Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
3,918 vulnerabilities · highest exploit probability first
- CVE-2010-0688Critical 9.3Stack-based buffer overflow in Orbital Viewer 1.04 allows user-assisted remote attackers to execute arbitrary code via a crafted (1) .orb or (2) .ov file.orbitals · orbital viewerEPSS38%5 exploitsPublished Mar 19, 2010
- CVE-2010-0258High 7.8Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 do not properly…microsoft · excelEPSS61%·Published Mar 10, 2010
- CVE-2010-0103Critical 9.3UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the %WINDIR%\system32 directory, which allows remote attackers to download arbitrary programs onto a Windows PC, and execute these programs,…energizer · duo usbEPSS27%2 exploitsPublished Mar 10, 2010
- CVE-2010-0425Critical 10.0modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapi_unload for an ISAPI .dll module, which…apache · http serverEPSS94%1 exploitPublished Mar 5, 2010
- CVE-2009-4660Critical 10.0Stack-based buffer overflow in the AntServer Module (AntServer.exe) in BigAnt IM Server 2.50 allows remote attackers to execute arbitrary code via a long GET request to TCP port 6660.bigantsoft · bigant messengerEPSS63%3 exploitsPublished Mar 3, 2010
- CVE-2009-4656Critical 9.3Stack-based buffer overflow in E-Soft DJ Studio Pro 4.2 including 4.2.2.7.5, and 5.x including 5.1.4.3.1, allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a playlist file (.pls) containing a long…e-soft.co · dj studio proEPSS32%5 exploitsPublished Mar 3, 2010
- CVE-2010-0483High 7.6vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by referencing a (1) local pathname, (2) UNC share pathname, or (3)…microsoft · windows 2000EPSS87%3 exploitsPublished Mar 3, 2010
- CVE-2009-4655High 7.5The dhost web service in Novell eDirectory 8.8.5 uses a predictable session cookie, which makes it easier for remote attackers to hijack sessions via a modified cookie.novell · edirectoryEPSS51%1 exploitPublished Feb 26, 2010
- CVE-2010-0679Critical 9.3Multiple stack-based buffer overflows in the HyleosChemView.HLChemView ActiveX control (HyleosChemView.ocx) in Hyleos ChemView 1.9.5.1 allow remote attackers to execute arbitrary code via a large number of white space characters in the filename argument to the (1) SaveasMolFile…hyleos · chemviewEPSS35%4 exploitsPublished Feb 22, 2010
- CVE-2010-0242High 7.8The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service (system hang) via crafted packets with malformed TCP selective acknowledgement (SACK) values, aka "TCP/IP Selective…microsoft · windows vistaEPSS66%·Published Feb 10, 2010
- CVE-2010-0239Critical 10.0The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Router Advertisement packets, which allows remote attackers to execute arbitrary code via crafted…microsoft · windows vistaEPSS61%1 exploitPublished Feb 10, 2010
- CVE-2010-0033Critical 9.3Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint Viewer TextBytesAtom Record Stack Overflow Vulnerability."microsoft · powerpointEPSS51%2 exploitsPublished Feb 10, 2010
- CVE-2010-0022High 7.8The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate the share and servername fields in SMB…microsoft · windows 2000EPSS79%·Published Feb 10, 2010
- CVE-2010-0557High 7.5IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leveraging hardcoded credentials.ibm · cognos expressEPSS52%3 exploitsPublished Feb 5, 2010
- CVE-2010-0304High 7.5Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demonstrated using a stack-based buffer overflow to the…wireshark · wiresharkEPSS74%5 exploitsPublished Feb 3, 2010
- CVE-2009-4484High 7.5mysql: yaSSL certificate parsing buffer overflow (vulndisco)oracle · mysqlEPSS70%2 exploitsPublished Jan 25, 2010
- CVE-2010-0248High 8.1Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Object…microsoft · internet explorerEPSS53%2 exploitsPublished Jan 22, 2010
- CVE-2009-3999Critical 10.0Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter.hp · power managerEPSS72%2 exploitsPublished Jan 20, 2010
- CVE-2010-0361Critical 10.0Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long URI in an HTTP OPTIONS request.sun · java system web serverEPSS80%4 exploitsPublished Jan 20, 2010
- CVE-2010-0356Critical 9.3Stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control in MoviePlayer.ocx 6.8.0.0 in Viscom Software Movie Player Pro SDK ActiveX 6.8 allows remote attackers to execute arbitrary code via a long strFontName parameter to the DrawText method.viscomsoft · movie player pro sdk activexEPSS30%3 exploitsPublished Jan 18, 2010
- CVE-2009-3958Critical 10.0acroread: multiple code execution flaws (APSB10-02)adobe · acrobatEPSS53%1 exploitPublished Jan 12, 2010
- CVE-2009-4588Critical 9.3Heap-based buffer overflow in the WindsPlayerIE.View.1 ActiveX control in WindsPly.ocx 3.5.0.0 Beta, 3.0.0.5, and earlier in AwingSoft Awakening Web3D Player and Winds3D Viewer allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via…awingsoft · awakening winds3d playerEPSS32%3 exploitsPublished Jan 7, 2010
- CVE-2009-4502Critical 9.3The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote attackers to bypass the EnableRemoteCommands setting and execute arbitrary commands via shell metacharacters in the argument to net.tcp.listen.zabbix · zabbixEPSS22%3 exploitsPublished Dec 31, 2009
- CVE-2009-4498Medium 6.8The node_process_command function in Zabbix Server before 1.8 allows remote attackers to execute arbitrary commands via a crafted request.zabbix · zabbixEPSS32%3 exploitsPublished Dec 31, 2009
- CVE-2009-4444Medium 6.0Microsoft Internet Information Services (IIS) 5.x and 6.x uses only the portion of a filename before a ; (semicolon) character to determine the file extension, which allows remote attackers to bypass intended extension restrictions of third-party upload applications via a…microsoft · internet information servicesEPSS64%·Published Dec 29, 2009
- CVE-2007-2280Critical 10.0Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via an MSG_PROTOCOL command with long arguments,…hp · openview storage data protectorEPSS60%2 exploitsPublished Dec 18, 2009
- CVE-2009-4179Critical 10.0Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Accept-Language header in an OVABverbose action.hp · openview network node managerEPSS67%3 exploitsPublished Dec 10, 2009
- CVE-2009-4178Critical 10.0Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long Topic parameter.hp · openview network node managerEPSS74%3 exploitsPublished Dec 10, 2009
- CVE-2009-3849Critical 10.0Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long Template parameter to nnmRptConfig.exe, related to the strcat function; or (2) a long Oid parameter to snmp.exe.hp · openview network node managerEPSS74%2 exploitsPublished Dec 10, 2009
- CVE-2009-4265Critical 9.3Stack-based buffer overflow in Ideal Administration 2009 9.7.1, and possibly other versions, allows remote attackers to execute arbitrary code via a long Computer value in an .ipj project file.pointdev · ideal administration 2009EPSS31%4 exploitsPublished Dec 10, 2009
- CVE-2009-3844Critical 10.0Stack-based buffer overflow in the OmniInet process in HP OpenView Data Protector Application Recovery Manager 5.50 and 6.0 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted MSG_PROTOCOL packet.hp · openview data protector application recovery managerEPSS74%3 exploitsPublished Dec 8, 2009
- CVE-2009-1569Critical 9.3Multiple stack-based buffer overflows in Novell iPrint Client 4.38, 5.30, and possibly other versions before 5.32 allow remote attackers to execute arbitrary code via vectors related to (1) Date and (2) Time.novell · iprintEPSS38%2 exploitsPublished Dec 8, 2009
- CVE-2009-1568Critical 9.3Stack-based buffer overflow in ienipp.ocx in Novell iPrint Client 5.30, and possibly other versions before 5.32, allows remote attackers to execute arbitrary code via a long target-frame parameter.novell · iprint clientEPSS32%2 exploitsPublished Dec 8, 2009
- CVE-2009-4225Critical 9.3Stack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust PestPatrol allows remote attackers to execute arbitrary code via a long argument to the Initialize method.ca · etrust pestpatrole ppctl.dll activexEPSS31%2 exploitsPublished Dec 8, 2009
- CVE-2009-4223High 7.5PHP remote file inclusion vulnerability in adm/krgourl.php in KR-Web 1.1b2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter.gianni tommasi · kr-php web content serverEPSS55%2 exploitsPublished Dec 7, 2009
- CVE-2009-4195Critical 9.3Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execute arbitrary code via a long DSC comment in an Encapsulated PostScript (.eps) file.adobe · illustratorEPSS71%4 exploitsPublished Dec 4, 2009
- CVE-2009-4189Critical 10.0HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet…hp · operations managerEPSS79%3 exploitsPublished Dec 3, 2009
- CVE-2009-4188Critical 10.0HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat…hp · operations dashboardEPSS69%4 exploitsPublished Dec 3, 2009
- CVE-2009-3672Critical 9.3Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory that (1) were not properly initialized or (2) are deleted, which allows remote attackers to execute arbitrary code via vectors involving a call to the getElementsByTagName method for the STYLE tag…microsoft · internet explorerEPSS72%2 exploitsPublished Dec 2, 2009
- CVE-2009-3033Critical 9.3Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment Solution 6.9.x, Altiris Notification Server 6.0.x, and Management Platform 7.0.x allows remote…symantec · altiris deployment solutionEPSS40%2 exploitsPublished Nov 25, 2009
- CVE-2009-3843Critical 10.0HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the…hp · operations managerEPSS79%3 exploitsPublished Nov 23, 2009
- CVE-2009-4006Critical 10.0Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other versions before 9.1.0.0 allows remote attackers to execute arbitrary code via a long hexadecimal string.solarwinds · serv-u file serverEPSS83%2 exploitsPublished Nov 20, 2009
- CVE-2009-3976Critical 9.3Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service (application crash) or execute arbitrary code via a long 220 reply (aka connection greeting or welcome message).labtam-inc · proftpEPSS28%3 exploitsPublished Nov 18, 2009
- CVE-2009-3548High 7.5The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges.apache · tomcatEPSS79%4 exploitsPublished Nov 12, 2009
- CVE-2009-2685Critical 10.0Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers to execute arbitrary code via the Login variable.hp · power managerEPSS77%3 exploitsPublished Nov 6, 2009
- CVE-2009-3853Critical 9.3Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7, 5.4 before 5.4.3, 5.5 before 5.5.2.2, and 6.1 before 6.1.0.2, and TSM Express 5.3.3.0 through 5.3.6.6, allows remote attackers to…ibm · tivoli storage managerEPSS37%2 exploitsPublished Nov 4, 2009
- CVE-2009-3031Critical 9.3Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSConsoleUtilities.dll in Symantec Altiris Notification Server (NS) 6.0 before R12, Deployment Server 6.8 and 6.9 in Symantec Altiris…symantec · altiris deployment solutionEPSS45%3 exploitsPublished Nov 3, 2009
- CVE-2009-3867Critical 9.3java-1.6.0-sun: Stack-based buffer overflow via a long file: URL argument (6854303)sun · jdkEPSS73%4 exploitsPublished Nov 3, 2009
- CVE-2009-3869Critical 9.3OpenJDK JRE AWT setDifflCM stack overflow (6872357)sun · jdkEPSS65%2 exploitsPublished Nov 3, 2009
- CVE-2009-3837Critical 9.3Stack-based buffer overflow in Eureka Email 2.2q allows remote POP3 servers to execute arbitrary code via a long error message.eureka-email · eureka emailEPSS32%4 exploitsPublished Nov 2, 2009
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2010-0688 | Stack-based buffer overflow in Orbital Viewer 1.04 allows user-assisted remote attackers to execute arbitrary code via a crafted (1) .orb or (2) .ov file. orbitals · orbital viewer | Critical 9.3 | 38% | 5 exploits | |
| CVE-2010-0258 | Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 do not properly… microsoft · excel | High 7.8 | 61% | · | |
| CVE-2010-0103 | UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the %WINDIR%\system32 directory, which allows remote attackers to download arbitrary programs onto a Windows PC, and execute these programs,… energizer · duo usb | Critical 9.3 | 27% | 2 exploits | |
| CVE-2010-0425 | modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapi_unload for an ISAPI .dll module, which… apache · http server | Critical 10.0 | 94% | 1 exploit | |
| CVE-2009-4660 | Stack-based buffer overflow in the AntServer Module (AntServer.exe) in BigAnt IM Server 2.50 allows remote attackers to execute arbitrary code via a long GET request to TCP port 6660. bigantsoft · bigant messenger | Critical 10.0 | 63% | 3 exploits | |
| CVE-2009-4656 | Stack-based buffer overflow in E-Soft DJ Studio Pro 4.2 including 4.2.2.7.5, and 5.x including 5.1.4.3.1, allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a playlist file (.pls) containing a long… e-soft.co · dj studio pro | Critical 9.3 | 32% | 5 exploits | |
| CVE-2010-0483 | vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by referencing a (1) local pathname, (2) UNC share pathname, or (3)… microsoft · windows 2000 | High 7.6 | 87% | 3 exploits | |
| CVE-2009-4655 | The dhost web service in Novell eDirectory 8.8.5 uses a predictable session cookie, which makes it easier for remote attackers to hijack sessions via a modified cookie. novell · edirectory | High 7.5 | 51% | 1 exploit | |
| CVE-2010-0679 | Multiple stack-based buffer overflows in the HyleosChemView.HLChemView ActiveX control (HyleosChemView.ocx) in Hyleos ChemView 1.9.5.1 allow remote attackers to execute arbitrary code via a large number of white space characters in the filename argument to the (1) SaveasMolFile… hyleos · chemview | Critical 9.3 | 35% | 4 exploits | |
| CVE-2010-0242 | The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service (system hang) via crafted packets with malformed TCP selective acknowledgement (SACK) values, aka "TCP/IP Selective… microsoft · windows vista | High 7.8 | 66% | · | |
| CVE-2010-0239 | The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Router Advertisement packets, which allows remote attackers to execute arbitrary code via crafted… microsoft · windows vista | Critical 10.0 | 61% | 1 exploit | |
| CVE-2010-0033 | Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint Viewer TextBytesAtom Record Stack Overflow Vulnerability." microsoft · powerpoint | Critical 9.3 | 51% | 2 exploits | |
| CVE-2010-0022 | The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate the share and servername fields in SMB… microsoft · windows 2000 | High 7.8 | 79% | · | |
| CVE-2010-0557 | IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leveraging hardcoded credentials. ibm · cognos express | High 7.5 | 52% | 3 exploits | |
| CVE-2010-0304 | Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demonstrated using a stack-based buffer overflow to the… wireshark · wireshark | High 7.5 | 74% | 5 exploits | |
| CVE-2009-4484 | mysql: yaSSL certificate parsing buffer overflow (vulndisco) oracle · mysql | High 7.5 | 70% | 2 exploits | |
| CVE-2010-0248 | Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Object… microsoft · internet explorer | High 8.1 | 53% | 2 exploits | |
| CVE-2009-3999 | Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter. hp · power manager | Critical 10.0 | 72% | 2 exploits | |
| CVE-2010-0361 | Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long URI in an HTTP OPTIONS request. sun · java system web server | Critical 10.0 | 80% | 4 exploits | |
| CVE-2010-0356 | Stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control in MoviePlayer.ocx 6.8.0.0 in Viscom Software Movie Player Pro SDK ActiveX 6.8 allows remote attackers to execute arbitrary code via a long strFontName parameter to the DrawText method. viscomsoft · movie player pro sdk activex | Critical 9.3 | 30% | 3 exploits | |
| CVE-2009-3958 | acroread: multiple code execution flaws (APSB10-02) adobe · acrobat | Critical 10.0 | 53% | 1 exploit | |
| CVE-2009-4588 | Heap-based buffer overflow in the WindsPlayerIE.View.1 ActiveX control in WindsPly.ocx 3.5.0.0 Beta, 3.0.0.5, and earlier in AwingSoft Awakening Web3D Player and Winds3D Viewer allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via… awingsoft · awakening winds3d player | Critical 9.3 | 32% | 3 exploits | |
| CVE-2009-4502 | The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote attackers to bypass the EnableRemoteCommands setting and execute arbitrary commands via shell metacharacters in the argument to net.tcp.listen. zabbix · zabbix | Critical 9.3 | 22% | 3 exploits | |
| CVE-2009-4498 | The node_process_command function in Zabbix Server before 1.8 allows remote attackers to execute arbitrary commands via a crafted request. zabbix · zabbix | Medium 6.8 | 32% | 3 exploits | |
| CVE-2009-4444 | Microsoft Internet Information Services (IIS) 5.x and 6.x uses only the portion of a filename before a ; (semicolon) character to determine the file extension, which allows remote attackers to bypass intended extension restrictions of third-party upload applications via a… microsoft · internet information services | Medium 6.0 | 64% | · | |
| CVE-2007-2280 | Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via an MSG_PROTOCOL command with long arguments,… hp · openview storage data protector | Critical 10.0 | 60% | 2 exploits | |
| CVE-2009-4179 | Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Accept-Language header in an OVABverbose action. hp · openview network node manager | Critical 10.0 | 67% | 3 exploits | |
| CVE-2009-4178 | Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long Topic parameter. hp · openview network node manager | Critical 10.0 | 74% | 3 exploits | |
| CVE-2009-3849 | Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long Template parameter to nnmRptConfig.exe, related to the strcat function; or (2) a long Oid parameter to snmp.exe. hp · openview network node manager | Critical 10.0 | 74% | 2 exploits | |
| CVE-2009-4265 | Stack-based buffer overflow in Ideal Administration 2009 9.7.1, and possibly other versions, allows remote attackers to execute arbitrary code via a long Computer value in an .ipj project file. pointdev · ideal administration 2009 | Critical 9.3 | 31% | 4 exploits | |
| CVE-2009-3844 | Stack-based buffer overflow in the OmniInet process in HP OpenView Data Protector Application Recovery Manager 5.50 and 6.0 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted MSG_PROTOCOL packet. hp · openview data protector application recovery manager | Critical 10.0 | 74% | 3 exploits | |
| CVE-2009-1569 | Multiple stack-based buffer overflows in Novell iPrint Client 4.38, 5.30, and possibly other versions before 5.32 allow remote attackers to execute arbitrary code via vectors related to (1) Date and (2) Time. novell · iprint | Critical 9.3 | 38% | 2 exploits | |
| CVE-2009-1568 | Stack-based buffer overflow in ienipp.ocx in Novell iPrint Client 5.30, and possibly other versions before 5.32, allows remote attackers to execute arbitrary code via a long target-frame parameter. novell · iprint client | Critical 9.3 | 32% | 2 exploits | |
| CVE-2009-4225 | Stack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust PestPatrol allows remote attackers to execute arbitrary code via a long argument to the Initialize method. ca · etrust pestpatrole ppctl.dll activex | Critical 9.3 | 31% | 2 exploits | |
| CVE-2009-4223 | PHP remote file inclusion vulnerability in adm/krgourl.php in KR-Web 1.1b2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter. gianni tommasi · kr-php web content server | High 7.5 | 55% | 2 exploits | |
| CVE-2009-4195 | Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execute arbitrary code via a long DSC comment in an Encapsulated PostScript (.eps) file. adobe · illustrator | Critical 9.3 | 71% | 4 exploits | |
| CVE-2009-4189 | HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet… hp · operations manager | Critical 10.0 | 79% | 3 exploits | |
| CVE-2009-4188 | HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat… hp · operations dashboard | Critical 10.0 | 69% | 4 exploits | |
| CVE-2009-3672 | Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory that (1) were not properly initialized or (2) are deleted, which allows remote attackers to execute arbitrary code via vectors involving a call to the getElementsByTagName method for the STYLE tag… microsoft · internet explorer | Critical 9.3 | 72% | 2 exploits | |
| CVE-2009-3033 | Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment Solution 6.9.x, Altiris Notification Server 6.0.x, and Management Platform 7.0.x allows remote… symantec · altiris deployment solution | Critical 9.3 | 40% | 2 exploits | |
| CVE-2009-3843 | HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the… hp · operations manager | Critical 10.0 | 79% | 3 exploits | |
| CVE-2009-4006 | Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other versions before 9.1.0.0 allows remote attackers to execute arbitrary code via a long hexadecimal string. solarwinds · serv-u file server | Critical 10.0 | 83% | 2 exploits | |
| CVE-2009-3976 | Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service (application crash) or execute arbitrary code via a long 220 reply (aka connection greeting or welcome message). labtam-inc · proftp | Critical 9.3 | 28% | 3 exploits | |
| CVE-2009-3548 | The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges. apache · tomcat | High 7.5 | 79% | 4 exploits | |
| CVE-2009-2685 | Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers to execute arbitrary code via the Login variable. hp · power manager | Critical 10.0 | 77% | 3 exploits | |
| CVE-2009-3853 | Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7, 5.4 before 5.4.3, 5.5 before 5.5.2.2, and 6.1 before 6.1.0.2, and TSM Express 5.3.3.0 through 5.3.6.6, allows remote attackers to… ibm · tivoli storage manager | Critical 9.3 | 37% | 2 exploits | |
| CVE-2009-3031 | Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSConsoleUtilities.dll in Symantec Altiris Notification Server (NS) 6.0 before R12, Deployment Server 6.8 and 6.9 in Symantec Altiris… symantec · altiris deployment solution | Critical 9.3 | 45% | 3 exploits | |
| CVE-2009-3867 | java-1.6.0-sun: Stack-based buffer overflow via a long file: URL argument (6854303) sun · jdk | Critical 9.3 | 73% | 4 exploits | |
| CVE-2009-3869 | OpenJDK JRE AWT setDifflCM stack overflow (6872357) sun · jdk | Critical 9.3 | 65% | 2 exploits | |
| CVE-2009-3837 | Stack-based buffer overflow in Eureka Email 2.2q allows remote POP3 servers to execute arbitrary code via a long error message. eureka-email · eureka email | Critical 9.3 | 32% | 4 exploits |
Showing 3,101–3,150 of 3,918
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.