Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
3,918 vulnerabilities · highest exploit probability first
- CVE-2013-2327Critical 10.0Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1635.hp · storage data protectorEPSS61%·Published Jun 6, 2013
- CVE-2013-2326Critical 10.0Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1634.hp · storage data protectorEPSS61%·Published Jun 6, 2013
- CVE-2013-2325Critical 10.0Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1633.hp · storage data protectorEPSS61%·Published Jun 6, 2013
- CVE-2013-0136High 8.5Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow remote authenticated users to upload and execute arbitrary programs, read arbitrary files, or cause a denial of service (file deletion or renaming) via (1)…mutiny · mutinyEPSS40%2 exploitsPublished Jun 1, 2013
- CVE-2013-1017Critical 9.3Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted dref atoms in a movie file.apple · quicktimeEPSS33%3 exploitsPublished May 24, 2013
- CVE-2013-1305High 7.8HTTP.sys in Microsoft Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (infinite loop) via a crafted HTTP header, aka "HTTP.sys Denial of Service Vulnerability."microsoft · windows 8EPSS55%·Published May 15, 2013
- CVE-2013-2730Critical 10.0acroread: multiple code execution flaws (APSB13-15)adobe · acrobatEPSS79%2 exploitsPublished May 14, 2013
- CVE-2013-3522Medium 6.5SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlier allows remote authenticated users to execute arbitrary SQL commands via the nodeid parameter.vbulletin · vbulletinEPSS27%4 exploitsPublished May 10, 2013
- CVE-2013-3336Medium 5.0Unspecified vulnerability in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to read arbitrary files via unknown vectors.adobe · coldfusionEPSS74%1 exploitPublished May 9, 2013
- CVE-2013-3502Medium 6.5monarch_scan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary commands, and consequently obtain sensitive information, by leveraging a JOSSO SSO cookie.gwos · groundwork monitorEPSS54%2 exploitsPublished May 8, 2013
- CVE-2013-0726Critical 9.3Stack-based buffer overflow in the ERM_convert_to_correct_webpath function in ermapper_u.dll in ERDAS ER Viewer before 13.00.0001 allows remote attackers to execute arbitrary code via a crafted pathname in an ERS file.hexagon · erdas er viewerEPSS28%2 exploitsPublished May 5, 2013
- CVE-2013-1884Medium 5.0The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (segmentation fault and crash) via a log REPORT request with an invalid limit, which triggers an access of an uninitialized variable.apache · subversionEPSS51%1 exploitPublished May 2, 2013
- CVE-2013-1847Medium 5.0The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an anonymous LOCK for a URL that does not exist.apache · subversionEPSS51%1 exploitPublished May 2, 2013
- CVE-2012-5946Critical 9.3Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via a long TabCaption string.ibm · spss samplepowerEPSS34%2 exploitsPublished Apr 30, 2013
- CVE-2013-1428Medium 6.5Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote authenticated peers to cause a denial of service (crash) or possibly execute arbitrary code via a large TCP packet.tinc-vpn · tincEPSS61%2 exploitsPublished Apr 26, 2013
- CVE-2013-3238Medium 6.0phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a /e\x00 sequence, which is not properly handled before making a preg_replace function call within the "Replace table prefix" feature.phpmyadmin · phpmyadminEPSS29%3 exploitsPublished Apr 26, 2013
- CVE-2013-1559Medium 4.0Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote authenticated users to affect availability via unknown vectors related to Content Server.oracle · fusion middlewareEPSS59%2 exploitsPublished Apr 17, 2013
- CVE-2013-1488Critical 10.0OpenJDK: JDBC driver manager improper toString calls (CanSecWest 2013, Libraries, 8009814)oracle · jreEPSS87%2 exploitsPublished Apr 16, 2013
- CVE-2013-1899Medium 6.5postgresql: Insecure switch parsingpostgresql · postgresqlEPSS54%·Published Apr 4, 2013
- CVE-2013-1080Critical 10.0The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform authentication for zenworks/jsp/index.jsp, which allows remote attackers to conduct directory traversal attacks, and consequently upload and execute arbitrary…novell · zenworks configuration managementEPSS77%2 exploitsPublished Mar 29, 2013
- CVE-2013-1892Medium 6.0MongoDB: Server Side JavaScript Includes allow Remote Code Executionmongodb · mongodbEPSS45%3 exploitsPublished Mar 24, 2013
- CVE-2013-0232High 7.5includes/functions.php in ZoneMinder Video Server 1.24.0, 1.25.0, and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) runState parameter in the packageControl function; or (2) key or (3) command parameter in the…zoneminder · zoneminderEPSS48%2 exploitsPublished Mar 20, 2013
- CVE-2013-2492Medium 6.8Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windows allows remote attackers to execute arbitrary code via a crafted packet to TCP port 3050, related to a missing size check during extraction of a group number…firebirdsql · firebirdEPSS42%3 exploitsPublished Mar 15, 2013
- CVE-2013-2566Medium 5.9The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext.fujitsu · m10-1 firmwareEPSS84%·Published Mar 15, 2013
- CVE-2013-1469Medium 4.0Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a ..piwigo · piwigoEPSS56%4 exploitsPublished Mar 13, 2013
- CVE-2013-1081High 7.5Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management (ZMM) 2.6.1 and 2.7.0 allows remote attackers to include and execute arbitrary local files via the language parameter.novell · zenworks mobile managementEPSS68%2 exploitsPublished Mar 11, 2013
- CVE-2012-5201Critical 10.0Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1611.hp · intelligent management centerEPSS64%2 exploitsPublished Mar 9, 2013
- CVE-2013-1493Critical 10.0OpenJDK: CMM malformed raster memory corruption (2D, 8007675)oracle · jdkEPSS86%2 exploitsPublished Mar 4, 2013
- CVE-2013-0108Medium 6.8An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager (aka CPO-M) Station R100; and HMIWeb Browser client packages allows remote attackers to…honeywell · enterprise buildings integratorEPSS27%2 exploitsPublished Feb 24, 2013
- CVE-2012-6275Critical 10.0Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impact via (1) the filename header in an SCH request or (2) the userid component in a DUPF request.bigantsoft · bigant im message serverEPSS46%2 exploitsPublished Feb 24, 2013
- CVE-2012-6274Medium 5.0BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors.bigantsoft · bigant im message serverEPSS47%2 exploitsPublished Feb 24, 2013
- CVE-2012-4705Critical 10.0Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving a crafted pathname.3s-software · codesys gateway-serverEPSS65%2 exploitsPublished Feb 24, 2013
- CVE-2012-0439Critical 9.3An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code via (1) a pointer argument to the SetEngine method or (2) an XPItem pointer argument to an unspecified method.novell · groupwiseEPSS39%2 exploitsPublished Feb 24, 2013
- CVE-2012-4711Critical 10.0Buffer overflow in kingMess.exe 65.20.2003.10300 in WellinTech KingView 6.52, kingMess.exe 65.20.2003.10400 in KingView 6.53, and kingMess.exe 65.50.2011.18049 in KingView 6.55 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…wellintech · kingviewEPSS61%2 exploitsPublished Feb 15, 2013
- CVE-2013-0075High 7.8The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (reboot) via a crafted packet that terminates a TCP…microsoft · windows 7EPSS70%·Published Feb 13, 2013
- CVE-2013-0025Critical 9.3Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer SLayoutRun Use After Free Vulnerability."microsoft · internet explorerEPSS56%3 exploitsPublished Feb 13, 2013
- CVE-2013-0634Critical 9.3flash-plugin: multiple code execution flaws (APSB13-04)adobe · flash playerEPSS78%2 exploitsPublished Feb 7, 2013
- CVE-2013-0229High 7.8The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attackers to cause a denial of service (service crash) via a crafted request that triggers a buffer over-read.miniupnp project · miniupnpdEPSS76%2 exploitsPublished Jan 31, 2013
- CVE-2013-0230Critical 10.0Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method.miniupnp project · miniupnpdEPSS69%5 exploitsPublished Jan 31, 2013
- CVE-2012-6530High 7.1Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled, allows remote authenticated users with the create folder permission to execute arbitrary code via a crafted request.sysax · multi serverEPSS46%5 exploitsPublished Jan 31, 2013
- CVE-2012-5958Critical 10.0libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)libupnp project · libupnpEPSS83%3 exploitsPublished Jan 29, 2013
- CVE-2012-5959Critical 10.0libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)portable sdk for upnp project · portable sdk for upnpEPSS76%1 exploitPublished Jan 29, 2013
- CVE-2012-4914Critical 9.3Stack-based buffer overflow in the reader in CoolPDF 3.0.2.256 allows remote attackers to execute arbitrary code via a PDF document with a crafted stream.coolpdf · coolpdfEPSS28%3 exploitsPublished Jan 26, 2013
- CVE-2012-6441Medium 5.0An information exposure of confidential information results when the device receives a specially crafted CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP.rockwellautomation · controllogix controllersEPSS57%·Published Jan 24, 2013
- CVE-2013-0209High 7.5lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x through 4.38 does not require authentication for requests to database-migration functions, which allows remote attackers to conduct eval injection and SQL injection attacks via crafted parameters, as demonstrated…sixapart · movable typeEPSS45%2 exploitsPublished Jan 22, 2013
- CVE-2012-6096High 7.5Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, 1.7.x before 1.7.4, and 1.8.x before 1.8.4, might allow remote attackers to execute arbitrary code via a long (1) host_name variable (host…icinga · icingaEPSS66%5 exploitsPublished Jan 22, 2013
- CVE-2013-0928Critical 9.3The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary commands via a DCP "run command" operation.emc · alphastorEPSS34%2 exploitsPublished Jan 21, 2013
- CVE-2013-0758Critical 9.3Mozilla: Chrome Object Wrapper (COW) bypass through plugin objects (MFSA 2013-15)mozilla · firefoxEPSS73%3 exploitsPublished Jan 8, 2013
- CVE-2013-0757Critical 9.3Mozilla: Chrome Object Wrapper (COW) bypass through changing prototype (MFSA 2013-14)mozilla · firefoxEPSS61%3 exploitsPublished Jan 8, 2013
- CVE-2013-0753Critical 9.3Mozilla: Use-after-free in serializeToStream (MFSA 2013-16)mozilla · firefoxEPSS51%2 exploitsPublished Jan 8, 2013
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2013-2327 | Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1635. hp · storage data protector | Critical 10.0 | 61% | · | |
| CVE-2013-2326 | Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1634. hp · storage data protector | Critical 10.0 | 61% | · | |
| CVE-2013-2325 | Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1633. hp · storage data protector | Critical 10.0 | 61% | · | |
| CVE-2013-0136 | Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow remote authenticated users to upload and execute arbitrary programs, read arbitrary files, or cause a denial of service (file deletion or renaming) via (1)… mutiny · mutiny | High 8.5 | 40% | 2 exploits | |
| CVE-2013-1017 | Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted dref atoms in a movie file. apple · quicktime | Critical 9.3 | 33% | 3 exploits | |
| CVE-2013-1305 | HTTP.sys in Microsoft Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (infinite loop) via a crafted HTTP header, aka "HTTP.sys Denial of Service Vulnerability." microsoft · windows 8 | High 7.8 | 55% | · | |
| CVE-2013-2730 | acroread: multiple code execution flaws (APSB13-15) adobe · acrobat | Critical 10.0 | 79% | 2 exploits | |
| CVE-2013-3522 | SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlier allows remote authenticated users to execute arbitrary SQL commands via the nodeid parameter. vbulletin · vbulletin | Medium 6.5 | 27% | 4 exploits | |
| CVE-2013-3336 | Unspecified vulnerability in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to read arbitrary files via unknown vectors. adobe · coldfusion | Medium 5.0 | 74% | 1 exploit | |
| CVE-2013-3502 | monarch_scan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary commands, and consequently obtain sensitive information, by leveraging a JOSSO SSO cookie. gwos · groundwork monitor | Medium 6.5 | 54% | 2 exploits | |
| CVE-2013-0726 | Stack-based buffer overflow in the ERM_convert_to_correct_webpath function in ermapper_u.dll in ERDAS ER Viewer before 13.00.0001 allows remote attackers to execute arbitrary code via a crafted pathname in an ERS file. hexagon · erdas er viewer | Critical 9.3 | 28% | 2 exploits | |
| CVE-2013-1884 | The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (segmentation fault and crash) via a log REPORT request with an invalid limit, which triggers an access of an uninitialized variable. apache · subversion | Medium 5.0 | 51% | 1 exploit | |
| CVE-2013-1847 | The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an anonymous LOCK for a URL that does not exist. apache · subversion | Medium 5.0 | 51% | 1 exploit | |
| CVE-2012-5946 | Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via a long TabCaption string. ibm · spss samplepower | Critical 9.3 | 34% | 2 exploits | |
| CVE-2013-1428 | Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote authenticated peers to cause a denial of service (crash) or possibly execute arbitrary code via a large TCP packet. tinc-vpn · tinc | Medium 6.5 | 61% | 2 exploits | |
| CVE-2013-3238 | phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a /e\x00 sequence, which is not properly handled before making a preg_replace function call within the "Replace table prefix" feature. phpmyadmin · phpmyadmin | Medium 6.0 | 29% | 3 exploits | |
| CVE-2013-1559 | Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote authenticated users to affect availability via unknown vectors related to Content Server. oracle · fusion middleware | Medium 4.0 | 59% | 2 exploits | |
| CVE-2013-1488 | OpenJDK: JDBC driver manager improper toString calls (CanSecWest 2013, Libraries, 8009814) oracle · jre | Critical 10.0 | 87% | 2 exploits | |
| CVE-2013-1899 | postgresql: Insecure switch parsing postgresql · postgresql | Medium 6.5 | 54% | · | |
| CVE-2013-1080 | The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform authentication for zenworks/jsp/index.jsp, which allows remote attackers to conduct directory traversal attacks, and consequently upload and execute arbitrary… novell · zenworks configuration management | Critical 10.0 | 77% | 2 exploits | |
| CVE-2013-1892 | MongoDB: Server Side JavaScript Includes allow Remote Code Execution mongodb · mongodb | Medium 6.0 | 45% | 3 exploits | |
| CVE-2013-0232 | includes/functions.php in ZoneMinder Video Server 1.24.0, 1.25.0, and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) runState parameter in the packageControl function; or (2) key or (3) command parameter in the… zoneminder · zoneminder | High 7.5 | 48% | 2 exploits | |
| CVE-2013-2492 | Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windows allows remote attackers to execute arbitrary code via a crafted packet to TCP port 3050, related to a missing size check during extraction of a group number… firebirdsql · firebird | Medium 6.8 | 42% | 3 exploits | |
| CVE-2013-2566 | The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext. fujitsu · m10-1 firmware | Medium 5.9 | 84% | · | |
| CVE-2013-1469 | Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a .. piwigo · piwigo | Medium 4.0 | 56% | 4 exploits | |
| CVE-2013-1081 | Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management (ZMM) 2.6.1 and 2.7.0 allows remote attackers to include and execute arbitrary local files via the language parameter. novell · zenworks mobile management | High 7.5 | 68% | 2 exploits | |
| CVE-2012-5201 | Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1611. hp · intelligent management center | Critical 10.0 | 64% | 2 exploits | |
| CVE-2013-1493 | OpenJDK: CMM malformed raster memory corruption (2D, 8007675) oracle · jdk | Critical 10.0 | 86% | 2 exploits | |
| CVE-2013-0108 | An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager (aka CPO-M) Station R100; and HMIWeb Browser client packages allows remote attackers to… honeywell · enterprise buildings integrator | Medium 6.8 | 27% | 2 exploits | |
| CVE-2012-6275 | Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impact via (1) the filename header in an SCH request or (2) the userid component in a DUPF request. bigantsoft · bigant im message server | Critical 10.0 | 46% | 2 exploits | |
| CVE-2012-6274 | BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors. bigantsoft · bigant im message server | Medium 5.0 | 47% | 2 exploits | |
| CVE-2012-4705 | Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving a crafted pathname. 3s-software · codesys gateway-server | Critical 10.0 | 65% | 2 exploits | |
| CVE-2012-0439 | An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code via (1) a pointer argument to the SetEngine method or (2) an XPItem pointer argument to an unspecified method. novell · groupwise | Critical 9.3 | 39% | 2 exploits | |
| CVE-2012-4711 | Buffer overflow in kingMess.exe 65.20.2003.10300 in WellinTech KingView 6.52, kingMess.exe 65.20.2003.10400 in KingView 6.53, and kingMess.exe 65.50.2011.18049 in KingView 6.55 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… wellintech · kingview | Critical 10.0 | 61% | 2 exploits | |
| CVE-2013-0075 | The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (reboot) via a crafted packet that terminates a TCP… microsoft · windows 7 | High 7.8 | 70% | · | |
| CVE-2013-0025 | Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer SLayoutRun Use After Free Vulnerability." microsoft · internet explorer | Critical 9.3 | 56% | 3 exploits | |
| CVE-2013-0634 | flash-plugin: multiple code execution flaws (APSB13-04) adobe · flash player | Critical 9.3 | 78% | 2 exploits | |
| CVE-2013-0229 | The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attackers to cause a denial of service (service crash) via a crafted request that triggers a buffer over-read. miniupnp project · miniupnpd | High 7.8 | 76% | 2 exploits | |
| CVE-2013-0230 | Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method. miniupnp project · miniupnpd | Critical 10.0 | 69% | 5 exploits | |
| CVE-2012-6530 | Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled, allows remote authenticated users with the create folder permission to execute arbitrary code via a crafted request. sysax · multi server | High 7.1 | 46% | 5 exploits | |
| CVE-2012-5958 | libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681) libupnp project · libupnp | Critical 10.0 | 83% | 3 exploits | |
| CVE-2012-5959 | libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681) portable sdk for upnp project · portable sdk for upnp | Critical 10.0 | 76% | 1 exploit | |
| CVE-2012-4914 | Stack-based buffer overflow in the reader in CoolPDF 3.0.2.256 allows remote attackers to execute arbitrary code via a PDF document with a crafted stream. coolpdf · coolpdf | Critical 9.3 | 28% | 3 exploits | |
| CVE-2012-6441 | An information exposure of confidential information results when the device receives a specially crafted CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP. rockwellautomation · controllogix controllers | Medium 5.0 | 57% | · | |
| CVE-2013-0209 | lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x through 4.38 does not require authentication for requests to database-migration functions, which allows remote attackers to conduct eval injection and SQL injection attacks via crafted parameters, as demonstrated… sixapart · movable type | High 7.5 | 45% | 2 exploits | |
| CVE-2012-6096 | Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, 1.7.x before 1.7.4, and 1.8.x before 1.8.4, might allow remote attackers to execute arbitrary code via a long (1) host_name variable (host… icinga · icinga | High 7.5 | 66% | 5 exploits | |
| CVE-2013-0928 | The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary commands via a DCP "run command" operation. emc · alphastor | Critical 9.3 | 34% | 2 exploits | |
| CVE-2013-0758 | Mozilla: Chrome Object Wrapper (COW) bypass through plugin objects (MFSA 2013-15) mozilla · firefox | Critical 9.3 | 73% | 3 exploits | |
| CVE-2013-0757 | Mozilla: Chrome Object Wrapper (COW) bypass through changing prototype (MFSA 2013-14) mozilla · firefox | Critical 9.3 | 61% | 3 exploits | |
| CVE-2013-0753 | Mozilla: Use-after-free in serializeToStream (MFSA 2013-16) mozilla · firefox | Critical 9.3 | 51% | 2 exploits |
Showing 2,701–2,750 of 3,918
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.