Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
3,918 vulnerabilities · highest exploit probability first
- CVE-2014-9295High 7.5Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to (1) the crypto_recv function when the Autokey Authentication feature is used, (2) the ctl_putdata function, and (3) the configure…ntp · ntpEPSS79%·Published Dec 20, 2014
- CVE-2014-8142High 7.5php: use after free vulnerability in unserialize()php · phpEPSS53%·Published Dec 18, 2014
- CVE-2014-7285Medium 6.5The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting command strings into unspecified PHP scripts.symantec · web gatewayEPSS50%2 exploitsPublished Dec 17, 2014
- CVE-2014-8500High 7.8ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory consumption and named crash) via a large or infinite number of referrals.isc · bindEPSS58%·Published Dec 11, 2014
- CVE-2014-10021Critical 9.8WP Symposium <= 14.11 - Arbitrary File Uploadwpsymposiumpro · wp symposiumEPSS59%4 exploitsPublished Dec 10, 2014
- CVE-2014-7866High 7.5Multiple directory traversal vulnerabilities in ZOHO ManageEngine OpManager 8 (build 88xx) through 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to write and execute arbitrary files via a ..zohocorp · manageengine opmanagerEPSS80%2 exploitsPublished Dec 10, 2014
- CVE-2014-8601Medium 5.0PowerDNS Recursor before 3.6.2 does not limit delegation chaining, which allows remote attackers to cause a denial of service ("performance degradations") via a large or infinite number of referrals, as demonstrated by resolving domains hosted by ezdns.it.powerdns · recursorEPSS69%·Published Dec 10, 2014
- CVE-2014-4880High 7.5Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote attackers to execute arbitrary code via an RTSP PLAY request with a long Authorization header.hikvision · dvr ds-7204 firmwareEPSS71%4 exploitsPublished Dec 8, 2014
- CVE-2014-3996High 7.5SQL injection vulnerability in the LinkViewFetchServlet servlet in ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90043, Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition…manageengine · desktop centralEPSS38%3 exploitsPublished Dec 5, 2014
- CVE-2014-7868High 7.5Multiple SQL injection vulnerabilities in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the (1) OPM_BVNAME parameter in a Delete operation to the…zohocorp · manageengine opmanagerEPSS73%3 exploitsPublished Dec 4, 2014
- CVE-2014-6034Medium 5.0Directory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe.FileCollector servlet in ZOHO ManageEngine OpManager 8.8 through 11.3, Social IT Plus 11.0, and IT360 10.4 and earlier allows remote attackers or remote authenticated users to write to…zohocorp · manageengine opmanagerEPSS79%3 exploitsPublished Dec 4, 2014
- CVE-2014-5446Medium 5.0Directory traversal vulnerability in the DisplayChartPDF servlet in ZOHO ManageEngine Netflow Analyzer 8.6 through 10.2 and IT360 10.3 allows remote attackers and remote authenticated users to read arbitrary files via a ..zohocorp · manageengine netflow analyzerEPSS55%2 exploitsPublished Dec 4, 2014
- CVE-2014-5445Medium 5.0Multiple absolute path traversal vulnerabilities in ZOHO ManageEngine Netflow Analyzer 8.6 through 10.2 and IT360 10.3 allow remote attackers or remote authenticated users to read arbitrary files via a full pathname in the schFilePath parameter to the (1) CSVServlet or (2)…zohocorp · manageengine netflow analyzerEPSS98%2 exploitsPublished Dec 4, 2014
- CVE-2014-8424High 7.8ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication.arris · vap2500 firmwareEPSS60%2 exploitsPublished Nov 28, 2014
- CVE-2014-8423Critical 10.0Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute arbitrary commands via unknown vectors.arris · vap2500 firmwareEPSS62%2 exploitsPublished Nov 28, 2014
- CVE-2014-7141Medium 6.4The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and crash) via a crafted type in an (1) ICMP or (2) ICMP6 packet.squid-cache · squidEPSS76%·Published Nov 26, 2014
- CVE-2014-9034Medium 5.3wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to cause a denial of service (CPU consumption) via a long password that is improperly handled during hashing, a similar issue to…wordpress · wordpressEPSS83%2 exploitsPublished Nov 25, 2014
- CVE-2014-8420Critical 9.0The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors.sonicwall · analyzerEPSS24%1 exploitPublished Nov 25, 2014
- CVE-2014-9735Critical 9.8Slider Revolution < 3.0.96 & Showbiz Pro < 1.7.1 - Missing Authorization to Arbitrary File Uploadthemepunch · showbiz proEPSS76%2 exploitsPublished Nov 24, 2014
- CVE-2014-9016Medium 5.0The password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes (aka phpass) module 6.x-2.x before 6.x-2.1 for Drupal allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted request.drupal · drupalEPSS82%1 exploitPublished Nov 24, 2014
- CVE-2014-8998Medium 6.5lib/message.php in X7 Chat 2.0.0 through 2.0.5.1 allows remote authenticated users to execute arbitrary PHP code via a crafted HTTP header to index.php, which is processed by the preg_replace function with the eval switch.x7chat · x7 chatEPSS36%4 exploitsPublished Nov 20, 2014
- CVE-2014-8598Medium 6.4The XML Import/Export plugin in MantisBT 1.2.x does not restrict access, which allows remote attackers to (1) upload arbitrary XML files via the import page or (2) obtain sensitive information via the export page.mantisbt · mantisbtEPSS38%2 exploitsPublished Nov 18, 2014
- CVE-2014-7146High 7.5The XmlImportExport plugin in MantisBT 1.2.17 and earlier allows remote attackers to execute arbitrary PHP code via a crafted (1) description field or (2) issuelink attribute in an XML file, which is not properly handled when executing the preg_replace function with the e…mantisbt · mantisbtEPSS51%3 exploitsPublished Nov 18, 2014
- CVE-2014-8517High 7.5The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 through 6.0.6, and 6.1 through 6.1.5 allows remote attackers to execute arbitrary commands via a | (pipe) character at the end of an HTTP redirect.netbsd · netbsdEPSS69%3 exploitsPublished Nov 17, 2014
- CVE-2014-2268Medium 5.0views/Index.php in the Install module in vTiger 6.0 before Security Patch 2 does not properly restrict access, which allows remote attackers to re-install the application via a request that sets the X-Requested-With HTTP header, as demonstrated by executing arbitrary PHP code…vtiger · vtiger crmEPSS31%3 exploitsPublished Nov 15, 2014
- CVE-2014-8799High 7.5DukaPress < 2.5.4 - Directory Traversaldukapress · dukapressEPSS68%2 exploitsPublished Nov 12, 2014
- CVE-2014-1635Critical 10.0Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103_WW_1.10.17m allows remote attackers to execute arbitrary code via a long string in the jump parameter.belkin · n750 wireless routerEPSS67%3 exploitsPublished Nov 12, 2014
- CVE-2014-6321Critical 10.0Schannel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via crafted packets, aka…microsoft · windows 7EPSS96%·Published Nov 11, 2014
- CVE-2014-4076High 7.2Microsoft Windows Server 2003 SP2 allows local users to gain privileges via a crafted IOCTL call to (1) tcpip.sys or (2) tcpip6.sys, aka "TCP/IP Elevation of Privilege Vulnerability."microsoft · windows server 2003EPSS23%4 exploitsPublished Nov 11, 2014
- CVE-2014-8440Critical 10.0flash-plugin: multiple code execution flaws (APSB14-24)adobe · airEPSS82%3 exploitsPublished Nov 11, 2014
- CVE-2014-7228High 7.5Akeeba Restore (restore.php), as used in Joomla!joomla · joomla\!EPSS55%2 exploitsPublished Nov 3, 2014
- CVE-2013-7409High 7.5Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a .m3u (playlist) file.allplayer · allplayerEPSS68%15 exploitsPublished Oct 30, 2014
- CVE-2014-6037High 7.5Directory traversal vulnerability in the agentUpload servlet in ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 allows remote attackers to execute arbitrary code by uploading a ZIP file which contains an executable file with ..zohocorp · manageengine eventlog analyzerEPSS84%6 exploitsPublished Oct 26, 2014
- CVE-2014-3829Critical 10.0displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) session_id or (2) template_id parameter, related to the command_line variable.merethis · centreonEPSS80%2 exploitsPublished Oct 22, 2014
- CVE-2014-3828Critical 10.0Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allow remote attackers to execute arbitrary SQL commands via (1) the index_id parameter to views/graphs/common/makeXML_ListMetrics.php, (2) the sid parameter…merethis · centreonEPSS73%3 exploitsPublished Oct 22, 2014
- CVE-2014-5005High 7.5Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers to execute arbitrary code via a ..zohocorp · manageengine desktop centralEPSS78%4 exploitsPublished Oct 21, 2014
- CVE-2014-3704High 7.5Drupalgeddon — Drupal core SQL injectiondrupal · drupalEPSS100%13 exploitsPublished Oct 16, 2014
- CVE-2014-0569Critical 9.3flash-plugin: multiple code execution flaws (APSB14-22)adobe · air sdkEPSS91%2 exploitsPublished Oct 14, 2014
- CVE-2014-4872High 7.5BMC Track-It!bmc · track-it\!EPSS79%3 exploitsPublished Oct 10, 2014
- CVE-2014-6446Critical 9.8Infusionsoft Gravity Forms Add-on 1.5.3 - 1.5.10 - Arbitrary File Uploadinfusionsoft gravity forms project · infusionsoft gravity formsEPSS46%4 exploitsPublished Oct 5, 2014
- CVE-2013-3632High 8.8The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter.openmediavault · openmediavaultEPSS57%3 exploitsPublished Sep 29, 2014
- CVE-2014-7187Critical 10.0Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the…gnu · bashEPSS60%2 exploitsPublished Sep 28, 2014
- CVE-2014-7186Critical 10.0The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the "redir_stack"…gnu · bashEPSS64%2 exploitsPublished Sep 28, 2014
- CVE-2014-6277Critical 10.0GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access, and untrusted-pointer read and write…gnu · bashEPSS64%3 exploitsPublished Sep 27, 2014
- CVE-2014-3609Medium 5.0HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via a request with crafted "Range headers with unidentifiable byte-range values."squid-cache · squidEPSS56%·Published Sep 11, 2014
- CVE-2014-5519High 7.5The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a device option in the edit[content] parameter to index.php/HeIp.phpwiki project · phpwikiEPSS65%4 exploitsPublished Sep 11, 2014
- CVE-2014-2624Critical 10.0Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2264.hp · network node manager iEPSS65%2 exploitsPublished Sep 10, 2014
- CVE-2014-0556Critical 10.0flash-plugin: multiple code execution or security bypass flaws (APSB14-21)adobe · adobe airEPSS85%2 exploitsPublished Sep 9, 2014
- CVE-2014-5377Medium 5.0ReadUsersFromMasterServlet in ManageEngine DeviceExpert before 5.9 build 5981 allows remote attackers to obtain user account credentials via a direct request.manageengine · device expertEPSS57%3 exploitsPublished Sep 4, 2014
- CVE-2014-5073High 7.5vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call.vmturbo · operations managerEPSS76%4 exploitsPublished Aug 29, 2014
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2014-9295 | Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to (1) the crypto_recv function when the Autokey Authentication feature is used, (2) the ctl_putdata function, and (3) the configure… ntp · ntp | High 7.5 | 79% | · | |
| CVE-2014-8142 | php: use after free vulnerability in unserialize() php · php | High 7.5 | 53% | · | |
| CVE-2014-7285 | The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting command strings into unspecified PHP scripts. symantec · web gateway | Medium 6.5 | 50% | 2 exploits | |
| CVE-2014-8500 | ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory consumption and named crash) via a large or infinite number of referrals. isc · bind | High 7.8 | 58% | · | |
| CVE-2014-10021 | WP Symposium <= 14.11 - Arbitrary File Upload wpsymposiumpro · wp symposium | Critical 9.8 | 59% | 4 exploits | |
| CVE-2014-7866 | Multiple directory traversal vulnerabilities in ZOHO ManageEngine OpManager 8 (build 88xx) through 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to write and execute arbitrary files via a .. zohocorp · manageengine opmanager | High 7.5 | 80% | 2 exploits | |
| CVE-2014-8601 | PowerDNS Recursor before 3.6.2 does not limit delegation chaining, which allows remote attackers to cause a denial of service ("performance degradations") via a large or infinite number of referrals, as demonstrated by resolving domains hosted by ezdns.it. powerdns · recursor | Medium 5.0 | 69% | · | |
| CVE-2014-4880 | Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote attackers to execute arbitrary code via an RTSP PLAY request with a long Authorization header. hikvision · dvr ds-7204 firmware | High 7.5 | 71% | 4 exploits | |
| CVE-2014-3996 | SQL injection vulnerability in the LinkViewFetchServlet servlet in ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90043, Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition… manageengine · desktop central | High 7.5 | 38% | 3 exploits | |
| CVE-2014-7868 | Multiple SQL injection vulnerabilities in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the (1) OPM_BVNAME parameter in a Delete operation to the… zohocorp · manageengine opmanager | High 7.5 | 73% | 3 exploits | |
| CVE-2014-6034 | Directory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe.FileCollector servlet in ZOHO ManageEngine OpManager 8.8 through 11.3, Social IT Plus 11.0, and IT360 10.4 and earlier allows remote attackers or remote authenticated users to write to… zohocorp · manageengine opmanager | Medium 5.0 | 79% | 3 exploits | |
| CVE-2014-5446 | Directory traversal vulnerability in the DisplayChartPDF servlet in ZOHO ManageEngine Netflow Analyzer 8.6 through 10.2 and IT360 10.3 allows remote attackers and remote authenticated users to read arbitrary files via a .. zohocorp · manageengine netflow analyzer | Medium 5.0 | 55% | 2 exploits | |
| CVE-2014-5445 | Multiple absolute path traversal vulnerabilities in ZOHO ManageEngine Netflow Analyzer 8.6 through 10.2 and IT360 10.3 allow remote attackers or remote authenticated users to read arbitrary files via a full pathname in the schFilePath parameter to the (1) CSVServlet or (2)… zohocorp · manageengine netflow analyzer | Medium 5.0 | 98% | 2 exploits | |
| CVE-2014-8424 | ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication. arris · vap2500 firmware | High 7.8 | 60% | 2 exploits | |
| CVE-2014-8423 | Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute arbitrary commands via unknown vectors. arris · vap2500 firmware | Critical 10.0 | 62% | 2 exploits | |
| CVE-2014-7141 | The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and crash) via a crafted type in an (1) ICMP or (2) ICMP6 packet. squid-cache · squid | Medium 6.4 | 76% | · | |
| CVE-2014-9034 | wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to cause a denial of service (CPU consumption) via a long password that is improperly handled during hashing, a similar issue to… wordpress · wordpress | Medium 5.3 | 83% | 2 exploits | |
| CVE-2014-8420 | The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors. sonicwall · analyzer | Critical 9.0 | 24% | 1 exploit | |
| CVE-2014-9735 | Slider Revolution < 3.0.96 & Showbiz Pro < 1.7.1 - Missing Authorization to Arbitrary File Upload themepunch · showbiz pro | Critical 9.8 | 76% | 2 exploits | |
| CVE-2014-9016 | The password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes (aka phpass) module 6.x-2.x before 6.x-2.1 for Drupal allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted request. drupal · drupal | Medium 5.0 | 82% | 1 exploit | |
| CVE-2014-8998 | lib/message.php in X7 Chat 2.0.0 through 2.0.5.1 allows remote authenticated users to execute arbitrary PHP code via a crafted HTTP header to index.php, which is processed by the preg_replace function with the eval switch. x7chat · x7 chat | Medium 6.5 | 36% | 4 exploits | |
| CVE-2014-8598 | The XML Import/Export plugin in MantisBT 1.2.x does not restrict access, which allows remote attackers to (1) upload arbitrary XML files via the import page or (2) obtain sensitive information via the export page. mantisbt · mantisbt | Medium 6.4 | 38% | 2 exploits | |
| CVE-2014-7146 | The XmlImportExport plugin in MantisBT 1.2.17 and earlier allows remote attackers to execute arbitrary PHP code via a crafted (1) description field or (2) issuelink attribute in an XML file, which is not properly handled when executing the preg_replace function with the e… mantisbt · mantisbt | High 7.5 | 51% | 3 exploits | |
| CVE-2014-8517 | The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 through 6.0.6, and 6.1 through 6.1.5 allows remote attackers to execute arbitrary commands via a | (pipe) character at the end of an HTTP redirect. netbsd · netbsd | High 7.5 | 69% | 3 exploits | |
| CVE-2014-2268 | views/Index.php in the Install module in vTiger 6.0 before Security Patch 2 does not properly restrict access, which allows remote attackers to re-install the application via a request that sets the X-Requested-With HTTP header, as demonstrated by executing arbitrary PHP code… vtiger · vtiger crm | Medium 5.0 | 31% | 3 exploits | |
| CVE-2014-8799 | DukaPress < 2.5.4 - Directory Traversal dukapress · dukapress | High 7.5 | 68% | 2 exploits | |
| CVE-2014-1635 | Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103_WW_1.10.17m allows remote attackers to execute arbitrary code via a long string in the jump parameter. belkin · n750 wireless router | Critical 10.0 | 67% | 3 exploits | |
| CVE-2014-6321 | Schannel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via crafted packets, aka… microsoft · windows 7 | Critical 10.0 | 96% | · | |
| CVE-2014-4076 | Microsoft Windows Server 2003 SP2 allows local users to gain privileges via a crafted IOCTL call to (1) tcpip.sys or (2) tcpip6.sys, aka "TCP/IP Elevation of Privilege Vulnerability." microsoft · windows server 2003 | High 7.2 | 23% | 4 exploits | |
| CVE-2014-8440 | flash-plugin: multiple code execution flaws (APSB14-24) adobe · air | Critical 10.0 | 82% | 3 exploits | |
| CVE-2014-7228 | Akeeba Restore (restore.php), as used in Joomla! joomla · joomla\! | High 7.5 | 55% | 2 exploits | |
| CVE-2013-7409 | Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a .m3u (playlist) file. allplayer · allplayer | High 7.5 | 68% | 15 exploits | |
| CVE-2014-6037 | Directory traversal vulnerability in the agentUpload servlet in ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 allows remote attackers to execute arbitrary code by uploading a ZIP file which contains an executable file with .. zohocorp · manageengine eventlog analyzer | High 7.5 | 84% | 6 exploits | |
| CVE-2014-3829 | displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) session_id or (2) template_id parameter, related to the command_line variable. merethis · centreon | Critical 10.0 | 80% | 2 exploits | |
| CVE-2014-3828 | Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allow remote attackers to execute arbitrary SQL commands via (1) the index_id parameter to views/graphs/common/makeXML_ListMetrics.php, (2) the sid parameter… merethis · centreon | Critical 10.0 | 73% | 3 exploits | |
| CVE-2014-5005 | Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers to execute arbitrary code via a .. zohocorp · manageengine desktop central | High 7.5 | 78% | 4 exploits | |
| CVE-2014-3704 | Drupalgeddon — Drupal core SQL injection drupal · drupal | High 7.5 | 100% | 13 exploits | |
| CVE-2014-0569 | flash-plugin: multiple code execution flaws (APSB14-22) adobe · air sdk | Critical 9.3 | 91% | 2 exploits | |
| CVE-2014-4872 | BMC Track-It! bmc · track-it\! | High 7.5 | 79% | 3 exploits | |
| CVE-2014-6446 | Infusionsoft Gravity Forms Add-on 1.5.3 - 1.5.10 - Arbitrary File Upload infusionsoft gravity forms project · infusionsoft gravity forms | Critical 9.8 | 46% | 4 exploits | |
| CVE-2013-3632 | The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter. openmediavault · openmediavault | High 8.8 | 57% | 3 exploits | |
| CVE-2014-7187 | Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the… gnu · bash | Critical 10.0 | 60% | 2 exploits | |
| CVE-2014-7186 | The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the "redir_stack"… gnu · bash | Critical 10.0 | 64% | 2 exploits | |
| CVE-2014-6277 | GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access, and untrusted-pointer read and write… gnu · bash | Critical 10.0 | 64% | 3 exploits | |
| CVE-2014-3609 | HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via a request with crafted "Range headers with unidentifiable byte-range values." squid-cache · squid | Medium 5.0 | 56% | · | |
| CVE-2014-5519 | The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a device option in the edit[content] parameter to index.php/HeIp. phpwiki project · phpwiki | High 7.5 | 65% | 4 exploits | |
| CVE-2014-2624 | Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2264. hp · network node manager i | Critical 10.0 | 65% | 2 exploits | |
| CVE-2014-0556 | flash-plugin: multiple code execution or security bypass flaws (APSB14-21) adobe · adobe air | Critical 10.0 | 85% | 2 exploits | |
| CVE-2014-5377 | ReadUsersFromMasterServlet in ManageEngine DeviceExpert before 5.9 build 5981 allows remote attackers to obtain user account credentials via a direct request. manageengine · device expert | Medium 5.0 | 57% | 3 exploits | |
| CVE-2014-5073 | vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call. vmturbo · operations manager | High 7.5 | 76% | 4 exploits |
Showing 2,501–2,550 of 3,918
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.