Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
3,918 vulnerabilities · highest exploit probability first
- CVE-2013-4557High 7.5The Security Screen (_core_/securite/ecran_securite.php) before 1.1.8 for SPIP, as used in SPIP 3.0.x before 3.0.12, allows remote attackers to execute arbitrary PHP via the connect parameter.spip · spipEPSS25%1 exploitPublished Nov 18, 2013
- CVE-2013-4837Critical 10.0Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1832.hp · loadrunnerEPSS63%2 exploitsPublished Nov 4, 2013
- CVE-2013-4835High 7.5The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary code via a direct request to the issueSiebelCmd method, aka ZDI-CAN-1765.hp · sitescopeEPSS71%2 exploitsPublished Nov 4, 2013
- CVE-2013-6129High 7.5The install/upgrade.php scripts in vBulletin 4.1 and 5 allow remote attackers to create administrative accounts via the customerid, htmldata[password], htmldata[confirmpassword], and htmldata[email] parameters, as exploited in the wild in October 2013.vbulletin · vbulletinEPSS52%1 exploitPublished Oct 19, 2013
- CVE-2013-4822Critical 10.0Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent Management System Software Module (aka BIMS) allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1606.hp · imc branch intelligent management system software moduleEPSS63%2 exploitsPublished Oct 13, 2013
- CVE-2013-2578Critical 10.0cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the ServerName parameter and (2)…tp-link · tl-sc3130EPSS74%2 exploitsPublished Oct 11, 2013
- CVE-2013-5576Medium 6.8administrator/components/com_media/helpers/media.php in the media manager in Joomla!joomla · joomla\!EPSS48%3 exploitsPublished Oct 9, 2013
- CVE-2013-3861High 7.8Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 allows remote attackers to cause a denial of service (application crash or hang) via crafted character sequences in JSON data, aka "JSON Parsing Vulnerability."microsoft · .net frameworkEPSS82%·Published Oct 9, 2013
- CVE-2013-3128Critical 9.3The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5, allow remote attackers…microsoft · .net frameworkEPSS50%·Published Oct 9, 2013
- CVE-2013-5486Critical 10.0Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036.cisco · prime data center network managerEPSS76%3 exploitsPublished Sep 23, 2013
- CVE-2013-4341Medium 4.3Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 allow remote attackers to inject arbitrary web script or HTML via a crafted blog link within an RSS feed.moodle · moodleEPSS22%3 exploitsPublished Sep 16, 2013
- CVE-2013-4811Critical 10.0UpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the adCert argument, which allows remote attackers to upload .jsp files and consequently…hp · identity driven managerEPSS71%2 exploitsPublished Sep 16, 2013
- CVE-2013-4812Critical 10.0UpdateCertificatesServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the fileName argument, which allows remote attackers to upload .jsp files and consequently…hp · identity driven managerEPSS52%2 exploitsPublished Sep 16, 2013
- CVE-2013-3205Critical 9.3Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."microsoft · internet explorerEPSS66%2 exploitsPublished Sep 11, 2013
- CVE-2013-3180Medium 4.3Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 and SP2 and 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted POST request, aka "POST XSS Vulnerability."microsoft · sharepoint serverEPSS66%·Published Sep 11, 2013
- CVE-2013-0810High 8.1Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, and Windows Server 2008 SP2 allow remote attackers to execute arbitrary code via a crafted screensaver in a theme file, aka "Windows Theme File Remote Code Execution Vulnerability."microsoft · windows server 2003EPSS60%2 exploitsPublished Sep 11, 2013
- CVE-2013-0081Medium 5.0Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 do not properly process unassigned workflows, which allows remote attackers to cause a denial of service (W3WP process hang) via a crafted URL, aka "SharePoint Denial of…microsoft · sharepoint portal serverEPSS76%·Published Sep 11, 2013
- CVE-2013-4983Critical 10.0The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to end-user/index.php.sophos · web appliance firmwareEPSS90%3 exploitsPublished Sep 10, 2013
- CVE-2013-2068Critical 9.4cfme: CFME 2.0 multiple zip file upload path traversal vulnerabilitiesredhat · cloudforms management engineEPSS59%2 exploitsPublished Sep 4, 2013
- CVE-2013-3184Critical 9.3Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."microsoft · internet explorerEPSS58%2 exploitsPublished Aug 14, 2013
- CVE-2013-3183High 7.8The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly perform memory allocation for inbound ICMPv6 packets, which allows remote attackers to cause a denial of…microsoft · windows 7EPSS78%·Published Aug 14, 2013
- CVE-2013-3182High 7.8The Windows NAT Driver (aka winnat) service in Microsoft Windows Server 2012 does not properly validate memory addresses during the processing of ICMP packets, which allows remote attackers to cause a denial of service (memory corruption and system hang) via crafted packets, aka…microsoft · windows server 2012EPSS95%·Published Aug 14, 2013
- CVE-2013-1710Critical 10.0Mozilla: CRMF requests allow for code execution and XSS attacks (MFSA 2013-69)mozilla · firefoxEPSS40%3 exploitsPublished Aug 7, 2013
- CVE-2013-4124Medium 5.0Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.samba · sambaEPSS69%1 exploitPublished Aug 6, 2013
- CVE-2013-5019Critical 10.0Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resource name in an HTTP request.vector · ultra mini httpdEPSS64%8 exploitsPublished Jul 31, 2013
- CVE-2013-2367Critical 10.0Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1678.hp · sitescopeEPSS69%2 exploitsPublished Jul 31, 2013
- CVE-2013-4800Critical 9.3Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1735.hp · loadrunnerEPSS39%2 exploitsPublished Jul 29, 2013
- CVE-2013-4798Critical 10.0Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1705.hp · loadrunnerEPSS67%2 exploitsPublished Jul 29, 2013
- CVE-2013-2370High 7.5Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1671.hp · loadrunnerEPSS62%2 exploitsPublished Jul 29, 2013
- CVE-2013-2028High 7.5The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness…f5 · nginxEPSS87%6 exploitsPublished Jul 18, 2013
- CVE-2013-3763Medium 5.5Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 7.4.0 and 7.5.1.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2013-3764.oracle · fusion middlewareEPSS60%2 exploitsPublished Jul 17, 2013
- CVE-2013-4123Medium 5.0client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote attackers to cause a denial of service via a crafted port number in a HTTP Host header.squid-cache · squidEPSS80%1 exploitPublished Jul 13, 2013
- CVE-2013-1362High 7.5Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor (NRPE) before 2.14 might allow remote attackers to execute arbitrary shell commands via "$()" shell metacharacters, which are processed by bash.nagios · remote plug in executorEPSS66%2 exploitsPublished Jul 9, 2013
- CVE-2013-4786High 7.5freeipmi: Leakage of password hashes via RAKP authenticationintel · intelligent platform management interfaceEPSS79%1 exploitPublished Jul 8, 2013
- CVE-2013-3563High 7.5Stack-based buffer overflow in db_netserver in Lianja SQL Server before 1.0.0RC5.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted string to TCP port 8001.lianja · lianja sql serverEPSS49%3 exploitsPublished Jul 4, 2013
- CVE-2013-2343Critical 10.0Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1510.hp · lefthand virtual san appliance hydraEPSS62%2 exploitsPublished Jul 2, 2013
- CVE-2013-2460Critical 9.3OpenJDK: tracing insufficient access checks (Serviceability, 8010209)oracle · jreEPSS70%2 exploitsPublished Jun 18, 2013
- CVE-2013-1571Medium 4.3OpenJDK: Frame injection in generated HTML (Javadoc, 8012375)oracle · javafxEPSS67%·Published Jun 18, 2013
- CVE-2013-3520High 7.5VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary code via unspecified vectors.vmware · vcenter chargeback managerEPSS56%2 exploitsPublished Jun 17, 2013
- CVE-2013-3576Critical 9.0ginkgosnmp.inc in HP System Management Homepage (SMH) allows remote authenticated users to execute arbitrary commands via shell metacharacters in the PATH_INFO to smhutil/snmpchp.php.en.hp · system management homepageEPSS67%2 exploitsPublished Jun 14, 2013
- CVE-2013-3138High 7.1Integer overflow in the TCP/IP kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (system hang) via crafted TCP packets, aka…microsoft · windows 7EPSS59%·Published Jun 12, 2013
- CVE-2013-4074Medium 5.0The dissect_capwap_data function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 incorrectly uses a -1 data value to represent an error condition, which allows remote attackers to cause a denial of service…wireshark · wiresharkEPSS61%3 exploitsPublished Jun 9, 2013
- CVE-2013-2121Medium 6.0Foreman: app/controllers/bookmarks_controller.rb remote code executiontheforeman · foremanEPSS25%3 exploitsPublished Jun 7, 2013
- CVE-2013-2335Critical 10.0Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1733.hp · storage data protectorEPSS61%·Published Jun 6, 2013
- CVE-2013-2333Critical 10.0Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1680.hp · storage data protectorEPSS90%2 exploitsPublished Jun 6, 2013
- CVE-2013-2332Critical 10.0Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1654.hp · storage data protectorEPSS61%·Published Jun 6, 2013
- CVE-2013-2331Critical 10.0Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1652.hp · storage data protectorEPSS61%·Published Jun 6, 2013
- CVE-2013-2330Critical 10.0Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1638.hp · storage data protectorEPSS61%·Published Jun 6, 2013
- CVE-2013-2329Critical 10.0Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1637.hp · storage data protectorEPSS61%·Published Jun 6, 2013
- CVE-2013-2328Critical 10.0Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1636.hp · storage data protectorEPSS61%·Published Jun 6, 2013
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2013-4557 | The Security Screen (_core_/securite/ecran_securite.php) before 1.1.8 for SPIP, as used in SPIP 3.0.x before 3.0.12, allows remote attackers to execute arbitrary PHP via the connect parameter. spip · spip | High 7.5 | 25% | 1 exploit | |
| CVE-2013-4837 | Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1832. hp · loadrunner | Critical 10.0 | 63% | 2 exploits | |
| CVE-2013-4835 | The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary code via a direct request to the issueSiebelCmd method, aka ZDI-CAN-1765. hp · sitescope | High 7.5 | 71% | 2 exploits | |
| CVE-2013-6129 | The install/upgrade.php scripts in vBulletin 4.1 and 5 allow remote attackers to create administrative accounts via the customerid, htmldata[password], htmldata[confirmpassword], and htmldata[email] parameters, as exploited in the wild in October 2013. vbulletin · vbulletin | High 7.5 | 52% | 1 exploit | |
| CVE-2013-4822 | Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent Management System Software Module (aka BIMS) allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1606. hp · imc branch intelligent management system software module | Critical 10.0 | 63% | 2 exploits | |
| CVE-2013-2578 | cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the ServerName parameter and (2)… tp-link · tl-sc3130 | Critical 10.0 | 74% | 2 exploits | |
| CVE-2013-5576 | administrator/components/com_media/helpers/media.php in the media manager in Joomla! joomla · joomla\! | Medium 6.8 | 48% | 3 exploits | |
| CVE-2013-3861 | Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 allows remote attackers to cause a denial of service (application crash or hang) via crafted character sequences in JSON data, aka "JSON Parsing Vulnerability." microsoft · .net framework | High 7.8 | 82% | · | |
| CVE-2013-3128 | The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5, allow remote attackers… microsoft · .net framework | Critical 9.3 | 50% | · | |
| CVE-2013-5486 | Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. cisco · prime data center network manager | Critical 10.0 | 76% | 3 exploits | |
| CVE-2013-4341 | Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 allow remote attackers to inject arbitrary web script or HTML via a crafted blog link within an RSS feed. moodle · moodle | Medium 4.3 | 22% | 3 exploits | |
| CVE-2013-4811 | UpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the adCert argument, which allows remote attackers to upload .jsp files and consequently… hp · identity driven manager | Critical 10.0 | 71% | 2 exploits | |
| CVE-2013-4812 | UpdateCertificatesServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the fileName argument, which allows remote attackers to upload .jsp files and consequently… hp · identity driven manager | Critical 10.0 | 52% | 2 exploits | |
| CVE-2013-3205 | Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 66% | 2 exploits | |
| CVE-2013-3180 | Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 and SP2 and 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted POST request, aka "POST XSS Vulnerability." microsoft · sharepoint server | Medium 4.3 | 66% | · | |
| CVE-2013-0810 | Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, and Windows Server 2008 SP2 allow remote attackers to execute arbitrary code via a crafted screensaver in a theme file, aka "Windows Theme File Remote Code Execution Vulnerability." microsoft · windows server 2003 | High 8.1 | 60% | 2 exploits | |
| CVE-2013-0081 | Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 do not properly process unassigned workflows, which allows remote attackers to cause a denial of service (W3WP process hang) via a crafted URL, aka "SharePoint Denial of… microsoft · sharepoint portal server | Medium 5.0 | 76% | · | |
| CVE-2013-4983 | The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to end-user/index.php. sophos · web appliance firmware | Critical 10.0 | 90% | 3 exploits | |
| CVE-2013-2068 | cfme: CFME 2.0 multiple zip file upload path traversal vulnerabilities redhat · cloudforms management engine | Critical 9.4 | 59% | 2 exploits | |
| CVE-2013-3184 | Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 58% | 2 exploits | |
| CVE-2013-3183 | The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly perform memory allocation for inbound ICMPv6 packets, which allows remote attackers to cause a denial of… microsoft · windows 7 | High 7.8 | 78% | · | |
| CVE-2013-3182 | The Windows NAT Driver (aka winnat) service in Microsoft Windows Server 2012 does not properly validate memory addresses during the processing of ICMP packets, which allows remote attackers to cause a denial of service (memory corruption and system hang) via crafted packets, aka… microsoft · windows server 2012 | High 7.8 | 95% | · | |
| CVE-2013-1710 | Mozilla: CRMF requests allow for code execution and XSS attacks (MFSA 2013-69) mozilla · firefox | Critical 10.0 | 40% | 3 exploits | |
| CVE-2013-4124 | Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet. samba · samba | Medium 5.0 | 69% | 1 exploit | |
| CVE-2013-5019 | Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resource name in an HTTP request. vector · ultra mini httpd | Critical 10.0 | 64% | 8 exploits | |
| CVE-2013-2367 | Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1678. hp · sitescope | Critical 10.0 | 69% | 2 exploits | |
| CVE-2013-4800 | Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1735. hp · loadrunner | Critical 9.3 | 39% | 2 exploits | |
| CVE-2013-4798 | Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1705. hp · loadrunner | Critical 10.0 | 67% | 2 exploits | |
| CVE-2013-2370 | Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1671. hp · loadrunner | High 7.5 | 62% | 2 exploits | |
| CVE-2013-2028 | The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness… f5 · nginx | High 7.5 | 87% | 6 exploits | |
| CVE-2013-3763 | Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 7.4.0 and 7.5.1.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2013-3764. oracle · fusion middleware | Medium 5.5 | 60% | 2 exploits | |
| CVE-2013-4123 | client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote attackers to cause a denial of service via a crafted port number in a HTTP Host header. squid-cache · squid | Medium 5.0 | 80% | 1 exploit | |
| CVE-2013-1362 | Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor (NRPE) before 2.14 might allow remote attackers to execute arbitrary shell commands via "$()" shell metacharacters, which are processed by bash. nagios · remote plug in executor | High 7.5 | 66% | 2 exploits | |
| CVE-2013-4786 | freeipmi: Leakage of password hashes via RAKP authentication intel · intelligent platform management interface | High 7.5 | 79% | 1 exploit | |
| CVE-2013-3563 | Stack-based buffer overflow in db_netserver in Lianja SQL Server before 1.0.0RC5.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted string to TCP port 8001. lianja · lianja sql server | High 7.5 | 49% | 3 exploits | |
| CVE-2013-2343 | Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1510. hp · lefthand virtual san appliance hydra | Critical 10.0 | 62% | 2 exploits | |
| CVE-2013-2460 | OpenJDK: tracing insufficient access checks (Serviceability, 8010209) oracle · jre | Critical 9.3 | 70% | 2 exploits | |
| CVE-2013-1571 | OpenJDK: Frame injection in generated HTML (Javadoc, 8012375) oracle · javafx | Medium 4.3 | 67% | · | |
| CVE-2013-3520 | VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary code via unspecified vectors. vmware · vcenter chargeback manager | High 7.5 | 56% | 2 exploits | |
| CVE-2013-3576 | ginkgosnmp.inc in HP System Management Homepage (SMH) allows remote authenticated users to execute arbitrary commands via shell metacharacters in the PATH_INFO to smhutil/snmpchp.php.en. hp · system management homepage | Critical 9.0 | 67% | 2 exploits | |
| CVE-2013-3138 | Integer overflow in the TCP/IP kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (system hang) via crafted TCP packets, aka… microsoft · windows 7 | High 7.1 | 59% | · | |
| CVE-2013-4074 | The dissect_capwap_data function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 incorrectly uses a -1 data value to represent an error condition, which allows remote attackers to cause a denial of service… wireshark · wireshark | Medium 5.0 | 61% | 3 exploits | |
| CVE-2013-2121 | Foreman: app/controllers/bookmarks_controller.rb remote code execution theforeman · foreman | Medium 6.0 | 25% | 3 exploits | |
| CVE-2013-2335 | Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1733. hp · storage data protector | Critical 10.0 | 61% | · | |
| CVE-2013-2333 | Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1680. hp · storage data protector | Critical 10.0 | 90% | 2 exploits | |
| CVE-2013-2332 | Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1654. hp · storage data protector | Critical 10.0 | 61% | · | |
| CVE-2013-2331 | Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1652. hp · storage data protector | Critical 10.0 | 61% | · | |
| CVE-2013-2330 | Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1638. hp · storage data protector | Critical 10.0 | 61% | · | |
| CVE-2013-2329 | Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1637. hp · storage data protector | Critical 10.0 | 61% | · | |
| CVE-2013-2328 | Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1636. hp · storage data protector | Critical 10.0 | 61% | · |
Showing 2,651–2,700 of 3,918
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.