Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
3,918 vulnerabilities · highest exploit probability first
- CVE-2012-4915High 7.5Google Doc Embedder < 2.5.4 - Directory Traversaldavistribe · google doc embedderEPSS50%2 exploitsPublished Jan 7, 2013
- CVE-2012-6329High 7.5The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands…perl · perlEPSS64%4 exploitsPublished Jan 4, 2013
- CVE-2012-6330Medium 5.0The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows remote attackers to cause a denial of service (memory consumption) via a large integer in a %MAKETEXT% macro.foswiki · foswikiEPSS36%2 exploitsPublished Jan 4, 2013
- CVE-2012-0432Critical 10.0Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an unspecified impact via unknown vectors.microfocus · edirectoryEPSS59%3 exploitsPublished Dec 25, 2012
- CVE-2012-5932Critical 10.0Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote attackers to execute arbitrary Perl code via a crafted application/x-amf request.microfocus · privileged user managerEPSS63%2 exploitsPublished Dec 24, 2012
- CVE-2012-5691Critical 9.3Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted RealMedia file.realnetworks · realplayerEPSS53%2 exploitsPublished Dec 19, 2012
- CVE-2012-3274Critical 10.0Stack-based buffer overflow in uam.exe in the User Access Manager (UAM) component in HP Intelligent Management Center (IMC) before 5.1 E0101P01 allows remote attackers to execute arbitrary code via vectors related to log data.hp · intelligent management centerEPSS64%2 exploitsPublished Dec 6, 2012
- CVE-2012-4347Medium 5.0Multiple directory traversal vulnerabilities in the management console in Symantec Messaging Gateway (SMG) 9.5.x allow remote authenticated users to read arbitrary files via a ..symantec · messaging gatewayEPSS59%1 exploitPublished Dec 5, 2012
- CVE-2012-6066Critical 9.3freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demonstrated by an OpenSSH client with modified versions of ssh.c and sshconnect2.c.freesshd · freesshdEPSS40%4 exploitsPublished Dec 4, 2012
- CVE-2012-5975Critical 9.3The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6.2.5, and 6.3.0 through 6.3.2 on UNIX and Linux, when old-style password authentication is enabled, allows remote attackers to bypass authentication via a…ssh · tectia serverEPSS36%3 exploitsPublished Dec 4, 2012
- CVE-2012-5613Medium 6.0mysql: database privilege escalation using FILE privilegemariadb · mariadbEPSS32%5 exploitsPublished Dec 1, 2012
- CVE-2012-4959Critical 10.0Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD request with a ..novell · file reporterEPSS71%3 exploitsPublished Nov 18, 2012
- CVE-2012-4958High 7.8Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /FSF/CMD request with a ..novell · file reporterEPSS74%1 exploitPublished Nov 18, 2012
- CVE-2012-4957High 7.8Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with a full pathname in a PATH element of an SRS record.novell · file reporterEPSS68%1 exploitPublished Nov 18, 2012
- CVE-2012-5896Critical 10.0The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers to execute arbitrary code via a memory address in the first argument, related to an "uninitialized…quest · intrustEPSS69%4 exploitsPublished Nov 17, 2012
- CVE-2012-3569Critical 9.3Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file.vmware · ovf toolEPSS48%4 exploitsPublished Nov 14, 2012
- CVE-2012-3753Critical 9.3Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MIME type.apple · quicktimeEPSS35%2 exploitsPublished Nov 9, 2012
- CVE-2012-3752Critical 9.3Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted style element in a QuickTime TeXML file.apple · quicktimeEPSS36%2 exploitsPublished Nov 9, 2012
- CVE-2012-5687High 7.8Directory traversal vulnerability in the web-based management feature on the TP-LINK TL-WR841N router with firmware 3.13.9 build 120201 Rel.54965n and earlier allows remote attackers to read arbitrary files via a ..tp-link · tl-wr841nEPSS69%1 exploitPublished Nov 1, 2012
- CVE-2012-4940Medium 6.4Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a ..gecad · axigen free mail serverEPSS85%1 exploitPublished Oct 31, 2012
- CVE-2012-5692Critical 10.0Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x through 3.3.x has unknown impact and remote attack vectors.invisioncommunity · invision power boardEPSS26%4 exploitsPublished Oct 31, 2012
- CVE-2011-5227Critical 10.0Stack-based buffer overflow in the Syslog service (nssyslogd.exe) in Enterasys Network Management Suite (NMS) before 4.1.0.80 allows remote attackers to execute arbitrary code via a long PRIO field in a message to UDP port 514.enterasys · netsightEPSS77%2 exploitsPublished Oct 25, 2012
- CVE-2012-3001High 8.5Mutiny Standard before 4.5-1.12 allows remote attackers to execute arbitrary commands via the network-interface menu, related to a "command injection vulnerability."mutiny · standardEPSS27%2 exploitsPublished Oct 22, 2012
- CVE-2012-3153Medium 6.4Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet.oracle · fusion middlewareEPSS98%2 exploitsPublished Oct 16, 2012
- CVE-2012-5088Critical 10.0OpenJDK: MethodHandle insufficient access control checks (Libraries, 7196190)oracle · jreEPSS79%2 exploitsPublished Oct 16, 2012
- CVE-2012-1533Critical 10.0JDK: unspecified vulnerability (Deployment)oracle · jdkEPSS69%2 exploitsPublished Oct 16, 2012
- CVE-2012-5067Medium 5.0JDK: unspecified vulnerability (Deployment)oracle · jdkEPSS64%2 exploitsPublished Oct 16, 2012
- CVE-2012-0182Critical 9.3Microsoft Word 2007 SP2 and SP3 does not properly handle memory during the parsing of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Word PAPX Section Corruption Vulnerability."microsoft · wordEPSS68%·Published Oct 9, 2012
- CVE-2012-3993Critical 9.3Mozilla: Chrome Object Wrapper (COW) does not disallow acces to privileged functions or properties (MFSA 2012-83)mozilla · firefoxEPSS43%2 exploitsPublished Oct 9, 2012
- CVE-2011-4929High 7.5Unspecified vulnerability in the bazaar repository adapter in Redmine 0.9.x and 1.0.x before 1.0.5 allows remote attackers to execute arbitrary commands via unknown vectors.redmine · redmineEPSS46%2 exploitsPublished Oct 8, 2012
- CVE-2012-1153Medium 6.8Unrestricted file upload vulnerability in addons/uploadify/uploadify.php in appRain CMF 0.1.5 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads…apprain · apprainEPSS32%4 exploitsPublished Oct 6, 2012
- CVE-2012-5223High 7.5The proc_deutf function in includes/functions_vbseocp_abstract.php in vBSEO 3.5.0, 3.5.1, 3.5.2, 3.6.0, and earlier allows remote attackers to insert and execute arbitrary PHP code via "complex curly syntax" in the char_repl parameter, which is inserted into a regular expression…crawlability · vbseoEPSS41%3 exploitsPublished Oct 1, 2012
- CVE-2012-5159High 7.5phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an externally introduced modification (Trojan Horse) in server_sync.php, which allows remote attackers to execute arbitrary PHP code via an eval injection attack.phpmyadmin · phpmyadminEPSS75%2 exploitsPublished Sep 25, 2012
- CVE-2012-0209High 7.5Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP between November 2011 and February 2012, contains an externally introduced modification (Trojan Horse) in templates/javascript/open_calendar.js, which allows remote attackers…horde · groupwareEPSS72%2 exploitsPublished Sep 25, 2012
- CVE-2012-3261Critical 10.0Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1463.hp · sitescopeEPSS40%1 exploitPublished Sep 25, 2012
- CVE-2012-3260Critical 10.0Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1462.hp · sitescopeEPSS40%1 exploitPublished Sep 25, 2012
- CVE-2012-3259Critical 10.0Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1461.hp · sitescopeEPSS60%·Published Sep 25, 2012
- CVE-2012-5002Medium 6.8Stack-based buffer overflow in SR10 FTP server (SR10.exe) 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file name option is enabled, allows remote attackers to execute arbitrary code via a long USER FTP command.ricoh · dl-10EPSS31%3 exploitsPublished Sep 19, 2012
- CVE-2012-4924Critical 9.3Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execute arbitrary code via a long parameter to the Alert method.asus · net4switchEPSS36%3 exploitsPublished Sep 15, 2012
- CVE-2011-5171Critical 9.3Multiple stack-based buffer overflows in CyberLink Power2Go 7 (build 196) and 8 (build 1031) allow remote attackers to execute arbitrary code via the (1) src and (2) name parameters in a p2g project file.cyberlink · power2goEPSS46%4 exploitsPublished Sep 15, 2012
- CVE-2011-5170Critical 9.3Stack-based buffer overflow in Castillo Bueno Systems CCMPlayer 1.5 allows remote attackers to execute arbitrary code via a long track name in an m3u playlist.castillobueno · ccmplayerEPSS32%5 exploitsPublished Sep 15, 2012
- CVE-2011-5165Critical 9.3Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wav file.cleanersoft · free mp3 cd ripperEPSS37%16 exploitsPublished Sep 15, 2012
- CVE-2011-5164Critical 9.3Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote FTP servers to execute arbitrary code via a crafted file name in a LIST command response.vandyke · absoluteftpEPSS29%3 exploitsPublished Sep 15, 2012
- CVE-2012-2982Medium 6.5file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character.gentoo · webminEPSS62%2 exploitsPublished Sep 11, 2012
- CVE-2012-4876Critical 10.0Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera allows remote attackers to execute arbitrary code via a long string to the OpenFileDlg method.trendnet · securview wireless internet camera activex controlEPSS71%4 exploitsPublished Sep 6, 2012
- CVE-2012-4869High 7.5The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and earlier allows remote attackers to execute arbitrary commands via the callmenum parameter in a c action.sangoma · freepbxEPSS70%5 exploitsPublished Sep 6, 2012
- CVE-2012-2288Critical 9.3Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via format string specifiers in a message.emc · networkerEPSS33%2 exploitsPublished Sep 4, 2012
- CVE-2010-5193Critical 9.3Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0 and Gold 6.0 allows remote attackers to execute arbitrary code via a long strDelimit parameter.viscomsoft · image viewer cp gold sdkEPSS32%4 exploitsPublished Aug 31, 2012
- CVE-2011-5130Medium 6.8dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the argv[1] parameter.haudenschilt · family connections cmsEPSS37%5 exploitsPublished Aug 30, 2012
- CVE-2012-3579High 7.9Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session.symantec · messaging gatewayEPSS40%2 exploitsPublished Aug 29, 2012
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2012-4915 | Google Doc Embedder < 2.5.4 - Directory Traversal davistribe · google doc embedder | High 7.5 | 50% | 2 exploits | |
| CVE-2012-6329 | The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands… perl · perl | High 7.5 | 64% | 4 exploits | |
| CVE-2012-6330 | The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows remote attackers to cause a denial of service (memory consumption) via a large integer in a %MAKETEXT% macro. foswiki · foswiki | Medium 5.0 | 36% | 2 exploits | |
| CVE-2012-0432 | Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an unspecified impact via unknown vectors. microfocus · edirectory | Critical 10.0 | 59% | 3 exploits | |
| CVE-2012-5932 | Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote attackers to execute arbitrary Perl code via a crafted application/x-amf request. microfocus · privileged user manager | Critical 10.0 | 63% | 2 exploits | |
| CVE-2012-5691 | Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted RealMedia file. realnetworks · realplayer | Critical 9.3 | 53% | 2 exploits | |
| CVE-2012-3274 | Stack-based buffer overflow in uam.exe in the User Access Manager (UAM) component in HP Intelligent Management Center (IMC) before 5.1 E0101P01 allows remote attackers to execute arbitrary code via vectors related to log data. hp · intelligent management center | Critical 10.0 | 64% | 2 exploits | |
| CVE-2012-4347 | Multiple directory traversal vulnerabilities in the management console in Symantec Messaging Gateway (SMG) 9.5.x allow remote authenticated users to read arbitrary files via a .. symantec · messaging gateway | Medium 5.0 | 59% | 1 exploit | |
| CVE-2012-6066 | freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demonstrated by an OpenSSH client with modified versions of ssh.c and sshconnect2.c. freesshd · freesshd | Critical 9.3 | 40% | 4 exploits | |
| CVE-2012-5975 | The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6.2.5, and 6.3.0 through 6.3.2 on UNIX and Linux, when old-style password authentication is enabled, allows remote attackers to bypass authentication via a… ssh · tectia server | Critical 9.3 | 36% | 3 exploits | |
| CVE-2012-5613 | mysql: database privilege escalation using FILE privilege mariadb · mariadb | Medium 6.0 | 32% | 5 exploits | |
| CVE-2012-4959 | Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD request with a .. novell · file reporter | Critical 10.0 | 71% | 3 exploits | |
| CVE-2012-4958 | Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /FSF/CMD request with a .. novell · file reporter | High 7.8 | 74% | 1 exploit | |
| CVE-2012-4957 | Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with a full pathname in a PATH element of an SRS record. novell · file reporter | High 7.8 | 68% | 1 exploit | |
| CVE-2012-5896 | The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers to execute arbitrary code via a memory address in the first argument, related to an "uninitialized… quest · intrust | Critical 10.0 | 69% | 4 exploits | |
| CVE-2012-3569 | Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file. vmware · ovf tool | Critical 9.3 | 48% | 4 exploits | |
| CVE-2012-3753 | Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MIME type. apple · quicktime | Critical 9.3 | 35% | 2 exploits | |
| CVE-2012-3752 | Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted style element in a QuickTime TeXML file. apple · quicktime | Critical 9.3 | 36% | 2 exploits | |
| CVE-2012-5687 | Directory traversal vulnerability in the web-based management feature on the TP-LINK TL-WR841N router with firmware 3.13.9 build 120201 Rel.54965n and earlier allows remote attackers to read arbitrary files via a .. tp-link · tl-wr841n | High 7.8 | 69% | 1 exploit | |
| CVE-2012-4940 | Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. gecad · axigen free mail server | Medium 6.4 | 85% | 1 exploit | |
| CVE-2012-5692 | Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x through 3.3.x has unknown impact and remote attack vectors. invisioncommunity · invision power board | Critical 10.0 | 26% | 4 exploits | |
| CVE-2011-5227 | Stack-based buffer overflow in the Syslog service (nssyslogd.exe) in Enterasys Network Management Suite (NMS) before 4.1.0.80 allows remote attackers to execute arbitrary code via a long PRIO field in a message to UDP port 514. enterasys · netsight | Critical 10.0 | 77% | 2 exploits | |
| CVE-2012-3001 | Mutiny Standard before 4.5-1.12 allows remote attackers to execute arbitrary commands via the network-interface menu, related to a "command injection vulnerability." mutiny · standard | High 8.5 | 27% | 2 exploits | |
| CVE-2012-3153 | Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet. oracle · fusion middleware | Medium 6.4 | 98% | 2 exploits | |
| CVE-2012-5088 | OpenJDK: MethodHandle insufficient access control checks (Libraries, 7196190) oracle · jre | Critical 10.0 | 79% | 2 exploits | |
| CVE-2012-1533 | JDK: unspecified vulnerability (Deployment) oracle · jdk | Critical 10.0 | 69% | 2 exploits | |
| CVE-2012-5067 | JDK: unspecified vulnerability (Deployment) oracle · jdk | Medium 5.0 | 64% | 2 exploits | |
| CVE-2012-0182 | Microsoft Word 2007 SP2 and SP3 does not properly handle memory during the parsing of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Word PAPX Section Corruption Vulnerability." microsoft · word | Critical 9.3 | 68% | · | |
| CVE-2012-3993 | Mozilla: Chrome Object Wrapper (COW) does not disallow acces to privileged functions or properties (MFSA 2012-83) mozilla · firefox | Critical 9.3 | 43% | 2 exploits | |
| CVE-2011-4929 | Unspecified vulnerability in the bazaar repository adapter in Redmine 0.9.x and 1.0.x before 1.0.5 allows remote attackers to execute arbitrary commands via unknown vectors. redmine · redmine | High 7.5 | 46% | 2 exploits | |
| CVE-2012-1153 | Unrestricted file upload vulnerability in addons/uploadify/uploadify.php in appRain CMF 0.1.5 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads… apprain · apprain | Medium 6.8 | 32% | 4 exploits | |
| CVE-2012-5223 | The proc_deutf function in includes/functions_vbseocp_abstract.php in vBSEO 3.5.0, 3.5.1, 3.5.2, 3.6.0, and earlier allows remote attackers to insert and execute arbitrary PHP code via "complex curly syntax" in the char_repl parameter, which is inserted into a regular expression… crawlability · vbseo | High 7.5 | 41% | 3 exploits | |
| CVE-2012-5159 | phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an externally introduced modification (Trojan Horse) in server_sync.php, which allows remote attackers to execute arbitrary PHP code via an eval injection attack. phpmyadmin · phpmyadmin | High 7.5 | 75% | 2 exploits | |
| CVE-2012-0209 | Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP between November 2011 and February 2012, contains an externally introduced modification (Trojan Horse) in templates/javascript/open_calendar.js, which allows remote attackers… horde · groupware | High 7.5 | 72% | 2 exploits | |
| CVE-2012-3261 | Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1463. hp · sitescope | Critical 10.0 | 40% | 1 exploit | |
| CVE-2012-3260 | Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1462. hp · sitescope | Critical 10.0 | 40% | 1 exploit | |
| CVE-2012-3259 | Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1461. hp · sitescope | Critical 10.0 | 60% | · | |
| CVE-2012-5002 | Stack-based buffer overflow in SR10 FTP server (SR10.exe) 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file name option is enabled, allows remote attackers to execute arbitrary code via a long USER FTP command. ricoh · dl-10 | Medium 6.8 | 31% | 3 exploits | |
| CVE-2012-4924 | Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execute arbitrary code via a long parameter to the Alert method. asus · net4switch | Critical 9.3 | 36% | 3 exploits | |
| CVE-2011-5171 | Multiple stack-based buffer overflows in CyberLink Power2Go 7 (build 196) and 8 (build 1031) allow remote attackers to execute arbitrary code via the (1) src and (2) name parameters in a p2g project file. cyberlink · power2go | Critical 9.3 | 46% | 4 exploits | |
| CVE-2011-5170 | Stack-based buffer overflow in Castillo Bueno Systems CCMPlayer 1.5 allows remote attackers to execute arbitrary code via a long track name in an m3u playlist. castillobueno · ccmplayer | Critical 9.3 | 32% | 5 exploits | |
| CVE-2011-5165 | Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wav file. cleanersoft · free mp3 cd ripper | Critical 9.3 | 37% | 16 exploits | |
| CVE-2011-5164 | Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote FTP servers to execute arbitrary code via a crafted file name in a LIST command response. vandyke · absoluteftp | Critical 9.3 | 29% | 3 exploits | |
| CVE-2012-2982 | file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character. gentoo · webmin | Medium 6.5 | 62% | 2 exploits | |
| CVE-2012-4876 | Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera allows remote attackers to execute arbitrary code via a long string to the OpenFileDlg method. trendnet · securview wireless internet camera activex control | Critical 10.0 | 71% | 4 exploits | |
| CVE-2012-4869 | The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and earlier allows remote attackers to execute arbitrary commands via the callmenum parameter in a c action. sangoma · freepbx | High 7.5 | 70% | 5 exploits | |
| CVE-2012-2288 | Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via format string specifiers in a message. emc · networker | Critical 9.3 | 33% | 2 exploits | |
| CVE-2010-5193 | Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0 and Gold 6.0 allows remote attackers to execute arbitrary code via a long strDelimit parameter. viscomsoft · image viewer cp gold sdk | Critical 9.3 | 32% | 4 exploits | |
| CVE-2011-5130 | dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the argv[1] parameter. haudenschilt · family connections cms | Medium 6.8 | 37% | 5 exploits | |
| CVE-2012-3579 | Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session. symantec · messaging gateway | High 7.9 | 40% | 2 exploits |
Showing 2,751–2,800 of 3,918
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.