Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
3,918 vulnerabilities · highest exploit probability first
- CVE-2009-1612Critical 9.3Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009.baofeng · stormEPSS33%2 exploitsPublished May 11, 2009
- CVE-2008-4828Critical 10.0Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, and 5.4.0.0 through 5.4.1.96, and the TSM Express client 5.3.3.0 through…ibm · tivoli storage manager clientEPSS71%2 exploitsPublished May 5, 2009
- CVE-2009-1430Critical 9.3Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV)…symantec · antivirusEPSS55%2 exploitsPublished Apr 29, 2009
- CVE-2009-1429Critical 10.0The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1…symantec · antivirusEPSS88%3 exploitsPublished Apr 29, 2009
- CVE-2009-1350Critical 10.0Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute arbitrary code by establishing an IPC$ connection to the XTIERRPCPIPE named pipe, and sending RPC messages that trigger a dereference of an arbitrary pointer.novell · netidentity client1.2.3EPSS66%2 exploitsPublished Apr 21, 2009
- CVE-2008-4830Critical 9.3Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 Patch 5 (KWEDIT.DLL 7100.1.1.43) allows remote attackers to (1) overwrite arbitrary files via the SaveDocumentAs method or (2) read or execute arbitrary files…sap · sap guiEPSS28%2 exploitsPublished Apr 16, 2009
- CVE-2007-2238Critical 9.3Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft Intelligent Application Gateway (IAG) before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the (1) CheckForUpdates or (2)…microsoft · intelligent application gateway 2007EPSS46%2 exploitsPublished Apr 16, 2009
- CVE-2009-0077Medium 5.0The firewall engine in Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); and Internet Security and Acceleration (ISA) Server 2004 SP3, 2006, 2006 Supportability Update, and 2006 SP1; does not properly manage the session state of web listeners,…microsoft · forefront threat management gatewayEPSS78%·Published Apr 15, 2009
- CVE-2009-1185High 7.2udev: Uncheck origin of NETLINK messagesudev project · udevEPSS81%4 exploitsPublished Apr 15, 2009
- CVE-2009-1260Critical 9.3Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted (1) CCD or (2) IMG file.ezbsystems · ultraisoEPSS43%2 exploitsPublished Apr 7, 2009
- CVE-2007-4475Critical 9.3Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute arbitrary code via a long argument to the SaveViewToSessionFile method.sap · sapguiEPSS40%3 exploitsPublished Apr 1, 2009
- CVE-2009-0215Critical 9.3Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors.ibm · access support activex controlEPSS36%2 exploitsPublished Mar 25, 2009
- CVE-2009-0920High 7.5Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long OvOSLocale cookie, a variant of CVE-2008-0067.hp · network node managerEPSS75%2 exploitsPublished Mar 24, 2009
- CVE-2008-6508High 7.5Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to bypass authentication and access the admin interface via a ..igniterealtime · openfireEPSS84%2 exploitsPublished Mar 23, 2009
- CVE-2009-1029Critical 9.3Stack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to execute arbitrary code via a long Date header, related to Imap.dll.poppeeper · pop peeperEPSS32%4 exploitsPublished Mar 19, 2009
- CVE-2009-1028Critical 9.3Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file.edisys · ezip wizardEPSS33%3 exploitsPublished Mar 19, 2009
- CVE-2009-0880Medium 6.8Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to load and execute arbitrary local DLL code via a ..ibm · directorEPSS32%4 exploitsPublished Mar 12, 2009
- CVE-2009-0837Critical 10.0Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary code via a long (1) relative path or (2) absolute path in the filename argument in an action, as demonstrated by the "Open/Execute a file"…foxit · reader3.0EPSS76%3 exploitsPublished Mar 10, 2009
- CVE-2009-0187Critical 9.3Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote attackers to execute arbitrary code via a crafted HTTP URL with a long host name, which is not properly handled when constructing a "Connecting" log message.orbitdownloader · orbit downloaderEPSS40%3 exploitsPublished Feb 26, 2009
- CVE-2008-6221High 7.5PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager (com_dadamail) component 2.6 for Joomla!dadamailproject · dada mail managerEPSS54%·Published Feb 20, 2009
- CVE-2009-0658High 7.8acroread: multiple JBIG2-related security flawsadobe · acrobatEPSS88%5 exploitsPublished Feb 19, 2009
- CVE-2008-6132Medium 6.8Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via the start_date parameter.brickhost · phpscheduleitEPSS26%3 exploitsPublished Feb 13, 2009
- CVE-2009-0546Critical 9.3Stack-based buffer overflow in NewsGator FeedDemon 2.7 and earlier allows user-assisted remote attackers to execute arbitrary code via a long text attribute in an outline element in a .opml file.newsgator · feeddemonEPSS37%3 exploitsPublished Feb 12, 2009
- CVE-2009-0545Critical 10.0cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action.zeroshell · zeroshellEPSS90%1 exploitPublished Feb 12, 2009
- CVE-2009-0542High 7.5SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" (percent) character in the username, which introduces a "'" (single quote) character during variable substitution by mod_sql.proftpd project · proftpdEPSS74%2 exploitsPublished Feb 12, 2009
- CVE-2009-0075Critical 9.3Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to CFunctionPointer and the appending of document objects, aka "Uninitialized…microsoft · internet explorerEPSS85%3 exploitsPublished Feb 10, 2009
- CVE-2009-0478Medium 5.0Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service via an HTTP request with an invalid version number, which triggers a reachable assertion in (1) HttpMsg.c and (2) HttpStatusLine.c.squid · squidEPSS72%1 exploitPublished Feb 8, 2009
- CVE-2009-0476Critical 9.3Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedia Soft audio components for .NET, allows remote attackers to execute arbitrary code via a long string in a playlist (.pls) file, as originally reported for…multimediasoft · audio dj studio for .netEPSS37%7 exploitsPublished Feb 8, 2009
- CVE-2009-0184Critical 9.3Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allow remote attackers to execute arbitrary code via (1) a long file name within a torrent file, (2) a long tracker URL in a torrent file, or (3) a long…free download manager · free download managerEPSS28%3 exploitsPublished Feb 3, 2009
- CVE-2009-0183Critical 10.0Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute arbitrary code via a long Authorization header in an HTTP request.free download manager · free download managerEPSS67%2 exploitsPublished Feb 3, 2009
- CVE-2009-0323Critical 10.0Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrary code via (1) a long type parameter in an input tag, which is not properly handled by the EndOfXmlAttributeValue function; (2) an "HTML GI" in a start tag,…w3 · amayaEPSS62%2 exploitsPublished Jan 28, 2009
- CVE-2009-0182High 8.8Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line.vuplayer · vuplayerEPSS48%4 exploitsPublished Jan 20, 2009
- CVE-2008-4388Critical 9.3The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods.symantec · appstream clientEPSS38%2 exploitsPublished Jan 20, 2009
- CVE-2009-0133Critical 10.0Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Index file" field, possibly a related issue to CVE-2006-0564.microsoft · html help workshopEPSS67%7 exploitsPublished Jan 15, 2009
- CVE-2008-5457Critical 10.0Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via…oracle · bea product suiteEPSS61%3 exploitsPublished Jan 14, 2009
- CVE-2008-5444Critical 10.0Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5448 and CVE-2008-5449.oracle · secure backupEPSS61%2 exploitsPublished Jan 13, 2009
- CVE-2009-0043Critical 10.0The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors.ca · service level managementEPSS53%1 exploitPublished Jan 8, 2009
- CVE-2008-0067Critical 10.0Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program,…hp · openview network node managerEPSS63%2 exploitsPublished Jan 8, 2009
- CVE-2008-5711Critical 9.3Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value.facebook · photouploaderEPSS33%3 exploitsPublished Dec 24, 2008
- CVE-2008-5664Critical 9.3Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows remote attackers to execute arbitrary code via a crafted playlist (PLA) file.realtek · realtek media playerEPSS36%2 exploitsPublished Dec 18, 2008
- CVE-2008-5081Medium 5.0The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.avahi · avahiEPSS59%1 exploitPublished Dec 17, 2008
- CVE-2008-5499Critical 9.3flash-plugin: Linux-specific code execution flaw via crafted SWF fileadobe · flash player for linuxEPSS79%2 exploitsPublished Dec 17, 2008
- CVE-2008-5492Critical 9.3Heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OCX Control allows remote attackers to execute arbitrary code via a long first argument to the OpenPDF method.verypdf · verydoc pdf viewerEPSS35%3 exploitsPublished Dec 12, 2008
- CVE-2008-4844Critical 9.3Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via DSO bindings involving (1) an XML Island, (2) XML DSOs, or (3) Tabular…microsoft · internet explorerEPSS67%2 exploitsPublished Dec 11, 2008
- CVE-2008-5416Critical 9.0Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 Desktop Engine (WMSDE) on Windows Server 2003 SP1 and SP2; and Windows Internal…microsoft · sql serverEPSS87%4 exploitsPublished Dec 10, 2008
- CVE-2008-4255Critical 9.3Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, and Office Project 2003 SP3 and 2007 Gold…microsoft · projectEPSS54%1 exploitPublished Dec 10, 2008
- CVE-2008-5405Critical 9.3Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier, allows remote attackers to execute arbitrary code via an RDP file containing a long string.oxid · cain and abelEPSS47%3 exploitsPublished Dec 10, 2008
- CVE-2008-5353Critical 10.0OpenJDK calendar object deserialization allows privilege escalation (6734167)sun · jdkEPSS86%5 exploitsPublished Dec 4, 2008
- CVE-2008-2431Critical 9.3Multiple buffer overflows in Novell iPrint Client before 5.06 allow remote attackers to execute arbitrary code by calling the Novell iPrint ActiveX control (aka ienipp.ocx) with (1) a long third argument to the GetDriverFile method; a long first argument to the (2)…novell · iprintEPSS51%·Published Nov 25, 2008
- CVE-2008-5180Medium 5.3Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service (memory consumption) via a large number of SIP INVITE requests, which trigger the creation of many sessions.microsoft · office communicatorEPSS68%3 exploitsPublished Nov 20, 2008
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2009-1612 | Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. baofeng · storm | Critical 9.3 | 33% | 2 exploits | |
| CVE-2008-4828 | Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, and 5.4.0.0 through 5.4.1.96, and the TSM Express client 5.3.3.0 through… ibm · tivoli storage manager client | Critical 10.0 | 71% | 2 exploits | |
| CVE-2009-1430 | Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV)… symantec · antivirus | Critical 9.3 | 55% | 2 exploits | |
| CVE-2009-1429 | The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1… symantec · antivirus | Critical 10.0 | 88% | 3 exploits | |
| CVE-2009-1350 | Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute arbitrary code by establishing an IPC$ connection to the XTIERRPCPIPE named pipe, and sending RPC messages that trigger a dereference of an arbitrary pointer. novell · netidentity client1.2.3 | Critical 10.0 | 66% | 2 exploits | |
| CVE-2008-4830 | Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 Patch 5 (KWEDIT.DLL 7100.1.1.43) allows remote attackers to (1) overwrite arbitrary files via the SaveDocumentAs method or (2) read or execute arbitrary files… sap · sap gui | Critical 9.3 | 28% | 2 exploits | |
| CVE-2007-2238 | Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft Intelligent Application Gateway (IAG) before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the (1) CheckForUpdates or (2)… microsoft · intelligent application gateway 2007 | Critical 9.3 | 46% | 2 exploits | |
| CVE-2009-0077 | The firewall engine in Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); and Internet Security and Acceleration (ISA) Server 2004 SP3, 2006, 2006 Supportability Update, and 2006 SP1; does not properly manage the session state of web listeners,… microsoft · forefront threat management gateway | Medium 5.0 | 78% | · | |
| CVE-2009-1185 | udev: Uncheck origin of NETLINK messages udev project · udev | High 7.2 | 81% | 4 exploits | |
| CVE-2009-1260 | Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted (1) CCD or (2) IMG file. ezbsystems · ultraiso | Critical 9.3 | 43% | 2 exploits | |
| CVE-2007-4475 | Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute arbitrary code via a long argument to the SaveViewToSessionFile method. sap · sapgui | Critical 9.3 | 40% | 3 exploits | |
| CVE-2009-0215 | Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors. ibm · access support activex control | Critical 9.3 | 36% | 2 exploits | |
| CVE-2009-0920 | Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long OvOSLocale cookie, a variant of CVE-2008-0067. hp · network node manager | High 7.5 | 75% | 2 exploits | |
| CVE-2008-6508 | Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to bypass authentication and access the admin interface via a .. igniterealtime · openfire | High 7.5 | 84% | 2 exploits | |
| CVE-2009-1029 | Stack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to execute arbitrary code via a long Date header, related to Imap.dll. poppeeper · pop peeper | Critical 9.3 | 32% | 4 exploits | |
| CVE-2009-1028 | Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file. edisys · ezip wizard | Critical 9.3 | 33% | 3 exploits | |
| CVE-2009-0880 | Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to load and execute arbitrary local DLL code via a .. ibm · director | Medium 6.8 | 32% | 4 exploits | |
| CVE-2009-0837 | Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary code via a long (1) relative path or (2) absolute path in the filename argument in an action, as demonstrated by the "Open/Execute a file"… foxit · reader3.0 | Critical 10.0 | 76% | 3 exploits | |
| CVE-2009-0187 | Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote attackers to execute arbitrary code via a crafted HTTP URL with a long host name, which is not properly handled when constructing a "Connecting" log message. orbitdownloader · orbit downloader | Critical 9.3 | 40% | 3 exploits | |
| CVE-2008-6221 | PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager (com_dadamail) component 2.6 for Joomla! dadamailproject · dada mail manager | High 7.5 | 54% | · | |
| CVE-2009-0658 | acroread: multiple JBIG2-related security flaws adobe · acrobat | High 7.8 | 88% | 5 exploits | |
| CVE-2008-6132 | Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via the start_date parameter. brickhost · phpscheduleit | Medium 6.8 | 26% | 3 exploits | |
| CVE-2009-0546 | Stack-based buffer overflow in NewsGator FeedDemon 2.7 and earlier allows user-assisted remote attackers to execute arbitrary code via a long text attribute in an outline element in a .opml file. newsgator · feeddemon | Critical 9.3 | 37% | 3 exploits | |
| CVE-2009-0545 | cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action. zeroshell · zeroshell | Critical 10.0 | 90% | 1 exploit | |
| CVE-2009-0542 | SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" (percent) character in the username, which introduces a "'" (single quote) character during variable substitution by mod_sql. proftpd project · proftpd | High 7.5 | 74% | 2 exploits | |
| CVE-2009-0075 | Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to CFunctionPointer and the appending of document objects, aka "Uninitialized… microsoft · internet explorer | Critical 9.3 | 85% | 3 exploits | |
| CVE-2009-0478 | Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service via an HTTP request with an invalid version number, which triggers a reachable assertion in (1) HttpMsg.c and (2) HttpStatusLine.c. squid · squid | Medium 5.0 | 72% | 1 exploit | |
| CVE-2009-0476 | Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedia Soft audio components for .NET, allows remote attackers to execute arbitrary code via a long string in a playlist (.pls) file, as originally reported for… multimediasoft · audio dj studio for .net | Critical 9.3 | 37% | 7 exploits | |
| CVE-2009-0184 | Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allow remote attackers to execute arbitrary code via (1) a long file name within a torrent file, (2) a long tracker URL in a torrent file, or (3) a long… free download manager · free download manager | Critical 9.3 | 28% | 3 exploits | |
| CVE-2009-0183 | Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute arbitrary code via a long Authorization header in an HTTP request. free download manager · free download manager | Critical 10.0 | 67% | 2 exploits | |
| CVE-2009-0323 | Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrary code via (1) a long type parameter in an input tag, which is not properly handled by the EndOfXmlAttributeValue function; (2) an "HTML GI" in a start tag,… w3 · amaya | Critical 10.0 | 62% | 2 exploits | |
| CVE-2009-0182 | Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line. vuplayer · vuplayer | High 8.8 | 48% | 4 exploits | |
| CVE-2008-4388 | The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods. symantec · appstream client | Critical 9.3 | 38% | 2 exploits | |
| CVE-2009-0133 | Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Index file" field, possibly a related issue to CVE-2006-0564. microsoft · html help workshop | Critical 10.0 | 67% | 7 exploits | |
| CVE-2008-5457 | Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via… oracle · bea product suite | Critical 10.0 | 61% | 3 exploits | |
| CVE-2008-5444 | Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5448 and CVE-2008-5449. oracle · secure backup | Critical 10.0 | 61% | 2 exploits | |
| CVE-2009-0043 | The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors. ca · service level management | Critical 10.0 | 53% | 1 exploit | |
| CVE-2008-0067 | Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program,… hp · openview network node manager | Critical 10.0 | 63% | 2 exploits | |
| CVE-2008-5711 | Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value. facebook · photouploader | Critical 9.3 | 33% | 3 exploits | |
| CVE-2008-5664 | Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows remote attackers to execute arbitrary code via a crafted playlist (PLA) file. realtek · realtek media player | Critical 9.3 | 36% | 2 exploits | |
| CVE-2008-5081 | The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure. avahi · avahi | Medium 5.0 | 59% | 1 exploit | |
| CVE-2008-5499 | flash-plugin: Linux-specific code execution flaw via crafted SWF file adobe · flash player for linux | Critical 9.3 | 79% | 2 exploits | |
| CVE-2008-5492 | Heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OCX Control allows remote attackers to execute arbitrary code via a long first argument to the OpenPDF method. verypdf · verydoc pdf viewer | Critical 9.3 | 35% | 3 exploits | |
| CVE-2008-4844 | Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via DSO bindings involving (1) an XML Island, (2) XML DSOs, or (3) Tabular… microsoft · internet explorer | Critical 9.3 | 67% | 2 exploits | |
| CVE-2008-5416 | Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 Desktop Engine (WMSDE) on Windows Server 2003 SP1 and SP2; and Windows Internal… microsoft · sql server | Critical 9.0 | 87% | 4 exploits | |
| CVE-2008-4255 | Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, and Office Project 2003 SP3 and 2007 Gold… microsoft · project | Critical 9.3 | 54% | 1 exploit | |
| CVE-2008-5405 | Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier, allows remote attackers to execute arbitrary code via an RDP file containing a long string. oxid · cain and abel | Critical 9.3 | 47% | 3 exploits | |
| CVE-2008-5353 | OpenJDK calendar object deserialization allows privilege escalation (6734167) sun · jdk | Critical 10.0 | 86% | 5 exploits | |
| CVE-2008-2431 | Multiple buffer overflows in Novell iPrint Client before 5.06 allow remote attackers to execute arbitrary code by calling the Novell iPrint ActiveX control (aka ienipp.ocx) with (1) a long third argument to the GetDriverFile method; a long first argument to the (2)… novell · iprint | Critical 9.3 | 51% | · | |
| CVE-2008-5180 | Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service (memory consumption) via a large number of SIP INVITE requests, which trigger the creation of many sessions. microsoft · office communicator | Medium 5.3 | 68% | 3 exploits |
Showing 3,201–3,250 of 3,918
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.