Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Emerging

Emerging Threats, Before They Hit KEV.

Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.

Synced hourly · figures as of Oct 20, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
3,918 vulnerabilities · highest exploit probability first
  • CVE-2008-5159Critical 10.0
    Integer overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to cause a denial of service (crash) via a large string length argument, which triggers memory corruption.
    clientsoftware · wincome mpd total
    EPSS60%
    3 exploits
    Published Nov 18, 2008
  • CVE-2008-5053Critical 10.0
    PHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader (com_rssreader) 1.0 component for Joomla!
    joomla · com rssreader
    EPSS64%
    1 exploit
    Published Nov 13, 2008
  • CVE-2008-4037Critical 9.3
    Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka…
    microsoft · windows 2000
    EPSS59%
    3 exploits
    Published Nov 12, 2008
  • CVE-2008-5036Critical 9.3
    Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText (rt) subtitle file, related to the ParseRealText function in modules/demux/subtitle.c.
    videolan · vlc media player
    EPSS41%
    3 exploits
    Published Nov 10, 2008
  • CVE-2008-5002Critical 9.3
    Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilkat Crypt ActiveX Component allows remote attackers to create and overwrite arbitrary files via the WriteFile method.
    chilkat software · chilkat crypt activex control
    EPSS41%
    2 exploits
    Published Nov 10, 2008
  • CVE-2008-4922Critical 9.3
    Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll) allows remote attackers to execute arbitrary code via a long (1) ImageURL property, and possibly the (2) Mode, (3) Page, or (4) Zoom properties.
    djvu · activex control for microsoft office 2000
    EPSS33%
    2 exploits
    Published Nov 4, 2008
  • CVE-2008-4779Critical 10.0
    Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash) or execute arbitrary code via a long filename in a .zip file.
    tguzip · tguzip
    EPSS65%
    3 exploits
    Published Oct 29, 2008
  • CVE-2008-4696Medium 4.3
    Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier (aka the "optional fragment"), which is not properly escaped before storage in the History Search database (aka…
    opera · opera
    EPSS46%
    3 exploits
    Published Oct 23, 2008
  • CVE-2008-4687Critical 9.0
    mantis: code execution by registered users via sort parameter to manage_proj_page.php
    mantis · mantis
    EPSS67%
    3 exploits
    Published Oct 22, 2008
  • CVE-2008-4654Critical 9.3
    Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value.
    videolan · vlc media player
    EPSS58%
    4 exploits
    Published Oct 22, 2008
  • CVE-2008-4572Critical 10.0
    GuildFTPd 0.999.14, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long arguments to the CWD and LIST commands, which triggers heap corruption related to an improper free call, and possibly…
    guildftpd · guildftpd
    EPSS61%
    ·
    Published Oct 15, 2008
  • CVE-2008-3471Critical 9.3
    Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 SP3; Office Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac;…
    microsoft · excel
    EPSS52%
    ·
    Published Oct 14, 2008
  • CVE-2008-3466Critical 10.0
    Microsoft Host Integration Server (HIS) 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess…
    microsoft · host integration server 2000
    EPSS78%
    ·
    Published Oct 14, 2008
  • CVE-2008-4556Critical 10.0
    Stack-based buffer overflow in the adm_build_path function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted request.
    sun · solaris
    EPSS70%
    3 exploits
    Published Oct 14, 2008
  • CVE-2008-4008Critical 10.0
    Unspecified vulnerability in the WebLogic Server Plugins for Apache component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, and 6.1 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
    oracle · bea product suite
    EPSS56%
    2 exploits
    Published Oct 14, 2008
  • CVE-2008-4397Critical 10.0
    Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a ..
    broadcom · arcserve backup
    EPSS81%
    2 exploits
    Published Oct 14, 2008
  • CVE-2008-4385Critical 9.3
    Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of arbitrary programs via by specifiying a malicious website argument to the Init method in (1) a certain ActiveX control (sysreqlab2.cab,…
    systemrequirementslab · system requirements lab
    EPSS38%
    2 exploits
    Published Oct 14, 2008
  • CVE-2008-4384Critical 9.3
    Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods.
    iseemedia · lpviewer
    EPSS29%
    2 exploits
    Published Oct 7, 2008
  • CVE-2008-4449Critical 9.3
    Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIVMSG message.
    mirc · mirc
    EPSS39%
    2 exploits
    Published Oct 6, 2008
  • CVE-2008-4546Medium 4.3
    flash-plugin: crash caused by SWF files with different SWF versions obtained from the same URL
    adobe · flash player
    EPSS66%
    1 exploit
    Published Oct 2, 2008
  • CVE-2008-4322Critical 10.0
    Stack-based buffer overflow in RealFlex Technologies Ltd.
    realflex technologies ltd · realwin server
    EPSS65%
    2 exploits
    Published Sep 29, 2008
  • CVE-2008-4193Critical 10.0
    Stack-based buffer overflow in SecurityGateway.dll in Alt-N Technologies SecurityGateway 1.0.1 allows remote attackers to execute arbitrary code via a long username parameter.
    alt-n · securitygateway
    EPSS75%
    2 exploits
    Published Sep 24, 2008
  • CVE-2008-3013Critical 9.3
    gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital…
    microsoft · digital image suite
    EPSS52%
    1 exploit
    Published Sep 10, 2008
  • CVE-2008-3008Critical 9.3
    Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote attackers to execute arbitrary code via a long first argument to the GetDetailsString method, aka "Windows Media Encoder Buffer Overrun…
    microsoft · windows media encoder
    EPSS56%
    2 exploits
    Published Sep 10, 2008
  • CVE-2007-5348Critical 9.3
    Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8,…
    microsoft · digital image suite
    EPSS53%
    1 exploit
    Published Sep 10, 2008
  • CVE-2008-3922Critical 9.3
    awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences in the sort parameter, which is used by the multisort function when dynamically creating an anonymous PHP function.
    telartis bv · awstats totals
    EPSS53%
    2 exploits
    Published Sep 4, 2008
  • CVE-2008-3878Critical 9.3
    Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the HttpUpload method.
    ultrashareware · ultra office control
    EPSS36%
    2 exploits
    Published Sep 2, 2008
  • CVE-2007-1682Critical 9.3
    Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute arbitrary code via unspecified calls to the (1) BuildPath, (2) GetDriveName, (3) DriveExists, or (4) DeleteFile method.
    softartisans · xfile
    EPSS30%
    2 exploits
    Published Aug 27, 2008
  • CVE-2008-3704Critical 9.3
    Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows…
    microsoft · visual basic
    EPSS56%
    2 exploits
    Published Aug 18, 2008
  • CVE-2008-3558Critical 9.3
    Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before 20.2008.2606.4919 allows remote attackers to execute arbitrary code via a long argument to the NewObject method.
    cisco · webex meeting manager
    EPSS65%
    2 exploits
    Published Aug 8, 2008
  • CVE-2008-3656High 7.8
    ruby: WEBrick DoS vulnerability (CPU consumption)
    ruby-lang · ruby
    EPSS70%
    1 exploit
    Published Aug 8, 2008
  • CVE-2008-3257Critical 10.0
    Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP…
    bea systems · weblogic server
    EPSS84%
    2 exploits
    Published Jul 22, 2008
  • CVE-2008-1447Medium 6.8
    The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses…
    isc · bind
    EPSS95%
    3 exploits
    Published Jul 8, 2008
  • CVE-2008-0086Critical 9.0
    Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop Engine (MSDE 2000) SP4, and 2000 Desktop Engine (WMSDE) allows remote authenticated users to execute arbitrary code via a crafted SQL expression.
    microsoft · sql server
    EPSS62%
    ·
    Published Jul 8, 2008
  • CVE-2008-2463Medium 6.8
    The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document…
    microsoft · office snapshot viewer activex
    EPSS59%
    3 exploits
    Published Jul 7, 2008
  • CVE-2008-2908Critical 9.3
    Multiple stack-based buffer overflows in a certain ActiveX control in ienipp.ocx in Novell iPrint Client for Windows before 4.36 allow remote attackers to execute arbitrary code via a long value of the (1) operation, (2) printer-url, or (3) target-frame parameter.
    novell · iprint client
    EPSS35%
    2 exploits
    Published Jun 30, 2008
  • CVE-2008-2789High 7.5
    SQL injection vulnerability in pages/index.php in BASIC-CMS allows remote attackers to execute arbitrary SQL commands via the page_id parameter.
    basic-cms · basic-cms
    EPSS23%
    1 exploit
    Published Jun 20, 2008
  • CVE-2008-2639High 7.6
    Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows remote attackers to execute arbitrary code via a long string in the second application packet in a TCP session on port 20222.
    citect · citectfacilities
    EPSS78%
    2 exploits
    Published Jun 16, 2008
  • CVE-2008-2703Critical 10.0
    Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow remote attackers to execute arbitrary code via "spoofed server responses" that contain a long string after the NM_A_SZ_TRANSACTION_ID field name.
    novell · groupwise messenger
    EPSS61%
    3 exploits
    Published Jun 13, 2008
  • CVE-2008-2683Critical 9.3
    The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to force the download and storage of arbitrary files by specifying the origin URL in the first argument to the DownloadImageFileURL method, and the local filename in…
    black ice · barcode sdk
    EPSS35%
    3 exploits
    Published Jun 12, 2008
  • CVE-2008-0960Critical 10.0
    SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 through 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3RC1 and 7.3RC2;…
    juniper · session and resource control
    EPSS69%
    1 exploit
    Published Jun 10, 2008
  • CVE-2008-2551Critical 9.3
    The DownloaderActiveX Control (DownloaderActiveX.ocx) in Icona SpA C6 Messenger 1.0.0.1 allows remote attackers to force the download and execution of arbitrary files via a URL in the propDownloadUrl parameter with the propPostDownloadAction parameter set to "run."
    icona · instant messenger
    EPSS47%
    2 exploits
    Published Jun 4, 2008
  • CVE-2008-1661Critical 10.0
    Stack-based buffer overflow in DoubleTake.exe in HP StorageWorks Storage Mirroring (SWSM) before 4.5 SP2 allows remote attackers to execute arbitrary code via a crafted encoded authentication request.
    hp · storageworks storage mirroring
    EPSS69%
    3 exploits
    Published Jun 4, 2008
  • CVE-2008-1105High 7.5
    Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.
    samba · samba
    EPSS69%
    1 exploit
    Published May 29, 2008
  • CVE-2008-2499High 7.5
    Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code via a crafted URL.
    ibm · lotus sametime
    EPSS77%
    3 exploits
    Published May 29, 2008
  • CVE-2008-2158Critical 10.0
    Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1 for Windows allow remote attackers to execute arbitrary code via crafted TCP packets to port 41025.
    emc corporation · alphastor
    EPSS58%
    2 exploits
    Published May 29, 2008
  • CVE-2008-0955Critical 9.3
    Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote attackers to execute arbitrary code via a long CacheFolder property value.
    creative · creative software autoupdate engine
    EPSS41%
    2 exploits
    Published May 29, 2008
  • CVE-2008-2549Medium 4.3
    acroread: crash and possible code execution
    adobe · acrobat reader
    EPSS53%
    1 exploit
    Published May 29, 2008
  • CVE-2008-2240Critical 10.0
    Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long Accept-Language HTTP header.
    ibm · lotus domino
    EPSS65%
    2 exploits
    Published May 22, 2008
  • CVE-2008-2286High 7.5
    SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via unspecified string fields in a notification packet.
    symantec · altiris deployment solution
    EPSS33%
    2 exploits
    Published May 18, 2008
Showing 3,251–3,300 of 3,918

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.

Figures as of Oct 20, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.