Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
3,918 vulnerabilities · highest exploit probability first
- CVE-2011-0647Critical 10.0The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows remote attackers to execute arbitrary commands via the RunProgram function to TCP port 6542.emc · networker moduleEPSS64%2 exploitsPublished Feb 10, 2011
- CVE-2011-0923Critical 10.0The client in HP Data Protector does not properly validate EXEC_CMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted command, related to the "local bin directory."hp · data protectorEPSS81%6 exploitsPublished Feb 8, 2011
- CVE-2011-0922Critical 10.0The client in HP Data Protector allows remote attackers to execute arbitrary programs via an EXEC_SETUP command that references a UNC share pathname.hp · data protectorEPSS64%4 exploitsPublished Feb 8, 2011
- CVE-2011-0531Critical 9.3demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary commands via a crafted MKV (WebM or Matroska) file that triggers memory corruption, related to "class…videolan · vlc media playerEPSS42%2 exploitsPublished Feb 7, 2011
- CVE-2011-0522Medium 6.8The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.c) in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a subtitle with an opening "" in…videolan · vlc media playerEPSS52%2 exploitsPublished Feb 7, 2011
- CVE-2011-0049Medium 5.0Directory traversal vulnerability in the _list_file_get function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote attackers to read arbitrary files via ..mj2 · majordomo 2EPSS95%1 exploitPublished Feb 3, 2011
- CVE-2011-0276Critical 10.0HP OpenView Performance Insight Server 5.2, 5.3, 5.31, 5.4, and 5.41 contains a "hidden account" in the com.trinagy.security.XMLUserManager Java class, which allows remote attackers to execute arbitrary code via the doPost method in the com.trinagy.servlet.HelpManagerServlet…hp · openview performance insightEPSS82%2 exploitsPublished Feb 1, 2011
- CVE-2010-0111Critical 9.3HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine…symantec · antivirusEPSS35%1 exploitPublished Jan 31, 2011
- CVE-2011-0517Critical 9.3Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted 0x02 opcode to TCP port 46823.sielcosistemi · winlog proEPSS40%4 exploitsPublished Jan 20, 2011
- CVE-2011-0500Critical 9.3Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions; allows user-assisted remote attackers to execute arbitrary code via a VideoSpirit project (.visprj) file containing a valitem element with a long "value"…verytools · videospirit liteEPSS31%4 exploitsPublished Jan 20, 2011
- CVE-2011-0499Critical 9.3Buffer overflow in VideoSpirit Pro 1.6.8.1 and possibly earlier versions, and VideoSpirit Lite 1.4.0.1 and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a VideoSpirit project (.visprj) file containing a valitem element with a long…verytools · videospirit liteEPSS31%3 exploitsPublished Jan 20, 2011
- CVE-2010-4417High 7.5Unspecified vulnerability in the Services for Beehive component in Oracle Fusion Middleware 2.0.1.0, 2.0.1.1, 2.0.1.2, 2.0.1.2.1, and 2.0.1.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.oracle · beehiveEPSS76%2 exploitsPublished Jan 19, 2011
- CVE-2010-3600High 7.5Unspecified vulnerability in the Client System Analyzer component in Oracle Database Server 11.1.0.7 and 11.2.0.1 and Enterprise Manager Grid Control 10.2.0.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.oracle · database serverEPSS77%2 exploitsPublished Jan 19, 2011
- CVE-2010-4566Critical 9.3The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NTLM authentication component in Access Gateway Standard and Advanced Editions before Access Gateway 5.0, allows attackers to execute…citrix · access gatewayEPSS28%3 exploitsPublished Jan 14, 2011
- CVE-2010-4052Medium 5.0Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (resource exhaustion) via a regular expression containing adjacent…gnu · glibcEPSS51%2 exploitsPublished Jan 13, 2011
- CVE-2011-0267Critical 10.0Multiple buffer overflows in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allow remote attackers to execute arbitrary code via a long (1) schdParams or (2) nameParams parameter, a different vulnerability than CVE-2011-0266.hp · openview network node managerEPSS72%2 exploitsPublished Jan 13, 2011
- CVE-2011-0266Critical 10.0Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long nameParams parameter, a different vulnerability than CVE-2011-0267.2.hp · openview network node managerEPSS70%2 exploitsPublished Jan 13, 2011
- CVE-2011-0027Critical 9.3Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures, which allows remote attackers to execute arbitrary code, possibly via a large CacheSize property…microsoft · data access componentsEPSS54%1 exploitPublished Jan 11, 2011
- CVE-2011-0404High 7.5Stack-based buffer overflow in NetSupport Manager Agent for Linux 11.00, for Solaris 9.50, and for Mac OS X 11.00 allows remote attackers to execute arbitrary code via a long control hostname to TCP port 5405, probably a different vulnerability than CVE-2007-5252.netsupport · netsupport manager agentEPSS65%4 exploitsPublished Jan 11, 2011
- CVE-2010-4321Critical 9.3Stack-based buffer overflow in an ActiveX control in ienipp.ocx in Novell iPrint Client 5.52 allows remote attackers to execute arbitrary code via a long argument to (1) the GetDriverSettings2 method, as reachable by (2) the GetDriverSettings method.novell · iprint clientEPSS33%4 exploitsPublished Dec 30, 2010
- CVE-2010-3973Critical 9.3The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted argument to the AddContextRef method, possibly an untrusted…microsoft · wmi administrative toolsEPSS72%4 exploitsPublished Dec 23, 2010
- CVE-2010-3972Critical 10.0Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) 7.0, and IIS 7.5, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash)…microsoft · internet information servicesEPSS95%2 exploitsPublished Dec 23, 2010
- CVE-2010-3971Critical 9.3Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in mshtml.dll, as used in Microsoft Internet Explorer 6 through 8 and other products, allows remote attackers to execute arbitrary code or cause a denial of service…microsoft · internet explorerEPSS82%6 exploitsPublished Dec 22, 2010
- CVE-2010-3970Critical 9.3Stack-based buffer overflow in the CreateSizedDIBSECTION function in shimgvw.dll in the Windows Shell graphics processor (aka graphics rendering engine) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 allows remote attackers…microsoft · windows xpEPSS68%2 exploitsPublished Dec 22, 2010
- CVE-2010-2590Critical 9.3Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753 in SAP Crystal Reports 2008 SP3 Fix Pack 3.2 allows remote attackers to execute arbitrary code via a long ServerResourceVersion property value.sap · crystal reportsEPSS47%4 exploitsPublished Dec 22, 2010
- CVE-2010-3964High 7.5Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP…microsoft · sharepoint serverEPSS94%2 exploitsPublished Dec 16, 2010
- CVE-2010-3338High 7.2The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the security context of scheduled tasks, which allows local users to gain privileges via a crafted application, aka "Task Scheduler…microsoft · windows 7EPSS23%3 exploitsPublished Dec 16, 2010
- CVE-2010-4279Critical 10.0The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which allows remote attackers to bypass authentication by sending a request to index.php with "admin" in the loginhash_user parameter, in conjunction with the md5 hash…artica · pandora fmsEPSS66%4 exploitsPublished Dec 2, 2010
- CVE-2010-4221Critical 10.0Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to execute arbitrary code via vectors involving a TELNET IAC escape character to a (1) FTP or (2) FTPS server.proftpd · proftpdEPSS91%5 exploitsPublished Nov 9, 2010
- CVE-2010-4142Critical 10.0Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) SCPC_INITIALIZE, (2) SCPC_INITIALIZE_RF, or (3) SCPC_TXTEVENT packet.realflex · realwinEPSS63%10 exploitsPublished Nov 2, 2010
- CVE-2010-3654Critical 9.3acroread/flash-plugin: critical vulnerablility (APSA10-05, APSB10-26)adobe · acrobatEPSS70%3 exploitsPublished Oct 28, 2010
- CVE-2010-4094Medium 5.0The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN account, which makes it easier for remote attackers to execute arbitrary code by leveraging access to the manager role.ibm · rational quality managerEPSS64%3 exploitsPublished Oct 26, 2010
- CVE-2010-3653Critical 9.3The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted rcsL chunk containing a field whose value is used as a pointer…adobe · shockwave playerEPSS75%4 exploitsPublished Oct 26, 2010
- CVE-2010-3747Critical 9.3An ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not properly initialize an unspecified object component during parsing of a CDDA URI, which allows remote attackers to execute arbitrary code or…realnetworks · realplayerEPSS35%2 exploitsPublished Oct 18, 2010
- CVE-2010-0219Critical 10.0Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web…apache · axis2EPSS91%4 exploitsPublished Oct 18, 2010
- CVE-2010-3585Critical 9.0Unspecified vulnerability in the OracleVM component in Oracle VM 2.2.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to ovs-agent.oracle · vmEPSS52%2 exploitsPublished Oct 14, 2010
- CVE-2010-3229High 7.1The Secure Channel (aka SChannel) security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x is used, does not properly process client certificates during SSL and TLS handshakes, which allows remote attackers to…microsoft · windows 7EPSS50%·Published Oct 13, 2010
- CVE-2010-3563Critical 10.0OpenJDK: unspecified vulnerability in Deployment componentsun · jdkEPSS84%2 exploitsPublished Oct 12, 2010
- CVE-2010-3552Critical 10.0JDK unspecified vulnerability in New Java Plugin componentsun · jdkEPSS81%3 exploitsPublished Oct 12, 2010
- CVE-2010-3332Medium 6.4Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Services (IIS), provides detailed error codes during decryption attempts, which allows remote attackers to decrypt and modify encrypted View…microsoft · .net frameworkEPSS68%3 exploitsPublished Sep 22, 2010
- CVE-2010-3407Critical 9.3Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server in IBM Lotus Domino 8.0.x before 8.0.2 FP5 and 8.5.x before 8.5.1 FP2 allows remote attackers to execute arbitrary code via a long e-mail address in an…ibm · lotus dominoEPSS41%3 exploitsPublished Sep 16, 2010
- CVE-2010-2729Critical 9.3The Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when printer sharing is enabled, does not properly validate spooler access permissions, which allows remote…microsoft · windows 7EPSS76%2 exploitsPublished Sep 15, 2010
- CVE-2010-1899Medium 4.3Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0, and 7.5 allows remote attackers to cause a denial of service (daemon outage) via a crafted request, related to asp.dll, aka "IIS Repeated Parameter Request…microsoft · internet information servicesEPSS57%1 exploitPublished Sep 15, 2010
- CVE-2010-1807Critical 9.3webkit: input validation error when parsing certain NaN valuesapple · safariEPSS61%2 exploitsPublished Sep 7, 2010
- CVE-2010-3072Medium 5.0The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request.squid-cache · squidEPSS60%·Published Sep 3, 2010
- CVE-2010-3189Critical 9.3The extSetOwner function in the UfProxyBrowserCtrl ActiveX control (UfPBCtrl.dll) in Trend Micro Internet Security Pro 2010 allows remote attackers to execute arbitrary code via an invalid address that is dereferenced as a pointer.trendmicro · internet securityEPSS39%2 exploitsPublished Aug 31, 2010
- CVE-2010-1818Critical 9.3The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the _Marshaled_pUnk attribute, which triggers unmarshalling of an untrusted pointer.apple · quicktimeEPSS43%3 exploitsPublished Aug 31, 2010
- CVE-2009-4988Critical 10.0Stack-based buffer overflow in NT_Naming_Service.exe in SAP Business One 2005 A 6.80.123 and 6.80.320 allows remote attackers to execute arbitrary code via a long GIOP request to TCP port 30000.sap · business one 2005-aEPSS66%3 exploitsPublished Aug 25, 2010
- CVE-2010-3106Critical 9.3The ienipp.ocx ActiveX control in the browser plugin in Novell iPrint Client before 5.42 does not properly validate the debug parameter, which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a parameter value with a…novell · iprintEPSS37%3 exploitsPublished Aug 23, 2010
- CVE-2010-1527Critical 9.3Stack-based buffer overflow in Novell iPrint Client before 5.44 allows remote attackers to execute arbitrary code via a long call-back-url parameter in an op-client-interface-version action.novell · iprintEPSS36%3 exploitsPublished Aug 23, 2010
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2011-0647 | The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows remote attackers to execute arbitrary commands via the RunProgram function to TCP port 6542. emc · networker module | Critical 10.0 | 64% | 2 exploits | |
| CVE-2011-0923 | The client in HP Data Protector does not properly validate EXEC_CMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted command, related to the "local bin directory." hp · data protector | Critical 10.0 | 81% | 6 exploits | |
| CVE-2011-0922 | The client in HP Data Protector allows remote attackers to execute arbitrary programs via an EXEC_SETUP command that references a UNC share pathname. hp · data protector | Critical 10.0 | 64% | 4 exploits | |
| CVE-2011-0531 | demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary commands via a crafted MKV (WebM or Matroska) file that triggers memory corruption, related to "class… videolan · vlc media player | Critical 9.3 | 42% | 2 exploits | |
| CVE-2011-0522 | The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.c) in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a subtitle with an opening "" in… videolan · vlc media player | Medium 6.8 | 52% | 2 exploits | |
| CVE-2011-0049 | Directory traversal vulnerability in the _list_file_get function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote attackers to read arbitrary files via .. mj2 · majordomo 2 | Medium 5.0 | 95% | 1 exploit | |
| CVE-2011-0276 | HP OpenView Performance Insight Server 5.2, 5.3, 5.31, 5.4, and 5.41 contains a "hidden account" in the com.trinagy.security.XMLUserManager Java class, which allows remote attackers to execute arbitrary code via the doPost method in the com.trinagy.servlet.HelpManagerServlet… hp · openview performance insight | Critical 10.0 | 82% | 2 exploits | |
| CVE-2010-0111 | HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine… symantec · antivirus | Critical 9.3 | 35% | 1 exploit | |
| CVE-2011-0517 | Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted 0x02 opcode to TCP port 46823. sielcosistemi · winlog pro | Critical 9.3 | 40% | 4 exploits | |
| CVE-2011-0500 | Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions; allows user-assisted remote attackers to execute arbitrary code via a VideoSpirit project (.visprj) file containing a valitem element with a long "value"… verytools · videospirit lite | Critical 9.3 | 31% | 4 exploits | |
| CVE-2011-0499 | Buffer overflow in VideoSpirit Pro 1.6.8.1 and possibly earlier versions, and VideoSpirit Lite 1.4.0.1 and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a VideoSpirit project (.visprj) file containing a valitem element with a long… verytools · videospirit lite | Critical 9.3 | 31% | 3 exploits | |
| CVE-2010-4417 | Unspecified vulnerability in the Services for Beehive component in Oracle Fusion Middleware 2.0.1.0, 2.0.1.1, 2.0.1.2, 2.0.1.2.1, and 2.0.1.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. oracle · beehive | High 7.5 | 76% | 2 exploits | |
| CVE-2010-3600 | Unspecified vulnerability in the Client System Analyzer component in Oracle Database Server 11.1.0.7 and 11.2.0.1 and Enterprise Manager Grid Control 10.2.0.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. oracle · database server | High 7.5 | 77% | 2 exploits | |
| CVE-2010-4566 | The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NTLM authentication component in Access Gateway Standard and Advanced Editions before Access Gateway 5.0, allows attackers to execute… citrix · access gateway | Critical 9.3 | 28% | 3 exploits | |
| CVE-2010-4052 | Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (resource exhaustion) via a regular expression containing adjacent… gnu · glibc | Medium 5.0 | 51% | 2 exploits | |
| CVE-2011-0267 | Multiple buffer overflows in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allow remote attackers to execute arbitrary code via a long (1) schdParams or (2) nameParams parameter, a different vulnerability than CVE-2011-0266. hp · openview network node manager | Critical 10.0 | 72% | 2 exploits | |
| CVE-2011-0266 | Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long nameParams parameter, a different vulnerability than CVE-2011-0267.2. hp · openview network node manager | Critical 10.0 | 70% | 2 exploits | |
| CVE-2011-0027 | Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures, which allows remote attackers to execute arbitrary code, possibly via a large CacheSize property… microsoft · data access components | Critical 9.3 | 54% | 1 exploit | |
| CVE-2011-0404 | Stack-based buffer overflow in NetSupport Manager Agent for Linux 11.00, for Solaris 9.50, and for Mac OS X 11.00 allows remote attackers to execute arbitrary code via a long control hostname to TCP port 5405, probably a different vulnerability than CVE-2007-5252. netsupport · netsupport manager agent | High 7.5 | 65% | 4 exploits | |
| CVE-2010-4321 | Stack-based buffer overflow in an ActiveX control in ienipp.ocx in Novell iPrint Client 5.52 allows remote attackers to execute arbitrary code via a long argument to (1) the GetDriverSettings2 method, as reachable by (2) the GetDriverSettings method. novell · iprint client | Critical 9.3 | 33% | 4 exploits | |
| CVE-2010-3973 | The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted argument to the AddContextRef method, possibly an untrusted… microsoft · wmi administrative tools | Critical 9.3 | 72% | 4 exploits | |
| CVE-2010-3972 | Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) 7.0, and IIS 7.5, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash)… microsoft · internet information services | Critical 10.0 | 95% | 2 exploits | |
| CVE-2010-3971 | Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in mshtml.dll, as used in Microsoft Internet Explorer 6 through 8 and other products, allows remote attackers to execute arbitrary code or cause a denial of service… microsoft · internet explorer | Critical 9.3 | 82% | 6 exploits | |
| CVE-2010-3970 | Stack-based buffer overflow in the CreateSizedDIBSECTION function in shimgvw.dll in the Windows Shell graphics processor (aka graphics rendering engine) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 allows remote attackers… microsoft · windows xp | Critical 9.3 | 68% | 2 exploits | |
| CVE-2010-2590 | Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753 in SAP Crystal Reports 2008 SP3 Fix Pack 3.2 allows remote attackers to execute arbitrary code via a long ServerResourceVersion property value. sap · crystal reports | Critical 9.3 | 47% | 4 exploits | |
| CVE-2010-3964 | Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP… microsoft · sharepoint server | High 7.5 | 94% | 2 exploits | |
| CVE-2010-3338 | The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the security context of scheduled tasks, which allows local users to gain privileges via a crafted application, aka "Task Scheduler… microsoft · windows 7 | High 7.2 | 23% | 3 exploits | |
| CVE-2010-4279 | The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which allows remote attackers to bypass authentication by sending a request to index.php with "admin" in the loginhash_user parameter, in conjunction with the md5 hash… artica · pandora fms | Critical 10.0 | 66% | 4 exploits | |
| CVE-2010-4221 | Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to execute arbitrary code via vectors involving a TELNET IAC escape character to a (1) FTP or (2) FTPS server. proftpd · proftpd | Critical 10.0 | 91% | 5 exploits | |
| CVE-2010-4142 | Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) SCPC_INITIALIZE, (2) SCPC_INITIALIZE_RF, or (3) SCPC_TXTEVENT packet. realflex · realwin | Critical 10.0 | 63% | 10 exploits | |
| CVE-2010-3654 | acroread/flash-plugin: critical vulnerablility (APSA10-05, APSB10-26) adobe · acrobat | Critical 9.3 | 70% | 3 exploits | |
| CVE-2010-4094 | The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN account, which makes it easier for remote attackers to execute arbitrary code by leveraging access to the manager role. ibm · rational quality manager | Medium 5.0 | 64% | 3 exploits | |
| CVE-2010-3653 | The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted rcsL chunk containing a field whose value is used as a pointer… adobe · shockwave player | Critical 9.3 | 75% | 4 exploits | |
| CVE-2010-3747 | An ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not properly initialize an unspecified object component during parsing of a CDDA URI, which allows remote attackers to execute arbitrary code or… realnetworks · realplayer | Critical 9.3 | 35% | 2 exploits | |
| CVE-2010-0219 | Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web… apache · axis2 | Critical 10.0 | 91% | 4 exploits | |
| CVE-2010-3585 | Unspecified vulnerability in the OracleVM component in Oracle VM 2.2.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to ovs-agent. oracle · vm | Critical 9.0 | 52% | 2 exploits | |
| CVE-2010-3229 | The Secure Channel (aka SChannel) security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x is used, does not properly process client certificates during SSL and TLS handshakes, which allows remote attackers to… microsoft · windows 7 | High 7.1 | 50% | · | |
| CVE-2010-3563 | OpenJDK: unspecified vulnerability in Deployment component sun · jdk | Critical 10.0 | 84% | 2 exploits | |
| CVE-2010-3552 | JDK unspecified vulnerability in New Java Plugin component sun · jdk | Critical 10.0 | 81% | 3 exploits | |
| CVE-2010-3332 | Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Services (IIS), provides detailed error codes during decryption attempts, which allows remote attackers to decrypt and modify encrypted View… microsoft · .net framework | Medium 6.4 | 68% | 3 exploits | |
| CVE-2010-3407 | Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server in IBM Lotus Domino 8.0.x before 8.0.2 FP5 and 8.5.x before 8.5.1 FP2 allows remote attackers to execute arbitrary code via a long e-mail address in an… ibm · lotus domino | Critical 9.3 | 41% | 3 exploits | |
| CVE-2010-2729 | The Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when printer sharing is enabled, does not properly validate spooler access permissions, which allows remote… microsoft · windows 7 | Critical 9.3 | 76% | 2 exploits | |
| CVE-2010-1899 | Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0, and 7.5 allows remote attackers to cause a denial of service (daemon outage) via a crafted request, related to asp.dll, aka "IIS Repeated Parameter Request… microsoft · internet information services | Medium 4.3 | 57% | 1 exploit | |
| CVE-2010-1807 | webkit: input validation error when parsing certain NaN values apple · safari | Critical 9.3 | 61% | 2 exploits | |
| CVE-2010-3072 | The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request. squid-cache · squid | Medium 5.0 | 60% | · | |
| CVE-2010-3189 | The extSetOwner function in the UfProxyBrowserCtrl ActiveX control (UfPBCtrl.dll) in Trend Micro Internet Security Pro 2010 allows remote attackers to execute arbitrary code via an invalid address that is dereferenced as a pointer. trendmicro · internet security | Critical 9.3 | 39% | 2 exploits | |
| CVE-2010-1818 | The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the _Marshaled_pUnk attribute, which triggers unmarshalling of an untrusted pointer. apple · quicktime | Critical 9.3 | 43% | 3 exploits | |
| CVE-2009-4988 | Stack-based buffer overflow in NT_Naming_Service.exe in SAP Business One 2005 A 6.80.123 and 6.80.320 allows remote attackers to execute arbitrary code via a long GIOP request to TCP port 30000. sap · business one 2005-a | Critical 10.0 | 66% | 3 exploits | |
| CVE-2010-3106 | The ienipp.ocx ActiveX control in the browser plugin in Novell iPrint Client before 5.42 does not properly validate the debug parameter, which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a parameter value with a… novell · iprint | Critical 9.3 | 37% | 3 exploits | |
| CVE-2010-1527 | Stack-based buffer overflow in Novell iPrint Client before 5.44 allows remote attackers to execute arbitrary code via a long call-back-url parameter in an op-client-interface-version action. novell · iprint | Critical 9.3 | 36% | 3 exploits |
Showing 3,001–3,050 of 3,918
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.