Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
3,918 vulnerabilities · highest exploit probability first
- CVE-2015-2995Medium 6.8The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote attackers to upload and execute arbitrary files via a NULL byte after the extension, as demonstrated by a .war%00 file.sysaid · sysaidEPSS34%4 exploitsPublished Jun 8, 2015
- CVE-2015-2994Medium 6.5Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators to execute arbitrary code by uploading a file with a .jsp extension, then accessing it via a direct request to the file in icons/user_photo/.sysaid · sysaidEPSS50%4 exploitsPublished Jun 8, 2015
- CVE-2015-2993High 7.5SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers to (1) create administrator accounts via a crafted request to /createnewaccount or (2) write to arbitrary files via the fileName parameter to /userentry.sysaid · sysaidEPSS55%2 exploitsPublished Jun 8, 2015
- CVE-2015-0779Critical 10.0Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11.3.2 allows remote attackers to execute arbitrary code via a crafted directory name in the uid parameter, in conjunction with a WAR filename in the filename…novell · zenworks configuration managementEPSS74%3 exploitsPublished Jun 7, 2015
- CVE-2010-5324Critical 10.0Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to execute arbitrary code via a zenworks-fileupload request with a crafted directory name in the type…novell · zenworks configuration managementEPSS72%2 exploitsPublished Jun 7, 2015
- CVE-2014-9727Critical 10.0AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm.avm · fritz\!boxEPSS72%3 exploitsPublished May 29, 2015
- CVE-2015-4000Low 3.7The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by…oracle · jdkEPSS100%·Published May 21, 2015
- CVE-2015-1868High 7.8The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service (CPU consumption or crash) via a…powerdns · authoritativeEPSS82%·Published May 18, 2015
- CVE-2015-2845Critical 10.0The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arbitrary commands via the $type portion of the PATH_INFO.goautodial · goadmin ceEPSS72%4 exploitsPublished May 12, 2015
- CVE-2015-2843High 7.5Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute arbitrary SQL commands via the (1) user_name or (2) user_pass parameter in go_login.php or the PATH_INFO to (3) go_login/validate_credentials/admin/ or (4)…goautodial · goadmin ceEPSS38%4 exploitsPublished May 12, 2015
- CVE-2015-3090Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-09adobe · airEPSS83%2 exploitsPublished May 12, 2015
- CVE-2015-3087Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-09adobe · airEPSS74%1 exploitPublished May 12, 2015
- CVE-2015-3088Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-09adobe · airEPSS62%1 exploitPublished May 12, 2015
- CVE-2015-3080Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-09adobe · airEPSS57%1 exploitPublished May 12, 2015
- CVE-2015-1397Medium 6.5SQL injection vulnerability in the getCsvFile function in the Mage_Adminhtml_Block_Widget_Grid class in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allows remote administrators to execute arbitrary SQL commands via the popularity[field_expr]…magento · magentoEPSS56%1 exploitPublished Apr 29, 2015
- CVE-2015-0359Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-06adobe · flash playerEPSS92%2 exploitsPublished Apr 14, 2015
- CVE-2015-2295Medium 6.8Cross-site request forgery (CSRF) vulnerability in system_firmware_restorefullbackup.php in the WebGUI in pfSense before 2.2.1 allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary files via the deletefile parameter.netgate · pfsenseEPSS66%2 exploitsPublished Apr 10, 2015
- CVE-2014-9708Medium 5.0Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demonstrated by "Range: x=,".embedthis · appwebEPSS56%2 exploitsPublished Mar 31, 2015
- CVE-2015-0802Medium 5.0Mozilla: Windows can retain access to privileged content on navigation to unprivileged pages (MFSA 2015-42)mozilla · firefoxEPSS67%3 exploitsPublished Mar 31, 2015
- CVE-2015-0816Medium 5.0Mozilla: resource: // documents can load privileged pages (MFSA 2015-33)mozilla · firefoxEPSS67%2 exploitsPublished Mar 31, 2015
- CVE-2015-2284Critical 10.0userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbitrary code via unspecified vectors, related to client session handling.solarwinds · firewall security managerEPSS73%2 exploitsPublished Mar 24, 2015
- CVE-2015-4133Critical 9.8ReFlex Gallery » WordPress Photo Gallery < 3.1.4 - Arbitrary File Uploadreflex gallery project · reflex galleryEPSS62%5 exploitsPublished Mar 15, 2015
- CVE-2015-2208High 7.5The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the object parameter.avinu · phpmoadminEPSS62%4 exploitsPublished Mar 12, 2015
- CVE-2015-0336Critical 9.3flash-plugin: multiple code execution issues fixed in APSB15-05adobe · flash playerEPSS70%2 exploitsPublished Mar 12, 2015
- CVE-2015-0096Critical 9.3Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a Trojan…microsoft · windows 7EPSS71%5 exploitsPublished Mar 11, 2015
- CVE-2015-0240Critical 10.0The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted…samba · sambaEPSS88%1 exploitPublished Feb 24, 2015
- CVE-2014-6593Medium 4.0Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.oracle · jrockitEPSS66%1 exploitPublished Feb 24, 2015
- CVE-2015-2049Critical 9.0Unrestricted file upload vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension.dlink · dcs-931l firmwareEPSS67%2 exploitsPublished Feb 23, 2015
- CVE-2015-1592High 7.5Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::thaw function, which allows remote attackers to include and execute arbitrary local Perl files and possibly execute arbitrary code via…sixapart · movable typeEPSS75%2 exploitsPublished Feb 19, 2015
- CVE-2015-1587High 7.5Unrestricted file upload vulnerability in file_to_index.php in Maarch LetterBox 2.8 and earlier and GEC/GED 1.4 and earlier allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a request to a predictable filename…maarch · gec\/gedEPSS43%4 exploitsPublished Feb 19, 2015
- CVE-2015-1497Critical 10.0radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execute arbitrary commands via a crafted request to TCP port 3465.persistent systems · radia client automationEPSS74%7 exploitsPublished Feb 16, 2015
- CVE-2015-0923Medium 5.0The ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1 allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference within an…ektron · ektron content management systemEPSS22%1 exploitPublished Feb 14, 2015
- CVE-2014-9312High 8.8Photo Gallery by 10Web <= 1.2.5 - Unrestricted File Upload10web · photo galleryEPSS45%4 exploitsPublished Feb 11, 2015
- CVE-2015-0072Medium 4.3Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy and inject arbitrary web script or HTML via vectors involving an IFRAME element that triggers a redirect, a second IFRAME element that…microsoft · internet explorerEPSS72%1 exploitPublished Feb 7, 2015
- CVE-2015-0318Critical 10.0flash-plugin: multiple code execution flaws (APSB15-04)adobe · flash playerEPSS75%2 exploitsPublished Feb 4, 2015
- CVE-2015-0925Critical 9.0The client in iPass Open Mobile before 2.4.5 on Windows allows remote authenticated users to execute arbitrary code via a DLL pathname in a crafted Unicode string that is improperly handled by a subprocess reached through a named pipe, as demonstrated by a UNC share pathname.ipass · ipass open mobileEPSS52%3 exploitsPublished Jan 22, 2015
- CVE-2015-1376High 8.8Pixabay Images <= 2.3 - Arbitrary File Uploadpixabay images project · pixabay imagesEPSS33%3 exploitsPublished Jan 18, 2015
- CVE-2015-1172Critical 9.8Holding Pattern <= 0.6 - Arbitrary File Uploadholding pattern project · holding patternEPSS58%2 exploitsPublished Jan 17, 2015
- CVE-2014-9195High 7.5Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic.phoenixcontact-software · multiprogEPSS81%1 exploitPublished Jan 17, 2015
- CVE-2015-0015High 7.8Microsoft Windows Server 2003 SP2, Server 2008 SP2 and R2 SP1, and Server 2012 Gold and R2 allow remote attackers to cause a denial of service (system hang and RADIUS outage) via crafted username strings to (1) Internet Authentication Service (IAS) or (2) Network Policy Server…microsoft · windows server 2003EPSS79%·Published Jan 13, 2015
- CVE-2015-0014Critical 10.0Buffer overflow in the Telnet service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted packets,…microsoft · windows 7EPSS97%·Published Jan 13, 2015
- CVE-2014-100015Medium 6.4Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a ..solidworks · product data managementEPSS57%6 exploitsPublished Jan 13, 2015
- CVE-2014-100002Medium 5.0Directory traversal vulnerability in ManageEngine SupportCenter Plus 7.9 before 7917 allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the attach parameter to WorkOrder.do in the file attachment for a new ticket.zohocorp · manageengine supportcenter plusEPSS60%2 exploitsPublished Jan 13, 2015
- CVE-2015-0206Medium 5.0Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate records for the next epoch, leading to failure of replay…openssl · opensslEPSS57%·Published Jan 9, 2015
- CVE-2015-0204Medium 5.3The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a…openssl · opensslEPSS99%·Published Jan 9, 2015
- CVE-2014-9308High 8.8Shopping Cart & eCommerce Store < 3.0.16 - Arbitrary File Uploadwpeasycart · wp easycartEPSS51%5 exploitsPublished Jan 8, 2015
- CVE-2014-9583Critical 10.0common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and other routers, does not properly check the MAC address for a request, which allows remote attackers to bypass authentication and execute…asus · wrt firmwareEPSS80%6 exploitsPublished Jan 8, 2015
- CVE-2014-9567High 7.5Unrestricted file upload vulnerability in process-upload.php in ProjectSend (formerly cFTP) r100 through r561 allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in the upload/files/…projectsend · projectsendEPSS43%6 exploitsPublished Jan 7, 2015
- CVE-2011-4722High 7.8Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a ..ipswitch · tftp serverEPSS58%2 exploitsPublished Dec 28, 2014
- CVE-2014-9222Critical 10.0AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability.allegrosoft · rompagerEPSS74%·Published Dec 24, 2014
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2015-2995 | The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote attackers to upload and execute arbitrary files via a NULL byte after the extension, as demonstrated by a .war%00 file. sysaid · sysaid | Medium 6.8 | 34% | 4 exploits | |
| CVE-2015-2994 | Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators to execute arbitrary code by uploading a file with a .jsp extension, then accessing it via a direct request to the file in icons/user_photo/. sysaid · sysaid | Medium 6.5 | 50% | 4 exploits | |
| CVE-2015-2993 | SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers to (1) create administrator accounts via a crafted request to /createnewaccount or (2) write to arbitrary files via the fileName parameter to /userentry. sysaid · sysaid | High 7.5 | 55% | 2 exploits | |
| CVE-2015-0779 | Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11.3.2 allows remote attackers to execute arbitrary code via a crafted directory name in the uid parameter, in conjunction with a WAR filename in the filename… novell · zenworks configuration management | Critical 10.0 | 74% | 3 exploits | |
| CVE-2010-5324 | Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to execute arbitrary code via a zenworks-fileupload request with a crafted directory name in the type… novell · zenworks configuration management | Critical 10.0 | 72% | 2 exploits | |
| CVE-2014-9727 | AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm. avm · fritz\!box | Critical 10.0 | 72% | 3 exploits | |
| CVE-2015-4000 | The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by… oracle · jdk | Low 3.7 | 100% | · | |
| CVE-2015-1868 | The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service (CPU consumption or crash) via a… powerdns · authoritative | High 7.8 | 82% | · | |
| CVE-2015-2845 | The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arbitrary commands via the $type portion of the PATH_INFO. goautodial · goadmin ce | Critical 10.0 | 72% | 4 exploits | |
| CVE-2015-2843 | Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute arbitrary SQL commands via the (1) user_name or (2) user_pass parameter in go_login.php or the PATH_INFO to (3) go_login/validate_credentials/admin/ or (4)… goautodial · goadmin ce | High 7.5 | 38% | 4 exploits | |
| CVE-2015-3090 | flash-plugin: multiple code execution issues fixed in APSB15-09 adobe · air | Critical 10.0 | 83% | 2 exploits | |
| CVE-2015-3087 | flash-plugin: multiple code execution issues fixed in APSB15-09 adobe · air | Critical 10.0 | 74% | 1 exploit | |
| CVE-2015-3088 | flash-plugin: multiple code execution issues fixed in APSB15-09 adobe · air | Critical 10.0 | 62% | 1 exploit | |
| CVE-2015-3080 | flash-plugin: multiple code execution issues fixed in APSB15-09 adobe · air | Critical 10.0 | 57% | 1 exploit | |
| CVE-2015-1397 | SQL injection vulnerability in the getCsvFile function in the Mage_Adminhtml_Block_Widget_Grid class in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allows remote administrators to execute arbitrary SQL commands via the popularity[field_expr]… magento · magento | Medium 6.5 | 56% | 1 exploit | |
| CVE-2015-0359 | flash-plugin: multiple code execution issues fixed in APSB15-06 adobe · flash player | Critical 10.0 | 92% | 2 exploits | |
| CVE-2015-2295 | Cross-site request forgery (CSRF) vulnerability in system_firmware_restorefullbackup.php in the WebGUI in pfSense before 2.2.1 allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary files via the deletefile parameter. netgate · pfsense | Medium 6.8 | 66% | 2 exploits | |
| CVE-2014-9708 | Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demonstrated by "Range: x=,". embedthis · appweb | Medium 5.0 | 56% | 2 exploits | |
| CVE-2015-0802 | Mozilla: Windows can retain access to privileged content on navigation to unprivileged pages (MFSA 2015-42) mozilla · firefox | Medium 5.0 | 67% | 3 exploits | |
| CVE-2015-0816 | Mozilla: resource: // documents can load privileged pages (MFSA 2015-33) mozilla · firefox | Medium 5.0 | 67% | 2 exploits | |
| CVE-2015-2284 | userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbitrary code via unspecified vectors, related to client session handling. solarwinds · firewall security manager | Critical 10.0 | 73% | 2 exploits | |
| CVE-2015-4133 | ReFlex Gallery » WordPress Photo Gallery < 3.1.4 - Arbitrary File Upload reflex gallery project · reflex gallery | Critical 9.8 | 62% | 5 exploits | |
| CVE-2015-2208 | The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the object parameter. avinu · phpmoadmin | High 7.5 | 62% | 4 exploits | |
| CVE-2015-0336 | flash-plugin: multiple code execution issues fixed in APSB15-05 adobe · flash player | Critical 9.3 | 70% | 2 exploits | |
| CVE-2015-0096 | Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a Trojan… microsoft · windows 7 | Critical 9.3 | 71% | 5 exploits | |
| CVE-2015-0240 | The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted… samba · samba | Critical 10.0 | 88% | 1 exploit | |
| CVE-2014-6593 | Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. oracle · jrockit | Medium 4.0 | 66% | 1 exploit | |
| CVE-2015-2049 | Unrestricted file upload vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension. dlink · dcs-931l firmware | Critical 9.0 | 67% | 2 exploits | |
| CVE-2015-1592 | Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::thaw function, which allows remote attackers to include and execute arbitrary local Perl files and possibly execute arbitrary code via… sixapart · movable type | High 7.5 | 75% | 2 exploits | |
| CVE-2015-1587 | Unrestricted file upload vulnerability in file_to_index.php in Maarch LetterBox 2.8 and earlier and GEC/GED 1.4 and earlier allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a request to a predictable filename… maarch · gec\/ged | High 7.5 | 43% | 4 exploits | |
| CVE-2015-1497 | radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execute arbitrary commands via a crafted request to TCP port 3465. persistent systems · radia client automation | Critical 10.0 | 74% | 7 exploits | |
| CVE-2015-0923 | The ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1 allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference within an… ektron · ektron content management system | Medium 5.0 | 22% | 1 exploit | |
| CVE-2014-9312 | Photo Gallery by 10Web <= 1.2.5 - Unrestricted File Upload 10web · photo gallery | High 8.8 | 45% | 4 exploits | |
| CVE-2015-0072 | Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy and inject arbitrary web script or HTML via vectors involving an IFRAME element that triggers a redirect, a second IFRAME element that… microsoft · internet explorer | Medium 4.3 | 72% | 1 exploit | |
| CVE-2015-0318 | flash-plugin: multiple code execution flaws (APSB15-04) adobe · flash player | Critical 10.0 | 75% | 2 exploits | |
| CVE-2015-0925 | The client in iPass Open Mobile before 2.4.5 on Windows allows remote authenticated users to execute arbitrary code via a DLL pathname in a crafted Unicode string that is improperly handled by a subprocess reached through a named pipe, as demonstrated by a UNC share pathname. ipass · ipass open mobile | Critical 9.0 | 52% | 3 exploits | |
| CVE-2015-1376 | Pixabay Images <= 2.3 - Arbitrary File Upload pixabay images project · pixabay images | High 8.8 | 33% | 3 exploits | |
| CVE-2015-1172 | Holding Pattern <= 0.6 - Arbitrary File Upload holding pattern project · holding pattern | Critical 9.8 | 58% | 2 exploits | |
| CVE-2014-9195 | Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic. phoenixcontact-software · multiprog | High 7.5 | 81% | 1 exploit | |
| CVE-2015-0015 | Microsoft Windows Server 2003 SP2, Server 2008 SP2 and R2 SP1, and Server 2012 Gold and R2 allow remote attackers to cause a denial of service (system hang and RADIUS outage) via crafted username strings to (1) Internet Authentication Service (IAS) or (2) Network Policy Server… microsoft · windows server 2003 | High 7.8 | 79% | · | |
| CVE-2015-0014 | Buffer overflow in the Telnet service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted packets,… microsoft · windows 7 | Critical 10.0 | 97% | · | |
| CVE-2014-100015 | Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. solidworks · product data management | Medium 6.4 | 57% | 6 exploits | |
| CVE-2014-100002 | Directory traversal vulnerability in ManageEngine SupportCenter Plus 7.9 before 7917 allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the attach parameter to WorkOrder.do in the file attachment for a new ticket. zohocorp · manageengine supportcenter plus | Medium 5.0 | 60% | 2 exploits | |
| CVE-2015-0206 | Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate records for the next epoch, leading to failure of replay… openssl · openssl | Medium 5.0 | 57% | · | |
| CVE-2015-0204 | The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a… openssl · openssl | Medium 5.3 | 99% | · | |
| CVE-2014-9308 | Shopping Cart & eCommerce Store < 3.0.16 - Arbitrary File Upload wpeasycart · wp easycart | High 8.8 | 51% | 5 exploits | |
| CVE-2014-9583 | common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and other routers, does not properly check the MAC address for a request, which allows remote attackers to bypass authentication and execute… asus · wrt firmware | Critical 10.0 | 80% | 6 exploits | |
| CVE-2014-9567 | Unrestricted file upload vulnerability in process-upload.php in ProjectSend (formerly cFTP) r100 through r561 allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in the upload/files/… projectsend · projectsend | High 7.5 | 43% | 6 exploits | |
| CVE-2011-4722 | Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a .. ipswitch · tftp server | High 7.8 | 58% | 2 exploits | |
| CVE-2014-9222 | AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability. allegrosoft · rompager | Critical 10.0 | 74% | · |
Showing 2,451–2,500 of 3,918
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.