361 | Affected versions are subject to a SQL injection discovered in graph_view.php. cacti · cacti | Critical 9.8 | 89% | 1 exploit | |
| CVE-2023-4634 | Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution davidlingren · media library assistant | Critical 9.8 | 86% | 2 exploits | |
| CVE-2023-34039 | Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation. vmware · aria operations for networks | Critical 9.8 | 67% | 2 exploits | |
| CVE-2023-41109 | SmartNode SN200 (aka SN200) 3.21.2-23021 allows unauthenticated OS Command Injection. patton · smartnode sn200 firmware | Critical 9.8 | 65% | · | |
| CVE-2023-4542 | It has been classified as critical. dlink · dar-8000-10 firmware | Critical 9.8 | 85% | 1 exploit | |
| CVE-2022-24989 | TerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via the raidtype and diskstring parameters for PHP Object Instantiation to the api.php?mobile/createRaid URI. terra-master · terramaster operating system | Critical 9.8 | 32% | 3 exploits | |
| CVE-2023-2915 | The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, Due to improper input validation, a path traversal vulnerability exists when the ThinManager software processes a certain function. rockwellautomation · thinmanager thinserver | Critical 9.1 | 82% | · | |
| CVE-2023-2917 | The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability. rockwellautomation · thinmanager thinserver | Critical 9.8 | 72% | · | |
| CVE-2023-26469 | In Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server. jorani · jorani | Critical 9.8 | 83% | 3 exploits | |
| CVE-2023-32563 | An unauthenticated attacker could achieve the code execution through a RemoteControl server. ivanti · avalanche | Critical 9.8 | 89% | · | |
| CVE-2023-32560 | An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution. ivanti · avalanche | Critical 9.8 | 99% | 2 exploits | |
| CVE-2023-39143 | PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files. papercut · papercut mf | Critical 9.8 | 80% | Ransomware3 actors | |
| CVE-2023-29689 | PyroCMS remote code execution vulnerability pyrocms · pyrocms | Critical 9.8 | 53% | 1 exploit | |
| CVE-2023-4120 | The manipulation of the argument sql leads to command injection. byzoro · smart s85f | Critical 9.8 | 62% | 1 exploit | |
| CVE-2023-37679 | A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server. nextgen · mirth connect | Critical 9.8 | 99% | 1 exploit | |
| CVE-2022-39986 | RaspAP Command Injection vulnerability raspap · raspap | Critical 9.8 | 99% | 1 exploit | |
| CVE-2023-34960 | A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name. chamilo · chamilo | Critical 9.8 | 99% | 2 exploits | |
| CVE-2023-38992 | SQL injection in jeecg-boot jeecg · jeecg boot | Critical 9.8 | 73% | · | |
| CVE-2023-3836 | A vulnerability classified as critical was found in Dahua Smart Park Management up to 20230713. dahuasecurity · smart parking management | Critical 9.8 | 74% | 1 exploit | |
| CVE-2023-38646 | Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. metabase · metabase | Critical 9.8 | 99% | 1 exploit | |
| CVE-2023-38204 | Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. adobe · coldfusion | Critical 9.8 | 67% | · | |
| CVE-2023-3765 | MLflow Path Traversal vulnerability lfprojects · mlflow | Critical 10.0 | 68% | · | |
| CVE-2023-34124 | The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass. sonicwall · analytics | Critical 9.8 | 50% | 1 exploit | |
| CVE-2023-3643 | It has been classified as critical. carel · boss mini firmware | Critical 9.8 | 75% | 1 exploit |
Showing 201–250 of 1,642
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.