Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
3,918 vulnerabilities · highest exploit probability first
- CVE-2014-5460High 8.8Slideshow Gallery < 1.4.7 - Arbitrary File Uploadtribulant · tibulant slideshow galleryEPSS71%6 exploitsPublished Aug 28, 2014
- CVE-2014-5350Medium 5.0Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via a (1) ..bitdefender · gravityzoneEPSS64%1 exploitPublished Aug 19, 2014
- CVE-2014-3512High 7.5Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid SRP (1) g, (2) A, or (3) B parameter.openssl · opensslEPSS69%·Published Aug 13, 2014
- CVE-2014-3507Medium 5.0Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (memory consumption) via zero-length DTLS fragments that trigger improper handling of the return…openssl · opensslEPSS54%·Published Aug 13, 2014
- CVE-2014-3914Critical 10.0Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in Rocket ServerGraph 1.2 allows remote attackers to (1) create arbitrary files via a ..rocketsoftware · rocket servergraphEPSS73%3 exploitsPublished Aug 7, 2014
- CVE-2014-3560High 7.9NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in…samba · sambaEPSS56%·Published Aug 6, 2014
- CVE-2014-4725Critical 9.8MailPoet Newsletters <= 2.6.6 - Arbitrary File Uploadmailpoet · mailpoet newslettersEPSS61%2 exploitsPublished Jul 31, 2014
- CVE-2014-4971High 7.2Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted address in an IOCTL call, related to (1) the MQAC.sys driver in the MQ…microsoft · windows xpEPSS23%9 exploitsPublished Jul 26, 2014
- CVE-2014-4511High 7.5Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in the URI of a request for a (1) blame, (2) file, or (3) stats page, as demonstrated by requests to blame/master/, master/, and stats/master/.gitlist · gitlistEPSS83%7 exploitsPublished Jul 22, 2014
- CVE-2014-0226Medium 6.8Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers…apache · http serverEPSS86%1 exploitPublished Jul 20, 2014
- CVE-2014-2364High 7.5Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter, (8) GetColor, (9)…advantech · advantech webaccessEPSS61%3 exploitsPublished Jul 19, 2014
- CVE-2014-2623Critical 10.0Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors.hp · storage data protectorEPSS91%8 exploitsPublished Jul 17, 2014
- CVE-2014-4977Medium 6.5Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) selectedUserGroup parameter in a create new user request to cgi-bin/admin.cgi or the (2) user_id parameter in the changeUnit…sonicwall · scrutinizerEPSS75%3 exploitsPublished Jul 16, 2014
- CVE-2013-6117High 7.5Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perform other actions via a request to TCP port 37777.dahuasecurity · dvr firmwareEPSS70%1 exploitPublished Jul 11, 2014
- CVE-2014-3888High 8.3Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled,…yokogawa · exaopcEPSS62%3 exploitsPublished Jul 10, 2014
- CVE-2013-7389Medium 4.3Multiple cross-site scripting (XSS) vulnerabilities in D-Link DIR-645 Router (Rev.dlink · dir-645EPSS28%3 exploitsPublished Jul 7, 2014
- CVE-2013-6221Critical 10.0Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server is enabled, allows remote attackers to create arbitrary files and consequently execute arbitrary code via unspecified vectors, aka…hp · service virtualizationEPSS78%1 exploitPublished Jun 18, 2014
- CVE-2014-3804Critical 10.0The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) update_system_info_debian_package, (2) ossec_task, (3) set_ossim_setup admin_ip, (4) sync_rserver, or (5) set_ossim_setup framework_ip request, a…alienvault · open source security information managementEPSS72%3 exploitsPublished Jun 13, 2014
- CVE-2011-3625Critical 9.3Stack-based buffer overflow in the sub_read_line_sami function in subreader.c in MPlayer, as used in SMPlayer 0.6.9, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a SAMI subtitle file.ricardo villalba · smplayerEPSS24%2 exploitsPublished Jun 11, 2014
- CVE-2014-1823Medium 4.3Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2010 and 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted URL containing a valid meeting ID, aka "Lync Server Content Sanitization Vulnerability."microsoft · lync serverEPSS51%·Published Jun 11, 2014
- CVE-2014-1773Critical 9.3Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1783,…microsoft · internet explorerEPSS63%1 exploitPublished Jun 11, 2014
- CVE-2014-0282Critical 9.3Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1775,…microsoft · internet explorerEPSS51%2 exploitsPublished Jun 11, 2014
- CVE-2014-3470Medium 4.3The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by…mariadb · mariadbEPSS86%·Published Jun 5, 2014
- CVE-2014-0224High 7.4OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and…openssl · opensslEPSS95%·Published Jun 5, 2014
- CVE-2014-0221Medium 4.3The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake.mariadb · mariadbEPSS88%·Published Jun 5, 2014
- CVE-2014-0195Medium 6.8The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows remote attackers to execute arbitrary code or cause a denial of…mariadb · mariadbEPSS100%·Published Jun 5, 2014
- CVE-2014-3913Critical 10.0Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows remote attackers to execute arbitrary code via a request for a non-existent file.ericom · accessnow serverEPSS61%3 exploitsPublished Jun 4, 2014
- CVE-2013-1412High 7.5DataLife Engine (DLE) 9.7 allows remote attackers to execute arbitrary PHP code via the catlist[] parameter to engine/preview.php, which is used in a preg_replace function call with an e modifier.dleviet · datalife engineEPSS40%5 exploitsPublished Jun 2, 2014
- CVE-2014-3936Critical 10.0Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev.dlink · dsp-w215EPSS77%3 exploitsPublished Jun 2, 2014
- CVE-2014-0239Medium 5.0The internal DNS server in Samba 4.x before 4.0.18 does not check the QR field in the header section of an incoming DNS message before sending a response, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged response packet that…samba · sambaEPSS67%·Published May 28, 2014
- CVE-2013-5036High 7.5The Square Squash allows remote attackers to execute arbitrary code via a YAML document in the (1) namespace parameter to the deobfuscation function or (2) sourcemap parameter to the sourcemap function in app/controllers/api/v1_controller.rb.squash · square squashEPSS46%3 exploitsPublished May 27, 2014
- CVE-2010-5299Medium 6.8Stack-based buffer overflow in MicroP 0.1.1.1600 allows remote attackers to execute arbitrary code via a crafted .mppl file.microp project · micropEPSS34%8 exploitsPublished May 22, 2014
- CVE-2014-3789High 7.5GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary commands via unspecified vectors.cogentdatahub · cogent datahubEPSS63%2 exploitsPublished May 22, 2014
- CVE-2014-3791Critical 10.0Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 6.8 allows remote attackers to execute arbitrary code via a long string in a cookie UserID parameter to vfolder.ghp.efssoft · easy file sharing web serverEPSS79%4 exploitsPublished May 20, 2014
- CVE-2014-1649High 7.9The server in Symantec Workspace Streaming (SWS) before 7.5.0.749 allows remote attackers to access files and functionality by sending a crafted XMLRPC request over HTTPS.symantec · workspace streamingEPSS42%2 exploitsPublished May 16, 2014
- CVE-2014-0782High 8.3Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03.00 and earlier, Exaopc R3.71.02 and earlier, B/M9000CS…yokogawa · exaopcEPSS57%2 exploitsPublished May 16, 2014
- CVE-2013-4730High 10.0Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USER command.pcman · ftp serverEPSS67%13 exploitsPublished May 15, 2014
- CVE-2013-4468Medium 6.5VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in the extension parameter in an OriginateVDRelogin action to manager_send.php.vicidial · vicidialEPSS32%3 exploitsPublished May 14, 2014
- CVE-2013-4490Medium 6.5The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the public key.gitlab · gitlabEPSS42%2 exploitsPublished May 13, 2014
- CVE-2014-2928High 7.1The iControl API in F5 BIG-IP LTM, APM, ASM, GTM, Link Controller, and PSM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, BIG-IP AAM 11.4.0 through 11.5.1, BIG-IP AFM and PEM 11.3.0 through 11.5.1, BIG-IP Analytics 11.0.0 through 11.5.1, BIG-IP Edge Gateway, WebAccelerator,…f5 · big-ip edge gatewayEPSS40%3 exploitsPublished May 12, 2014
- CVE-2014-0515Critical 10.0flash-plugin: buffer overflow vulnerability leads to arbitrary code execution (APSB14-13)adobe · flash playerEPSS94%2 exploitsPublished Apr 28, 2014
- CVE-2014-1762High 7.5Unspecified vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code with medium-integrity privileges and bypass a sandbox protection mechanism via unknown vectors, as demonstrated by ZDI during a Pwn4Fun competition at…microsoft · internet explorerEPSS71%1 exploitPublished Apr 27, 2014
- CVE-2014-0644High 7.8EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, as demonstrated by…emc · cloud tiering applianceEPSS53%1 exploitPublished Apr 16, 2014
- CVE-2014-2424Medium 4.0Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users to affect integrity via vectors related to CEP system.oracle · fusion middlewareEPSS48%2 exploitsPublished Apr 15, 2014
- CVE-2014-0514Critical 9.3The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of JavaScript, which allows remote attackers to execute arbitrary code via a crafted PDF document, a related issue to CVE-2012-6636.adobe · adobe readerEPSS72%3 exploitsPublished Apr 15, 2014
- CVE-2013-5704Medium 5.0The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding.apache · http serverEPSS53%·Published Apr 15, 2014
- CVE-2014-2850High 8.5The network interface configuration page (netinterface) in Sophos Web Appliance before 3.8.2 allows remote administrators to execute arbitrary commands via shell metacharacters in the address parameter.sophos · web applianceEPSS58%3 exploitsPublished Apr 11, 2014
- CVE-2014-2849High 8.5The Change Password dialog box (change_password) in Sophos Web Appliance before 3.8.2 allows remote authenticated users to change the admin user password via a crafted request.sophos · web applianceEPSS61%3 exploitsPublished Apr 11, 2014
- CVE-2014-1691High 7.5The framework/Util/lib/Horde/Variables.php script in the Util library in Horde before 5.1.1 allows remote attackers to conduct object injection attacks and execute arbitrary PHP code via a crafted serialized object in the _formvars form.horde · horde application frameworkEPSS43%2 exploitsPublished Apr 1, 2014
- CVE-2013-2641Medium 5.0Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read arbitrary files via the id parameter.sophos · web applianceEPSS71%1 exploitPublished Mar 18, 2014
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2014-5460 | Slideshow Gallery < 1.4.7 - Arbitrary File Upload tribulant · tibulant slideshow gallery | High 8.8 | 71% | 6 exploits | |
| CVE-2014-5350 | Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via a (1) .. bitdefender · gravityzone | Medium 5.0 | 64% | 1 exploit | |
| CVE-2014-3512 | Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid SRP (1) g, (2) A, or (3) B parameter. openssl · openssl | High 7.5 | 69% | · | |
| CVE-2014-3507 | Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (memory consumption) via zero-length DTLS fragments that trigger improper handling of the return… openssl · openssl | Medium 5.0 | 54% | · | |
| CVE-2014-3914 | Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in Rocket ServerGraph 1.2 allows remote attackers to (1) create arbitrary files via a .. rocketsoftware · rocket servergraph | Critical 10.0 | 73% | 3 exploits | |
| CVE-2014-3560 | NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in… samba · samba | High 7.9 | 56% | · | |
| CVE-2014-4725 | MailPoet Newsletters <= 2.6.6 - Arbitrary File Upload mailpoet · mailpoet newsletters | Critical 9.8 | 61% | 2 exploits | |
| CVE-2014-4971 | Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted address in an IOCTL call, related to (1) the MQAC.sys driver in the MQ… microsoft · windows xp | High 7.2 | 23% | 9 exploits | |
| CVE-2014-4511 | Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in the URI of a request for a (1) blame, (2) file, or (3) stats page, as demonstrated by requests to blame/master/, master/, and stats/master/. gitlist · gitlist | High 7.5 | 83% | 7 exploits | |
| CVE-2014-0226 | Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers… apache · http server | Medium 6.8 | 86% | 1 exploit | |
| CVE-2014-2364 | Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter, (8) GetColor, (9)… advantech · advantech webaccess | High 7.5 | 61% | 3 exploits | |
| CVE-2014-2623 | Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors. hp · storage data protector | Critical 10.0 | 91% | 8 exploits | |
| CVE-2014-4977 | Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) selectedUserGroup parameter in a create new user request to cgi-bin/admin.cgi or the (2) user_id parameter in the changeUnit… sonicwall · scrutinizer | Medium 6.5 | 75% | 3 exploits | |
| CVE-2013-6117 | Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perform other actions via a request to TCP port 37777. dahuasecurity · dvr firmware | High 7.5 | 70% | 1 exploit | |
| CVE-2014-3888 | Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled,… yokogawa · exaopc | High 8.3 | 62% | 3 exploits | |
| CVE-2013-7389 | Multiple cross-site scripting (XSS) vulnerabilities in D-Link DIR-645 Router (Rev. dlink · dir-645 | Medium 4.3 | 28% | 3 exploits | |
| CVE-2013-6221 | Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server is enabled, allows remote attackers to create arbitrary files and consequently execute arbitrary code via unspecified vectors, aka… hp · service virtualization | Critical 10.0 | 78% | 1 exploit | |
| CVE-2014-3804 | The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) update_system_info_debian_package, (2) ossec_task, (3) set_ossim_setup admin_ip, (4) sync_rserver, or (5) set_ossim_setup framework_ip request, a… alienvault · open source security information management | Critical 10.0 | 72% | 3 exploits | |
| CVE-2011-3625 | Stack-based buffer overflow in the sub_read_line_sami function in subreader.c in MPlayer, as used in SMPlayer 0.6.9, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a SAMI subtitle file. ricardo villalba · smplayer | Critical 9.3 | 24% | 2 exploits | |
| CVE-2014-1823 | Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2010 and 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted URL containing a valid meeting ID, aka "Lync Server Content Sanitization Vulnerability." microsoft · lync server | Medium 4.3 | 51% | · | |
| CVE-2014-1773 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1783,… microsoft · internet explorer | Critical 9.3 | 63% | 1 exploit | |
| CVE-2014-0282 | Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1775,… microsoft · internet explorer | Critical 9.3 | 51% | 2 exploits | |
| CVE-2014-3470 | The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by… mariadb · mariadb | Medium 4.3 | 86% | · | |
| CVE-2014-0224 | OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and… openssl · openssl | High 7.4 | 95% | · | |
| CVE-2014-0221 | The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake. mariadb · mariadb | Medium 4.3 | 88% | · | |
| CVE-2014-0195 | The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows remote attackers to execute arbitrary code or cause a denial of… mariadb · mariadb | Medium 6.8 | 100% | · | |
| CVE-2014-3913 | Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows remote attackers to execute arbitrary code via a request for a non-existent file. ericom · accessnow server | Critical 10.0 | 61% | 3 exploits | |
| CVE-2013-1412 | DataLife Engine (DLE) 9.7 allows remote attackers to execute arbitrary PHP code via the catlist[] parameter to engine/preview.php, which is used in a preg_replace function call with an e modifier. dleviet · datalife engine | High 7.5 | 40% | 5 exploits | |
| CVE-2014-3936 | Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. dlink · dsp-w215 | Critical 10.0 | 77% | 3 exploits | |
| CVE-2014-0239 | The internal DNS server in Samba 4.x before 4.0.18 does not check the QR field in the header section of an incoming DNS message before sending a response, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged response packet that… samba · samba | Medium 5.0 | 67% | · | |
| CVE-2013-5036 | The Square Squash allows remote attackers to execute arbitrary code via a YAML document in the (1) namespace parameter to the deobfuscation function or (2) sourcemap parameter to the sourcemap function in app/controllers/api/v1_controller.rb. squash · square squash | High 7.5 | 46% | 3 exploits | |
| CVE-2010-5299 | Stack-based buffer overflow in MicroP 0.1.1.1600 allows remote attackers to execute arbitrary code via a crafted .mppl file. microp project · microp | Medium 6.8 | 34% | 8 exploits | |
| CVE-2014-3789 | GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary commands via unspecified vectors. cogentdatahub · cogent datahub | High 7.5 | 63% | 2 exploits | |
| CVE-2014-3791 | Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 6.8 allows remote attackers to execute arbitrary code via a long string in a cookie UserID parameter to vfolder.ghp. efssoft · easy file sharing web server | Critical 10.0 | 79% | 4 exploits | |
| CVE-2014-1649 | The server in Symantec Workspace Streaming (SWS) before 7.5.0.749 allows remote attackers to access files and functionality by sending a crafted XMLRPC request over HTTPS. symantec · workspace streaming | High 7.9 | 42% | 2 exploits | |
| CVE-2014-0782 | Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03.00 and earlier, Exaopc R3.71.02 and earlier, B/M9000CS… yokogawa · exaopc | High 8.3 | 57% | 2 exploits | |
| CVE-2013-4730 | Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USER command. pcman · ftp server | High 10.0 | 67% | 13 exploits | |
| CVE-2013-4468 | VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in the extension parameter in an OriginateVDRelogin action to manager_send.php. vicidial · vicidial | Medium 6.5 | 32% | 3 exploits | |
| CVE-2013-4490 | The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the public key. gitlab · gitlab | Medium 6.5 | 42% | 2 exploits | |
| CVE-2014-2928 | The iControl API in F5 BIG-IP LTM, APM, ASM, GTM, Link Controller, and PSM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, BIG-IP AAM 11.4.0 through 11.5.1, BIG-IP AFM and PEM 11.3.0 through 11.5.1, BIG-IP Analytics 11.0.0 through 11.5.1, BIG-IP Edge Gateway, WebAccelerator,… f5 · big-ip edge gateway | High 7.1 | 40% | 3 exploits | |
| CVE-2014-0515 | flash-plugin: buffer overflow vulnerability leads to arbitrary code execution (APSB14-13) adobe · flash player | Critical 10.0 | 94% | 2 exploits | |
| CVE-2014-1762 | Unspecified vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code with medium-integrity privileges and bypass a sandbox protection mechanism via unknown vectors, as demonstrated by ZDI during a Pwn4Fun competition at… microsoft · internet explorer | High 7.5 | 71% | 1 exploit | |
| CVE-2014-0644 | EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, as demonstrated by… emc · cloud tiering appliance | High 7.8 | 53% | 1 exploit | |
| CVE-2014-2424 | Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users to affect integrity via vectors related to CEP system. oracle · fusion middleware | Medium 4.0 | 48% | 2 exploits | |
| CVE-2014-0514 | The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of JavaScript, which allows remote attackers to execute arbitrary code via a crafted PDF document, a related issue to CVE-2012-6636. adobe · adobe reader | Critical 9.3 | 72% | 3 exploits | |
| CVE-2013-5704 | The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. apache · http server | Medium 5.0 | 53% | · | |
| CVE-2014-2850 | The network interface configuration page (netinterface) in Sophos Web Appliance before 3.8.2 allows remote administrators to execute arbitrary commands via shell metacharacters in the address parameter. sophos · web appliance | High 8.5 | 58% | 3 exploits | |
| CVE-2014-2849 | The Change Password dialog box (change_password) in Sophos Web Appliance before 3.8.2 allows remote authenticated users to change the admin user password via a crafted request. sophos · web appliance | High 8.5 | 61% | 3 exploits | |
| CVE-2014-1691 | The framework/Util/lib/Horde/Variables.php script in the Util library in Horde before 5.1.1 allows remote attackers to conduct object injection attacks and execute arbitrary PHP code via a crafted serialized object in the _formvars form. horde · horde application framework | High 7.5 | 43% | 2 exploits | |
| CVE-2013-2641 | Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read arbitrary files via the id parameter. sophos · web appliance | Medium 5.0 | 71% | 1 exploit |
Showing 2,551–2,600 of 3,918
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.