Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Emerging

Emerging Threats, Before They Hit KEV.

Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.

Synced hourly · figures as of Oct 20, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
3,918 vulnerabilities · highest exploit probability first
  • CVE-2009-3733Medium 5.0
    Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors.
    vmware · esx
    EPSS83%
    1 exploit
    Published Nov 2, 2009
  • CVE-2009-1979Critical 10.0
    Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
    oracle · database server
    EPSS76%
    3 exploits
    Published Oct 22, 2009
  • CVE-2009-4140High 8.8
    Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer, as used in Piwik 0.2.35 through 0.4.3, Woopra Analytics Plugin before 1.4.3.2, and possibly other products, when register_globals is enabled, allows remote…
    teethgrinder.co.uk · open flash chart
    EPSS76%
    8 exploits
    Published Oct 20, 2009
  • CVE-2009-3711Critical 10.0
    Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.
    jasper · httpdx
    EPSS64%
    3 exploits
    Published Oct 16, 2009
  • CVE-2009-3699Critical 10.0
    Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR string in the first argument to procedure 21 of rpc.cmsd.
    ibm · vios
    EPSS62%
    2 exploits
    Published Oct 15, 2009
  • CVE-2009-2532Critical 10.0
    Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process the command value in an SMB Multi-Protocol Negotiate Request packet, which allows remote attackers to execute arbitrary code via a crafted SMBv2 packet to the…
    microsoft · windows server 2008
    EPSS62%
    2 exploits
    Published Oct 14, 2009
  • CVE-2009-2526High 7.8
    Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 do not properly validate fields in SMBv2 packets, which allows remote attackers to cause a denial of service (infinite loop and system hang) via a crafted packet to the Server service, aka "SMBv2 Infinite…
    microsoft · windows vista
    EPSS82%
    2 exploits
    Published Oct 14, 2009
  • CVE-2009-3693Critical 9.3
    Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows remote attackers to create arbitrary files via \..
    hp · loadrunner
    EPSS42%
    3 exploits
    Published Oct 13, 2009
  • CVE-2009-2990Critical 9.3
    acroread: Multiple arbitrary code execution fixes in 8.1.7 (APSB09-15)
    adobe · acrobat
    EPSS69%
    3 exploits
    Published Oct 13, 2009
  • CVE-2009-3591Medium 5.0
    Dopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a REQUESTJET message with an invalid location.
    ben webb · dopewars
    EPSS53%
    2 exploits
    Published Oct 8, 2009
  • CVE-2009-3429Critical 9.3
    Stack-based buffer overflow in Pirate Radio Destiny Media Player 1.61 allows remote attackers to execute arbitrary code via a long string in a .pls playlist file.
    pirateradio · destiny media player
    EPSS35%
    7 exploits
    Published Sep 25, 2009
  • CVE-2009-3214Critical 9.3
    Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code via a crafted Slideshow project (.psh) file, related to the (1) cell[n].images[m].image and (2) cell[n].sound.file fields.
    photodex · proshow gold
    EPSS31%
    4 exploits
    Published Sep 16, 2009
  • CVE-2009-2629High 7.5
    Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests.
    f5 · nginx
    EPSS75%
    1 exploit
    Published Sep 15, 2009
  • CVE-2008-7232Critical 10.0
    Buffer overflow in the report function in xtacacsd 4.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted CONNECT TACACS command.
    netplex-tech · xtacacsd
    EPSS25%
    2 exploits
    Published Sep 14, 2009
  • CVE-2009-3103Critical 10.0
    Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an & (ampersand)…
    microsoft · windows server 2008
    EPSS92%
    7 exploits
    Published Sep 8, 2009
  • CVE-2009-3068Critical 9.3
    Unrestricted file upload vulnerability in the RoboHelpServer Servlet (robohelp/server) in Adobe RoboHelp Server 8 allows remote attackers to execute arbitrary code by uploading a Java Archive (.jsp) file during a PUBLISH action, then accessing it via a direct request to the file…
    adobe · robohelp server
    EPSS78%
    3 exploits
    Published Sep 4, 2009
  • CVE-2009-2521Medium 5.0
    Stack consumption vulnerability in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows remote authenticated users to cause a denial of service (daemon crash) via a list (ls) -R command containing a wildcard that references a subdirectory,…
    microsoft · internet information services
    EPSS82%
    2 exploits
    Published Sep 4, 2009
  • CVE-2009-3023Critical 9.0
    Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbitrary code via a crafted NLST (NAME LIST) command that uses wildcards, leading to memory corruption, aka "IIS FTP Service RCE and…
    microsoft · internet information server
    EPSS91%
    6 exploits
    Published Aug 31, 2009
  • CVE-2009-2765High 8.3
    httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a cgi-bin/ URI.
    dd-wrt · dd-wrt
    EPSS83%
    4 exploits
    Published Aug 14, 2009
  • CVE-2009-1536Low 2.6
    ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attackers to cause a denial of service (daemon outage) via a series of crafted HTTP…
    microsoft · .net framework
    EPSS51%
    ·
    Published Aug 12, 2009
  • CVE-2009-1534Critical 9.3
    Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and Visual Studio .NET 2003 SP1 allows remote attackers to execute arbitrary code via crafted property…
    microsoft · office
    EPSS52%
    2 exploits
    Published Aug 12, 2009
  • CVE-2009-2727Critical 9.3
    Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0 through 6.1.3, when the rpc.ttdbserver daemon is enabled in /etc/inetd.conf, allows remote attackers to execute arbitrary…
    ibm · aix
    EPSS27%
    2 exploits
    Published Aug 10, 2009
  • CVE-2008-6898Critical 9.3
    Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long argument to the Get method and other unspecified methods.
    saschart · sascam webcam server
    EPSS32%
    3 exploits
    Published Aug 5, 2009
  • CVE-2009-2650Critical 9.3
    Heap-based buffer overflow in Sorcerer Software MultiMedia Jukebox 4.0 Build 020124 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted (1) .m3u or possibly (2) .pst file.
    sorcerersoftware · multimedia jukebox
    EPSS31%
    4 exploits
    Published Jul 30, 2009
  • CVE-2009-2622Medium 5.0
    Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including (1) "missing or mismatched protocol identifier," (2) missing or negative status value," (3) "missing version," or (4) "missing or invalid…
    squid-cache · squid
    EPSS57%
    ·
    Published Jul 27, 2009
  • CVE-2009-2566Critical 9.3
    Stack-based buffer overflow in TFM MMPlayer 2.0, and possibly 2.0.0.30, allows remote attackers to execute arbitrary code via a long string in a playlist (.m3u) file.
    tfm · mmplayer
    EPSS31%
    2 exploits
    Published Jul 21, 2009
  • CVE-2009-2484Critical 9.3
    Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long…
    videolan · vlc media player
    EPSS35%
    3 exploits
    Published Jul 16, 2009
  • CVE-2009-2485Critical 9.3
    Stack-based buffer overflow in HT-MP3Player 1.0 allows remote attackers to execute arbitrary code via a long string in a .ht3 file.
    tingan · ht-mp3player
    EPSS58%
    4 exploits
    Published Jul 16, 2009
  • CVE-2009-1136Critical 9.3
    The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet…
    microsoft · isa server
    EPSS62%
    3 exploits
    Published Jul 15, 2009
  • CVE-2009-1978Critical 9.0
    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
    oracle · secure backup
    EPSS65%
    1 exploit
    Published Jul 14, 2009
  • CVE-2009-1977Critical 10.0
    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
    oracle · secure backup
    EPSS73%
    1 exploit
    Published Jul 14, 2009
  • CVE-2009-2477Critical 9.3
    firefox 3.5 various flaws
    mozilla · firefox
    EPSS43%
    5 exploits
    Published Jul 14, 2009
  • CVE-2009-2335Medium 5.3
    WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.
    wordpress · wordpress
    EPSS85%
    1 exploit
    Published Jul 10, 2009
  • CVE-2009-2265High 7.5
    moin: embedded fckeditor multiple directory traversal vulns
    fckeditor · fckeditor
    EPSS84%
    3 exploits
    Published Jul 3, 2009
  • CVE-2009-2261Critical 9.3
    PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .zip archive with a .txt file whose name contains | (pipe) characters and a command.
    giorgio tani · peazip
    EPSS41%
    3 exploits
    Published Jun 30, 2009
  • CVE-2009-2227Critical 10.0
    Stack-based buffer overflow in B Labs Bopup Communication Server 3.2.26.5460 allows remote attackers to execute arbitrary code via a crafted request to TCP port 19810.
    blabsoft · bopup communication server
    EPSS69%
    4 exploits
    Published Jun 26, 2009
  • CVE-2009-1394Critical 9.3
    Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote attackers to execute arbitrary code by sending a long malformed string over the PlughNTCommand named pipe.
    motorola · timbuktu pro
    EPSS33%
    2 exploits
    Published Jun 26, 2009
  • CVE-2009-2288High 7.5
    nagios: remote code execution via statuswml.cgi CGI script
    nagios · nagios
    EPSS83%
    4 exploits
    Published Jun 18, 2009
  • CVE-2009-2011Critical 9.3
    Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a plug-in for Firefox, does not restrict access to the shell.execute JavaScript API method, which allows remote attackers to execute arbitrary commands via a…
    dxstudio · dx studio player
    EPSS40%
    2 exploits
    Published Jun 16, 2009
  • CVE-2009-1122High 7.5
    The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication, and possibly read or create files, via a crafted HTTP request, aka "IIS 5.0 WebDAV Authentication…
    microsoft · internet information services
    EPSS98%
    1 exploit
    Published Jun 10, 2009
  • CVE-2009-1535High 7.5
    The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI-based protection mechanisms, and list folders or read, create, or modify files, via a %c0%af (Unicode / character) at an arbitrary position in the URI, as…
    microsoft · internet information services
    EPSS98%
    2 exploits
    Published Jun 10, 2009
  • CVE-2009-1955High 7.5
    The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document…
    apache · apr-util
    EPSS53%
    1 exploit
    Published Jun 8, 2009
  • CVE-2009-1943Critical 10.0
    Stack-based buffer overflow in the IKE service (ireIke.exe) in SafeNet SoftRemote before 10.8.6 allows remote attackers to execute arbitrary code via a long request to UDP port 62514.
    safenet-inc · softremote
    EPSS72%
    2 exploits
    Published Jun 5, 2009
  • CVE-2008-6825Medium 6.8
    Directory traversal vulnerability in user/index.php in Fonality trixbox CE 2.6.1 and earlier allows remote attackers to include and execute arbitrary files via a ..
    trixbox · trixbox
    EPSS20%
    3 exploits
    Published Jun 5, 2009
  • CVE-2009-1386Medium 5.0
    ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.
    openssl · openssl
    EPSS80%
    1 exploit
    Published Jun 4, 2009
  • CVE-2009-0950Critical 9.3
    Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an itms: URL with a long URL component after a colon.
    apple · itunes
    EPSS29%
    3 exploits
    Published Jun 2, 2009
  • CVE-2009-1831Critical 9.3
    The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow.
    nullsoft · winamp
    EPSS36%
    2 exploits
    Published May 29, 2009
  • CVE-2009-1730Critical 10.0
    Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read or modify arbitrary files via directory traversal sequences in the (1) GET or (2) PUT command.
    netmechanica · netdecision tftp server
    EPSS55%
    2 exploits
    Published May 20, 2009
  • CVE-2009-1641Critical 9.3
    Multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file.
    mini-stream · ripper
    EPSS31%
    1 exploit
    Published May 15, 2009
  • CVE-2009-0714High 7.2
    Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Express and Express SSE 3.x before build 47065, and Express and Express SSE 4.x before build 46537, allows remote attackers to cause a denial of service (application…
    hp · data protector express
    EPSS52%
    2 exploits
    Published May 14, 2009
Showing 3,151–3,200 of 3,918

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.

Figures as of Oct 20, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.