Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
3,918 vulnerabilities · highest exploit probability first
- CVE-2012-1196Medium 5.0Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to delete arbitrary files via a ..landesk · lenovo thinkmanagement consoleEPSS51%3 exploitsPublished Feb 17, 2012
- CVE-2012-1195High 7.5Unrestricted file upload vulnerability in andesk/managementsuite/core/core.anonymous/ServerSetup.asmx in the ServerSetup web service in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via a…landesk · lenovo thinkmanagement consoleEPSS69%3 exploitsPublished Feb 17, 2012
- CVE-2011-3026Medium 6.8libpng: Heap buffer overflow in png_decompress_chunk (MFSA 2012-11)google · chromeEPSS73%·Published Feb 16, 2012
- CVE-2012-0155Critical 9.3Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Remote Code Execution Vulnerability."microsoft · internet explorerEPSS65%·Published Feb 14, 2012
- CVE-2012-0500Critical 10.0JDK: unspecified vulnerability fixed in 6u31 and 7u3 (Deployment)oracle · javafxEPSS58%3 exploitsPublished Feb 14, 2012
- CVE-2011-3659Critical 9.3Mozilla: child nodes from nsDOMAttribute still accessible after removal of nodes (MFSA 2012-04)mozilla · firefoxEPSS37%2 exploitsPublished Jan 31, 2012
- CVE-2012-0053Medium 4.3protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a (1) long or (2)…apache · http serverEPSS82%1 exploitPublished Jan 28, 2012
- CVE-2012-0897Medium 6.8Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.irfanview · irfanviewEPSS52%2 exploitsPublished Jan 20, 2012
- CVE-2011-4135Critical 10.0Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager) allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files.flexerasoftware · flexnet publisherEPSS30%1 exploitPublished Jan 19, 2012
- CVE-2012-0267Critical 9.3The StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to execute arbitrary code via a crafted lModule parameter that triggers use of an arbitrary memory address as a function pointer.ntrglobal · ntr activex controlEPSS39%2 exploitsPublished Jan 15, 2012
- CVE-2012-0266Critical 9.3Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitrary code via (1) a long bstrUrl parameter to the StartModule method, (2) a long bstrParams parameter to the Check method, a long bstrUrl parameter to the (3)…ntrglobal · ntr activex controlEPSS42%2 exploitsPublished Jan 15, 2012
- CVE-2011-4789Critical 10.0Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary code via a crafted size value in a packet.hp · diagnosticsEPSS64%2 exploitsPublished Jan 13, 2012
- CVE-2011-4786Critical 9.3A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and…hp · easy printer care softwareEPSS39%2 exploitsPublished Jan 12, 2012
- CVE-2012-0013Critical 9.3Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a…microsoft · windows 7EPSS74%3 exploitsPublished Jan 10, 2012
- CVE-2012-0003High 8.1Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via a crafted MIDI file, aka "MIDI Remote…microsoft · windows xpEPSS70%2 exploitsPublished Jan 10, 2012
- CVE-2011-5052Medium 6.8Stack-based buffer overflow in CoCSoft Stream Down 6.8.0 allows remote web servers to execute arbitrary code via a long response to a download request.cocsoft · stream downEPSS30%3 exploitsPublished Jan 4, 2012
- CVE-2011-4642Medium 4.6mappy.py in Splunk Web in Splunk 4.2.x before 4.2.5 does not properly restrict use of the mappy command to access Python classes, which allows remote authenticated administrators to execute arbitrary code by leveraging the sys module in a request to the search application, as…splunk · splunkEPSS29%3 exploitsPublished Jan 3, 2012
- CVE-2011-3414High 7.8The CaseInsensitiveHashProvider.getHashCode function in the HashTable implementation in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 computes hash values for form parameters without restricting the ability to trigger hash collisions…microsoft · windows 7EPSS58%·Published Dec 29, 2011
- CVE-2011-4885Medium 5.0php: hash table collisions CPU usage DoS (oCERT-2011-003)php · phpEPSS83%3 exploitsPublished Dec 28, 2011
- CVE-2011-5035Medium 5.0GlassFish: hash table collisions CPU usage DoS (oCERT-2011-003)oracle · glassfish serverEPSS68%1 exploitPublished Dec 28, 2011
- CVE-2007-6750Medium 5.0The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris, related to the lack of the mod_reqtimeout module in versions before 2.2.15.apache · http serverEPSS71%·Published Dec 27, 2011
- CVE-2011-4166High 7.5Directory traversal vulnerability in the MPAUploader.Uploader.1.UploadFiles method in HP Managed Printing Administration before 2.6.4 allows remote attackers to create arbitrary files via crafted form data.hp · managed printing administrationEPSS58%2 exploitsPublished Dec 27, 2011
- CVE-2011-4862Critical 10.0Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long…gnu · inetutilsEPSS95%6 exploitsPublished Dec 25, 2011
- CVE-2011-5010Critical 10.0apps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via shell metacharacters in the PINGADDRESS parameter for a "u" action.ctekproducts · skyrouterEPSS66%3 exploitsPublished Dec 24, 2011
- CVE-2011-5007Critical 10.0Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB AC500 PLC and possibly other products, allows remote attackers to execute arbitrary code via a long URI to TCP port 8080.3ssoftware · codesysEPSS73%4 exploitsPublished Dec 24, 2011
- CVE-2011-5003Critical 10.0Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port 4659.avid · media composerEPSS62%2 exploitsPublished Dec 24, 2011
- CVE-2011-5001Critical 10.0Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in CmdProcessor.exe in Trend Micro Control Manager 5.5 before Build 1613 allows remote attackers to execute arbitrary code via a crafted IPC packet to TCP port 20101.trend micro · control managerEPSS64%2 exploitsPublished Dec 24, 2011
- CVE-2010-5081Critical 9.3Stack-based buffer overflow in Mini-Stream RM-MP3 Converter 3.1.2.1 allows remote attackers to execute arbitrary code via a long URL in a .pls file.mini-stream · rm-mp3 converterEPSS31%5 exploitsPublished Dec 24, 2011
- CVE-2009-5109Critical 9.3Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long entry in a .pls file.mini-stream · ripperEPSS32%9 exploitsPublished Dec 24, 2011
- CVE-2011-4453High 7.5The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitrary code via PHP sequences in a crafted order parameter in a pagelist directive, leading to unintended use of the PHP create_function function.pmwiki · pmwikiEPSS52%5 exploitsPublished Dec 22, 2011
- CVE-2011-3658High 7.5Mozilla: Multiple security flaws fixed in v3.6.25 (Mac) and v9mozilla · firefoxEPSS70%2 exploitsPublished Dec 20, 2011
- CVE-2011-4828High 7.5Unrestricted file upload vulnerability in includes/inline_image_upload.php in AutoSec Tools V-CMS 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in temp/.autosectools · v-cmsEPSS65%2 exploitsPublished Dec 15, 2011
- CVE-2011-4825High 7.5Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into…phpletter · ajax file and image managerEPSS39%7 exploitsPublished Dec 15, 2011
- CVE-2011-3400Critical 9.3Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 do not properly handle OLE objects in memory, which allows remote attackers to execute arbitrary code via a crafted object in a file, aka "OLE Property Vulnerability."microsoft · windows xpEPSS71%2 exploitsPublished Dec 13, 2011
- CVE-2011-2653Critical 10.0Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management (ZAM) 7.5 allows remote attackers to execute arbitrary code by uploading an executable file.novell · zenworks asset managementEPSS72%2 exploitsPublished Dec 8, 2011
- CVE-2011-4051Critical 10.0CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows remote attackers to execute arbitrary code via vectors related to creation of a file, loading a DLL, and process control.indusoft · web studioEPSS69%2 exploitsPublished Dec 5, 2011
- CVE-2011-4317Medium 4.3The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a…apache · http serverEPSS60%1 exploitPublished Nov 30, 2011
- CVE-2011-4542High 7.5Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the (1) rs or (2) rsargs[] parameter in a mailbox Drafts action to the default URI.hastymail · hastymail2EPSS24%2 exploitsPublished Nov 30, 2011
- CVE-2011-4040Critical 10.0Buffer overflow in MiniSmtp 3.0.11818 in NJStar Communicator allows remote attackers to execute arbitrary code via a crafted packet.njstar · njstar communicatorEPSS65%3 exploitsPublished Nov 21, 2011
- CVE-2011-4404Medium 5.0The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before Update 2 allows remote attackers to conduct directory traversal attacks and read arbitrary files via unspecified vectors, a related…vmware · vcenter update managerEPSS59%1 exploitPublished Nov 19, 2011
- CVE-2011-4075High 7.5The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby parameter (aka sortby variable) in a query_engine action to cmd.php, as exploited in the wild in October 2011.phpldapadmin project · phpldapadminEPSS52%4 exploitsPublished Nov 2, 2011
- CVE-2011-3167Critical 10.0Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1210.hp · openview network node managerEPSS65%2 exploitsPublished Nov 2, 2011
- CVE-2011-3556High 7.5OpenJDK: RMI DGC server remote code execution (RMI, 7077466)oracle · jrockitEPSS76%2 exploitsPublished Oct 18, 2011
- CVE-2011-3230Medium 6.8Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers to execute arbitrary code via a crafted web site.apple · safariEPSS49%2 exploitsPublished Oct 14, 2011
- CVE-2011-1996Critical 9.3Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Option Element Remote Code Execution Vulnerability."microsoft · internet explorerEPSS59%2 exploitsPublished Oct 11, 2011
- CVE-2011-3368Medium 5.0The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers…apache · http serverEPSS91%1 exploitPublished Oct 5, 2011
- CVE-2011-3976Medium 6.8Stack-based buffer overflow in AmmSoft ScriptFTP 3.3 allows remote FTP servers to execute arbitrary code via a long filename in a response to a LIST command, as demonstrated using (1) GETLIST or (2) GETFILE in a ScriptFTP script.ammsoft · scriptftpEPSS31%5 exploitsPublished Oct 4, 2011
- CVE-2011-3360Critical 9.3Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.wireshark · wiresharkEPSS35%2 exploitsPublished Sep 20, 2011
- CVE-2011-3497Critical 10.0service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method.measuresoft · scadaproEPSS57%2 exploitsPublished Sep 16, 2011
- CVE-2011-3494Critical 10.0WinSig.exe in eSignal 10.6.2425 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a long StyleTemplate element in a QUO, SUM or POR file, which triggers a stack-based buffer overflow, or (2) a long Font->FaceName…interactivedata · esignalEPSS56%3 exploitsPublished Sep 16, 2011
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2012-1196 | Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to delete arbitrary files via a .. landesk · lenovo thinkmanagement console | Medium 5.0 | 51% | 3 exploits | |
| CVE-2012-1195 | Unrestricted file upload vulnerability in andesk/managementsuite/core/core.anonymous/ServerSetup.asmx in the ServerSetup web service in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via a… landesk · lenovo thinkmanagement console | High 7.5 | 69% | 3 exploits | |
| CVE-2011-3026 | libpng: Heap buffer overflow in png_decompress_chunk (MFSA 2012-11) google · chrome | Medium 6.8 | 73% | · | |
| CVE-2012-0155 | Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Remote Code Execution Vulnerability." microsoft · internet explorer | Critical 9.3 | 65% | · | |
| CVE-2012-0500 | JDK: unspecified vulnerability fixed in 6u31 and 7u3 (Deployment) oracle · javafx | Critical 10.0 | 58% | 3 exploits | |
| CVE-2011-3659 | Mozilla: child nodes from nsDOMAttribute still accessible after removal of nodes (MFSA 2012-04) mozilla · firefox | Critical 9.3 | 37% | 2 exploits | |
| CVE-2012-0053 | protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a (1) long or (2)… apache · http server | Medium 4.3 | 82% | 1 exploit | |
| CVE-2012-0897 | Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment. irfanview · irfanview | Medium 6.8 | 52% | 2 exploits | |
| CVE-2011-4135 | Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager) allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files. flexerasoftware · flexnet publisher | Critical 10.0 | 30% | 1 exploit | |
| CVE-2012-0267 | The StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to execute arbitrary code via a crafted lModule parameter that triggers use of an arbitrary memory address as a function pointer. ntrglobal · ntr activex control | Critical 9.3 | 39% | 2 exploits | |
| CVE-2012-0266 | Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitrary code via (1) a long bstrUrl parameter to the StartModule method, (2) a long bstrParams parameter to the Check method, a long bstrUrl parameter to the (3)… ntrglobal · ntr activex control | Critical 9.3 | 42% | 2 exploits | |
| CVE-2011-4789 | Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary code via a crafted size value in a packet. hp · diagnostics | Critical 10.0 | 64% | 2 exploits | |
| CVE-2011-4786 | A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and… hp · easy printer care software | Critical 9.3 | 39% | 2 exploits | |
| CVE-2012-0013 | Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a… microsoft · windows 7 | Critical 9.3 | 74% | 3 exploits | |
| CVE-2012-0003 | Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via a crafted MIDI file, aka "MIDI Remote… microsoft · windows xp | High 8.1 | 70% | 2 exploits | |
| CVE-2011-5052 | Stack-based buffer overflow in CoCSoft Stream Down 6.8.0 allows remote web servers to execute arbitrary code via a long response to a download request. cocsoft · stream down | Medium 6.8 | 30% | 3 exploits | |
| CVE-2011-4642 | mappy.py in Splunk Web in Splunk 4.2.x before 4.2.5 does not properly restrict use of the mappy command to access Python classes, which allows remote authenticated administrators to execute arbitrary code by leveraging the sys module in a request to the search application, as… splunk · splunk | Medium 4.6 | 29% | 3 exploits | |
| CVE-2011-3414 | The CaseInsensitiveHashProvider.getHashCode function in the HashTable implementation in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 computes hash values for form parameters without restricting the ability to trigger hash collisions… microsoft · windows 7 | High 7.8 | 58% | · | |
| CVE-2011-4885 | php: hash table collisions CPU usage DoS (oCERT-2011-003) php · php | Medium 5.0 | 83% | 3 exploits | |
| CVE-2011-5035 | GlassFish: hash table collisions CPU usage DoS (oCERT-2011-003) oracle · glassfish server | Medium 5.0 | 68% | 1 exploit | |
| CVE-2007-6750 | The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris, related to the lack of the mod_reqtimeout module in versions before 2.2.15. apache · http server | Medium 5.0 | 71% | · | |
| CVE-2011-4166 | Directory traversal vulnerability in the MPAUploader.Uploader.1.UploadFiles method in HP Managed Printing Administration before 2.6.4 allows remote attackers to create arbitrary files via crafted form data. hp · managed printing administration | High 7.5 | 58% | 2 exploits | |
| CVE-2011-4862 | Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long… gnu · inetutils | Critical 10.0 | 95% | 6 exploits | |
| CVE-2011-5010 | apps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via shell metacharacters in the PINGADDRESS parameter for a "u" action. ctekproducts · skyrouter | Critical 10.0 | 66% | 3 exploits | |
| CVE-2011-5007 | Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB AC500 PLC and possibly other products, allows remote attackers to execute arbitrary code via a long URI to TCP port 8080. 3ssoftware · codesys | Critical 10.0 | 73% | 4 exploits | |
| CVE-2011-5003 | Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port 4659. avid · media composer | Critical 10.0 | 62% | 2 exploits | |
| CVE-2011-5001 | Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in CmdProcessor.exe in Trend Micro Control Manager 5.5 before Build 1613 allows remote attackers to execute arbitrary code via a crafted IPC packet to TCP port 20101. trend micro · control manager | Critical 10.0 | 64% | 2 exploits | |
| CVE-2010-5081 | Stack-based buffer overflow in Mini-Stream RM-MP3 Converter 3.1.2.1 allows remote attackers to execute arbitrary code via a long URL in a .pls file. mini-stream · rm-mp3 converter | Critical 9.3 | 31% | 5 exploits | |
| CVE-2009-5109 | Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long entry in a .pls file. mini-stream · ripper | Critical 9.3 | 32% | 9 exploits | |
| CVE-2011-4453 | The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitrary code via PHP sequences in a crafted order parameter in a pagelist directive, leading to unintended use of the PHP create_function function. pmwiki · pmwiki | High 7.5 | 52% | 5 exploits | |
| CVE-2011-3658 | Mozilla: Multiple security flaws fixed in v3.6.25 (Mac) and v9 mozilla · firefox | High 7.5 | 70% | 2 exploits | |
| CVE-2011-4828 | Unrestricted file upload vulnerability in includes/inline_image_upload.php in AutoSec Tools V-CMS 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in temp/. autosectools · v-cms | High 7.5 | 65% | 2 exploits | |
| CVE-2011-4825 | Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into… phpletter · ajax file and image manager | High 7.5 | 39% | 7 exploits | |
| CVE-2011-3400 | Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 do not properly handle OLE objects in memory, which allows remote attackers to execute arbitrary code via a crafted object in a file, aka "OLE Property Vulnerability." microsoft · windows xp | Critical 9.3 | 71% | 2 exploits | |
| CVE-2011-2653 | Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management (ZAM) 7.5 allows remote attackers to execute arbitrary code by uploading an executable file. novell · zenworks asset management | Critical 10.0 | 72% | 2 exploits | |
| CVE-2011-4051 | CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows remote attackers to execute arbitrary code via vectors related to creation of a file, loading a DLL, and process control. indusoft · web studio | Critical 10.0 | 69% | 2 exploits | |
| CVE-2011-4317 | The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a… apache · http server | Medium 4.3 | 60% | 1 exploit | |
| CVE-2011-4542 | Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the (1) rs or (2) rsargs[] parameter in a mailbox Drafts action to the default URI. hastymail · hastymail2 | High 7.5 | 24% | 2 exploits | |
| CVE-2011-4040 | Buffer overflow in MiniSmtp 3.0.11818 in NJStar Communicator allows remote attackers to execute arbitrary code via a crafted packet. njstar · njstar communicator | Critical 10.0 | 65% | 3 exploits | |
| CVE-2011-4404 | The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before Update 2 allows remote attackers to conduct directory traversal attacks and read arbitrary files via unspecified vectors, a related… vmware · vcenter update manager | Medium 5.0 | 59% | 1 exploit | |
| CVE-2011-4075 | The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby parameter (aka sortby variable) in a query_engine action to cmd.php, as exploited in the wild in October 2011. phpldapadmin project · phpldapadmin | High 7.5 | 52% | 4 exploits | |
| CVE-2011-3167 | Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1210. hp · openview network node manager | Critical 10.0 | 65% | 2 exploits | |
| CVE-2011-3556 | OpenJDK: RMI DGC server remote code execution (RMI, 7077466) oracle · jrockit | High 7.5 | 76% | 2 exploits | |
| CVE-2011-3230 | Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers to execute arbitrary code via a crafted web site. apple · safari | Medium 6.8 | 49% | 2 exploits | |
| CVE-2011-1996 | Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Option Element Remote Code Execution Vulnerability." microsoft · internet explorer | Critical 9.3 | 59% | 2 exploits | |
| CVE-2011-3368 | The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers… apache · http server | Medium 5.0 | 91% | 1 exploit | |
| CVE-2011-3976 | Stack-based buffer overflow in AmmSoft ScriptFTP 3.3 allows remote FTP servers to execute arbitrary code via a long filename in a response to a LIST command, as demonstrated using (1) GETLIST or (2) GETFILE in a ScriptFTP script. ammsoft · scriptftp | Medium 6.8 | 31% | 5 exploits | |
| CVE-2011-3360 | Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory. wireshark · wireshark | Critical 9.3 | 35% | 2 exploits | |
| CVE-2011-3497 | service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method. measuresoft · scadapro | Critical 10.0 | 57% | 2 exploits | |
| CVE-2011-3494 | WinSig.exe in eSignal 10.6.2425 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a long StyleTemplate element in a QUO, SUM or POR file, which triggers a stack-based buffer overflow, or (2) a long Font->FaceName… interactivedata · esignal | Critical 10.0 | 56% | 3 exploits |
Showing 2,901–2,950 of 3,918
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.