Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
3,918 vulnerabilities · highest exploit probability first
- CVE-2011-3492Critical 10.0Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted NETB packet to UDP port 20034.azeotech · daqfactoryEPSS71%4 exploitsPublished Sep 16, 2011
- CVE-2011-3322Critical 10.0Core Server HMI Service (Coreservice.exe) in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password to the Telnet (TCP/23) port, which triggers an…scadatec · procyon scadaEPSS65%3 exploitsPublished Sep 15, 2011
- CVE-2011-2595Critical 10.0Multiple stack-based buffer overflows in ACDSee FotoSlate 4.0 Build 146 allow remote attackers to execute arbitrary code via a long id parameter in a (1) String or (2) Int tag in a FotoSlate Project (aka PLP) file.acdsee · fotoslateEPSS60%2 exploitsPublished Sep 14, 2011
- CVE-2011-3389Medium 4.3The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to…google · chromeEPSS73%·Published Sep 6, 2011
- CVE-2011-2763High 7.5The web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) and 4.7.18 allows remote attackers to execute arbitrary commands via a modified request to the LSRoom_Remoting.doCommand function in gateway.php.lifesize · lifesize room appliance softwareEPSS36%3 exploitsPublished Sep 2, 2011
- CVE-2011-3192High 7.8The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in…apache · http serverEPSS99%3 exploitsPublished Aug 29, 2011
- CVE-2011-2950Critical 9.3Heap-based buffer overflow in qcpfformat.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted QCP file.realnetworks · realplayerEPSS29%2 exploitsPublished Aug 18, 2011
- CVE-2011-0257Critical 9.3Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PnSize opcode in a PICT file that triggers a stack-based buffer overflow.apple · quicktimeEPSS60%2 exploitsPublished Aug 15, 2011
- CVE-2011-3011Medium 5.0BaseServiceImpl.class in CA ARCserve D2D r15 does not properly handle sessions, which allows remote attackers to obtain credentials, and consequently execute arbitrary commands, via unspecified vectors.ca · arcserve d2dEPSS72%2 exploitsPublished Aug 15, 2011
- CVE-2011-2404High 7.5A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-4786 and…hp · easy printer care softwareEPSS74%2 exploitsPublished Aug 11, 2011
- CVE-2011-1966Critical 10.0The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing, which allows remote attackers to execute arbitrary code via a crafted query, aka "DNS NAPTR Query Vulnerability."microsoft · windows server 2008EPSS55%·Published Aug 10, 2011
- CVE-2011-2140Critical 10.0flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)adobe · adobe airEPSS82%4 exploitsPublished Aug 9, 2011
- CVE-2011-2882Critical 9.3Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 allows remote attackers to execute arbitrary code via crafted HTTP header data.citrix · access gatewayEPSS56%2 exploitsPublished Jul 21, 2011
- CVE-2011-1774High 8.8WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted web site.apple · safariEPSS43%2 exploitsPublished Jul 21, 2011
- CVE-2011-1865Critical 10.0Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request containing crafted parameters.hp · openview storage data protectorEPSS89%6 exploitsPublished Jul 1, 2011
- CVE-2011-2371Critical 10.0Mozilla Integer overflow and arbitrary code execution (MFSA 2011-22)mozilla · firefoxEPSS76%4 exploitsPublished Jun 21, 2011
- CVE-2011-1260Critical 9.3Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Layout Memory Corruption Vulnerability."microsoft · internet explorerEPSS61%2 exploitsPublished Jun 16, 2011
- CVE-2011-2110Critical 10.0flash-plugin: memory corruption can lead to arbitrary code execution (APSB11-18)adobe · flash playerEPSS86%2 exploitsPublished Jun 14, 2011
- CVE-2011-2474Medium 5.0Directory traversal vulnerability in the HTTP Server in Sybase EAServer 6.3.1 Developer Edition allows remote attackers to read arbitrary files via a /.\../\../\ sequence in a path.sybase · easerverEPSS64%·Published Jun 9, 2011
- CVE-2011-2386Critical 9.3VisiWaveReport.exe in AZO Technologies, Inc.visiwave · site surveyEPSS45%3 exploitsPublished Jun 8, 2011
- CVE-2011-2217Critical 9.3Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.237, as used in VI Client (aka VMware Infrastructure Client) 2.0.2 before Build 230598 and 2.5 before Build 204931 in VMware Infrastructure 3, do not properly…tomsawyer · get extension factoryEPSS42%2 exploitsPublished Jun 6, 2011
- CVE-2011-1220Critical 9.0Stack-based buffer overflow in lcfd.exe in Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 allows remote authenticated users to execute arbitrary code via a long opts field.ibm · tivoli management frameworkEPSS63%2 exploitsPublished Jun 2, 2011
- CVE-2011-2039High 7.6The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.185 on Windows, and on Windows Mobile, downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote attackers to…cisco · anyconnect secure mobility clientEPSS70%2 exploitsPublished Jun 2, 2011
- CVE-2011-1213Critical 9.3Integer underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted header in a .lzh attachment that triggers a stack-based buffer overflow, aka SPR PRAD88MJ2W.ibm · lotus notesEPSS33%3 exploitsPublished May 31, 2011
- CVE-2011-2089Critical 9.3Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22 and GENESIS32 9.x before 9.22 allows remote attackers to execute arbitrary code via a long string in…iconics · bizvizEPSS38%5 exploitsPublished May 13, 2011
- CVE-2011-1574Medium 6.8Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary code via a crafted S3M file.konstanty bialkowski · libmodplugEPSS43%2 exploitsPublished May 9, 2011
- CVE-2011-0340Critical 9.3Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as distributed in Advantech Studio 6.1 SP6 61.6.01.05, InduSoft Web Studio before 7.0+SP1, and InduSoft Thin Client 7.0, allow remote attackers…advantech · advantech studioEPSS32%2 exploitsPublished May 4, 2011
- CVE-2011-1591Critical 9.3Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers to execute arbitrary code via a crafted .pcap file.wireshark · wiresharkEPSS42%7 exploitsPublished Apr 29, 2011
- CVE-2011-0065Critical 10.0Mozilla mChannel use after free (MFSA 2011-13)mozilla · firefoxEPSS74%6 exploitsPublished Apr 28, 2011
- CVE-2011-0073Critical 10.0Mozilla dangling pointer flaw (MFSA 2011-13)mozilla · firefoxEPSS70%3 exploitsPublished Apr 28, 2011
- CVE-2011-0807Critical 10.0Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration.sun · java system application serverEPSS61%2 exploitsPublished Apr 20, 2011
- CVE-2011-1653Critical 10.0Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote attackers to execute arbitrary SQL commands via vectors involving the (1) UnAssignFunctionalRoles, (2) UnassignAdminRoles, (3) DeleteFilter,…broadcom · total defenseEPSS89%2 exploitsPublished Apr 18, 2011
- CVE-2011-0657Critical 9.8DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process DNS queries, which allows remote attackers to execute…microsoft · windows 7EPSS62%·Published Apr 13, 2011
- CVE-2011-0105Critical 9.3Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file,…microsoft · excelEPSS70%2 exploitsPublished Apr 13, 2011
- CVE-2011-0104Critical 9.3Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HLink record in an Excel file, aka "Excel Buffer…microsoft · excelEPSS53%1 exploitPublished Apr 13, 2011
- CVE-2011-0997High 7.5dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message, as demonstrated by a hostname that is…isc · dhcpEPSS85%·Published Apr 8, 2011
- CVE-2011-1567Critical 10.0Multiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted (1) ListAll, (2) Write…7t · igssEPSS70%6 exploitsPublished Apr 5, 2011
- CVE-2011-1566Critical 10.0Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to execute arbitrary programs via ..\ (dot dot backslash) sequences in opcodes (1) 0xa and (2) 0x17 to TCP port 12397.7t · igssEPSS67%5 exploitsPublished Apr 5, 2011
- CVE-2011-1565Critical 10.0Directory traversal vulnerability in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to (1) read (opcode 0x3) or (2) create or write (opcode 0x2) arbitrary files via ..\ (dot dot backslash)…7t · igssEPSS64%3 exploitsPublished Apr 5, 2011
- CVE-2011-1563Critical 10.0Multiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via (1) a long username in an On_FC_CONNECT_FCS_LOGIN packet, and crafted (2) On_FC_CTAGLIST_FCS_CADDTAG, (3)…realflex · realwinEPSS75%4 exploitsPublished Apr 5, 2011
- CVE-2010-3275Critical 9.3libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an AMV file, related to a "dangling pointer vulnerability."videolan · vlc media playerEPSS76%3 exploitsPublished Mar 28, 2011
- CVE-2011-0063Medium 5.0The _list_file_get function in lib/Majordomo.pm in Majordomo 2 20110203 and earlier allows remote attackers to conduct directory traversal attacks and read arbitrary files via a ./.../ sequence in the "extra" parameter to the help command, which causes the regular expression to…mj2 · majordomo 2EPSS85%1 exploitPublished Mar 15, 2011
- CVE-2011-1473Medium 5.0openssl: DoS via repeated SSL session renegotiationsopenssl · opensslEPSS67%·Published Mar 13, 2011
- CVE-2009-3028Medium 6.8The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Symantec Management Platform 7.0.x exposes an unsafe method, which allows remote attackers to force the download of…symantec · altiris deployment solutionEPSS43%2 exploitsPublished Mar 7, 2011
- CVE-2011-0762Medium 4.0The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability…vsftpd project · vsftpdEPSS74%2 exploitsPublished Mar 2, 2011
- CVE-2010-4742Critical 10.0Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to execute arbitrary code via a long PlayFileName property value.moxa · activex sdkEPSS56%2 exploitsPublished Feb 18, 2011
- CVE-2010-4741Critical 9.3Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MDM Gateways to execute arbitrary code via crafted data in a session on TCP port 54321.moxa · device managerEPSS28%2 exploitsPublished Feb 18, 2011
- CVE-2010-4740Critical 9.3Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote attackers to execute arbitrary code via a crafted .csv file, related to a status log message.scadaengine · bacnet opc clientEPSS42%2 exploitsPublished Feb 16, 2011
- CVE-2011-0654Critical 10.0Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System (CIFS) browser service in Mrxsmb.sys or bowser.sys in Active Directory in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold,…microsoft · windows server 2003EPSS68%2 exploitsPublished Feb 15, 2011
- CVE-2010-4452Critical 10.0JDK unspecified vulnerability in Deployment componentsun · jdkEPSS83%2 exploitsPublished Feb 15, 2011
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2011-3492 | Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted NETB packet to UDP port 20034. azeotech · daqfactory | Critical 10.0 | 71% | 4 exploits | |
| CVE-2011-3322 | Core Server HMI Service (Coreservice.exe) in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password to the Telnet (TCP/23) port, which triggers an… scadatec · procyon scada | Critical 10.0 | 65% | 3 exploits | |
| CVE-2011-2595 | Multiple stack-based buffer overflows in ACDSee FotoSlate 4.0 Build 146 allow remote attackers to execute arbitrary code via a long id parameter in a (1) String or (2) Int tag in a FotoSlate Project (aka PLP) file. acdsee · fotoslate | Critical 10.0 | 60% | 2 exploits | |
| CVE-2011-3389 | The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to… google · chrome | Medium 4.3 | 73% | · | |
| CVE-2011-2763 | The web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) and 4.7.18 allows remote attackers to execute arbitrary commands via a modified request to the LSRoom_Remoting.doCommand function in gateway.php. lifesize · lifesize room appliance software | High 7.5 | 36% | 3 exploits | |
| CVE-2011-3192 | The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in… apache · http server | High 7.8 | 99% | 3 exploits | |
| CVE-2011-2950 | Heap-based buffer overflow in qcpfformat.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted QCP file. realnetworks · realplayer | Critical 9.3 | 29% | 2 exploits | |
| CVE-2011-0257 | Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PnSize opcode in a PICT file that triggers a stack-based buffer overflow. apple · quicktime | Critical 9.3 | 60% | 2 exploits | |
| CVE-2011-3011 | BaseServiceImpl.class in CA ARCserve D2D r15 does not properly handle sessions, which allows remote attackers to obtain credentials, and consequently execute arbitrary commands, via unspecified vectors. ca · arcserve d2d | Medium 5.0 | 72% | 2 exploits | |
| CVE-2011-2404 | A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-4786 and… hp · easy printer care software | High 7.5 | 74% | 2 exploits | |
| CVE-2011-1966 | The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing, which allows remote attackers to execute arbitrary code via a crafted query, aka "DNS NAPTR Query Vulnerability." microsoft · windows server 2008 | Critical 10.0 | 55% | · | |
| CVE-2011-2140 | flash-plugin: multiple arbitrary code execution flaws (APSB-11-21) adobe · adobe air | Critical 10.0 | 82% | 4 exploits | |
| CVE-2011-2882 | Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 allows remote attackers to execute arbitrary code via crafted HTTP header data. citrix · access gateway | Critical 9.3 | 56% | 2 exploits | |
| CVE-2011-1774 | WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted web site. apple · safari | High 8.8 | 43% | 2 exploits | |
| CVE-2011-1865 | Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request containing crafted parameters. hp · openview storage data protector | Critical 10.0 | 89% | 6 exploits | |
| CVE-2011-2371 | Mozilla Integer overflow and arbitrary code execution (MFSA 2011-22) mozilla · firefox | Critical 10.0 | 76% | 4 exploits | |
| CVE-2011-1260 | Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Layout Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 61% | 2 exploits | |
| CVE-2011-2110 | flash-plugin: memory corruption can lead to arbitrary code execution (APSB11-18) adobe · flash player | Critical 10.0 | 86% | 2 exploits | |
| CVE-2011-2474 | Directory traversal vulnerability in the HTTP Server in Sybase EAServer 6.3.1 Developer Edition allows remote attackers to read arbitrary files via a /.\../\../\ sequence in a path. sybase · easerver | Medium 5.0 | 64% | · | |
| CVE-2011-2386 | VisiWaveReport.exe in AZO Technologies, Inc. visiwave · site survey | Critical 9.3 | 45% | 3 exploits | |
| CVE-2011-2217 | Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.237, as used in VI Client (aka VMware Infrastructure Client) 2.0.2 before Build 230598 and 2.5 before Build 204931 in VMware Infrastructure 3, do not properly… tomsawyer · get extension factory | Critical 9.3 | 42% | 2 exploits | |
| CVE-2011-1220 | Stack-based buffer overflow in lcfd.exe in Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 allows remote authenticated users to execute arbitrary code via a long opts field. ibm · tivoli management framework | Critical 9.0 | 63% | 2 exploits | |
| CVE-2011-2039 | The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.185 on Windows, and on Windows Mobile, downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote attackers to… cisco · anyconnect secure mobility client | High 7.6 | 70% | 2 exploits | |
| CVE-2011-1213 | Integer underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted header in a .lzh attachment that triggers a stack-based buffer overflow, aka SPR PRAD88MJ2W. ibm · lotus notes | Critical 9.3 | 33% | 3 exploits | |
| CVE-2011-2089 | Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22 and GENESIS32 9.x before 9.22 allows remote attackers to execute arbitrary code via a long string in… iconics · bizviz | Critical 9.3 | 38% | 5 exploits | |
| CVE-2011-1574 | Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary code via a crafted S3M file. konstanty bialkowski · libmodplug | Medium 6.8 | 43% | 2 exploits | |
| CVE-2011-0340 | Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as distributed in Advantech Studio 6.1 SP6 61.6.01.05, InduSoft Web Studio before 7.0+SP1, and InduSoft Thin Client 7.0, allow remote attackers… advantech · advantech studio | Critical 9.3 | 32% | 2 exploits | |
| CVE-2011-1591 | Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers to execute arbitrary code via a crafted .pcap file. wireshark · wireshark | Critical 9.3 | 42% | 7 exploits | |
| CVE-2011-0065 | Mozilla mChannel use after free (MFSA 2011-13) mozilla · firefox | Critical 10.0 | 74% | 6 exploits | |
| CVE-2011-0073 | Mozilla dangling pointer flaw (MFSA 2011-13) mozilla · firefox | Critical 10.0 | 70% | 3 exploits | |
| CVE-2011-0807 | Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration. sun · java system application server | Critical 10.0 | 61% | 2 exploits | |
| CVE-2011-1653 | Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote attackers to execute arbitrary SQL commands via vectors involving the (1) UnAssignFunctionalRoles, (2) UnassignAdminRoles, (3) DeleteFilter,… broadcom · total defense | Critical 10.0 | 89% | 2 exploits | |
| CVE-2011-0657 | DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process DNS queries, which allows remote attackers to execute… microsoft · windows 7 | Critical 9.8 | 62% | · | |
| CVE-2011-0105 | Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file,… microsoft · excel | Critical 9.3 | 70% | 2 exploits | |
| CVE-2011-0104 | Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HLink record in an Excel file, aka "Excel Buffer… microsoft · excel | Critical 9.3 | 53% | 1 exploit | |
| CVE-2011-0997 | dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message, as demonstrated by a hostname that is… isc · dhcp | High 7.5 | 85% | · | |
| CVE-2011-1567 | Multiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted (1) ListAll, (2) Write… 7t · igss | Critical 10.0 | 70% | 6 exploits | |
| CVE-2011-1566 | Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to execute arbitrary programs via ..\ (dot dot backslash) sequences in opcodes (1) 0xa and (2) 0x17 to TCP port 12397. 7t · igss | Critical 10.0 | 67% | 5 exploits | |
| CVE-2011-1565 | Directory traversal vulnerability in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to (1) read (opcode 0x3) or (2) create or write (opcode 0x2) arbitrary files via ..\ (dot dot backslash)… 7t · igss | Critical 10.0 | 64% | 3 exploits | |
| CVE-2011-1563 | Multiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via (1) a long username in an On_FC_CONNECT_FCS_LOGIN packet, and crafted (2) On_FC_CTAGLIST_FCS_CADDTAG, (3)… realflex · realwin | Critical 10.0 | 75% | 4 exploits | |
| CVE-2010-3275 | libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an AMV file, related to a "dangling pointer vulnerability." videolan · vlc media player | Critical 9.3 | 76% | 3 exploits | |
| CVE-2011-0063 | The _list_file_get function in lib/Majordomo.pm in Majordomo 2 20110203 and earlier allows remote attackers to conduct directory traversal attacks and read arbitrary files via a ./.../ sequence in the "extra" parameter to the help command, which causes the regular expression to… mj2 · majordomo 2 | Medium 5.0 | 85% | 1 exploit | |
| CVE-2011-1473 | openssl: DoS via repeated SSL session renegotiations openssl · openssl | Medium 5.0 | 67% | · | |
| CVE-2009-3028 | The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Symantec Management Platform 7.0.x exposes an unsafe method, which allows remote attackers to force the download of… symantec · altiris deployment solution | Medium 6.8 | 43% | 2 exploits | |
| CVE-2011-0762 | The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability… vsftpd project · vsftpd | Medium 4.0 | 74% | 2 exploits | |
| CVE-2010-4742 | Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to execute arbitrary code via a long PlayFileName property value. moxa · activex sdk | Critical 10.0 | 56% | 2 exploits | |
| CVE-2010-4741 | Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MDM Gateways to execute arbitrary code via crafted data in a session on TCP port 54321. moxa · device manager | Critical 9.3 | 28% | 2 exploits | |
| CVE-2010-4740 | Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote attackers to execute arbitrary code via a crafted .csv file, related to a status log message. scadaengine · bacnet opc client | Critical 9.3 | 42% | 2 exploits | |
| CVE-2011-0654 | Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System (CIFS) browser service in Mrxsmb.sys or bowser.sys in Active Directory in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold,… microsoft · windows server 2003 | Critical 10.0 | 68% | 2 exploits | |
| CVE-2010-4452 | JDK unspecified vulnerability in Deployment component sun · jdk | Critical 10.0 | 83% | 2 exploits |
Showing 2,951–3,000 of 3,918
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.