Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
3,918 vulnerabilities · highest exploit probability first
- CVE-2006-1148High 7.5Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to execute arbitrary code via an HTTP GET request with a long (1) parameter name or (2) value in a URL, which triggers the overflow in the…peercast · peercastEPSS73%5 exploitsPublished Mar 10, 2006
- CVE-2006-1016High 7.5Buffer overflow in the IsComponentInstalled method in Internet Explorer 6.0, when used on Windows 2000 before SP4 or Windows XP before SP1, allows remote attackers to execute arbitrary code via JavaScript that calls IsComponentInstalled with a long first argument.microsoft · internet explorerEPSS67%2 exploitsPublished Mar 6, 2006
- CVE-2006-0987Medium 5.0The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification)…isc · bindEPSS58%·Published Mar 3, 2006
- CVE-2006-0988High 7.8The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers…microsoft · windows 2000EPSS60%·Published Mar 3, 2006
- CVE-2006-0900High 7.8nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demonstrated by the ProtoVer NFS test suite.freebsd · freebsdEPSS65%1 exploitPublished Feb 27, 2006
- CVE-2006-0848Medium 5.1The "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to execute arbitrary commands by tricking a user into downloading a MACOSX folder that contains metadata (resource fork) that invokes the Terminal, which…apple · mac os xEPSS58%2 exploitsPublished Feb 22, 2006
- CVE-2006-0460High 7.5Multiple buffer overflows in BomberClone before 0.11.6.2 allow remote attackers to execute arbitrary code via long error messages.bomberclone · bombercloneEPSS68%3 exploitsPublished Feb 17, 2006
- CVE-2006-0021High 7.8Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang) via an IGMP packet with an invalid IP option, aka the "IGMP v3 DoS Vulnerability."microsoft · windows xpEPSS63%1 exploitPublished Feb 14, 2006
- CVE-2006-0564High 7.5Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included in the Microsoft HTML Help 1.4 SDK, allows context-dependent attackers to execute arbitrary code via a .hhp file with a long Contents file field.microsoft · html helpEPSS72%10 exploitsPublished Feb 6, 2006
- CVE-2006-0295Medium 5.1Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the QueryInterface method of the built-in Location and Navigator objects, which leads to memory corruption.mozilla · firefoxEPSS71%4 exploitsPublished Feb 2, 2006
- CVE-2006-0476High 7.6Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (File1 field).nullsoft · winampEPSS75%4 exploitsPublished Jan 31, 2006
- CVE-2006-0441High 7.5Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER command, which triggers the overflow when the log is viewed.karjasoft · sami ftp serverEPSS71%8 exploitsPublished Jan 26, 2006
- CVE-2005-4085High 7.5Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header.bluecoat · proxyavEPSS66%3 exploitsPublished Dec 31, 2005
- CVE-2005-1939Medium 5.0Directory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers to read arbitrary files via ".." (dot dot) sequences in a request to the Report service (TCP 8022).ipswitch · whatsup small businessEPSS64%1 exploitPublished Dec 31, 2005
- CVE-2005-4734Medium 6.4Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.3 for IIS allows remote attackers to execute arbitrary code via a long url parameter in the Redirect method.rsa · authentication agent for webEPSS55%2 exploitsPublished Dec 31, 2005
- CVE-2005-4560High 7.5The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) format image with a crafted SETABORTPROC GDI Escape function call, related to the Windows Picture and Fax Viewer…microsoft · windows 2003 serverEPSS86%2 exploitsPublished Dec 28, 2005
- CVE-2005-4267High 7.5Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP command that ends with a "}" character, as demonstrated using long (1) LIST, (2) LSUB, (3) SEARCH TEXT, (4) STATUS INBOX, (5) AUTHENTICATE, (6) FETCH, (7)…qualcomm · worldmailEPSS67%3 exploitsPublished Dec 21, 2005
- CVE-2005-4411High 7.5Buffer overflow in Mercury Mail Transport System 4.01b allows remote attackers to execute arbitrary code via a long request to TCP port 105.david harris · mercury mail transport systemEPSS65%2 exploitsPublished Dec 20, 2005
- CVE-2005-4360High 7.8The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to ".dll" followed by arguments such as "~0" through "~9", which causes ntdll.dll to produce a return value…microsoft · internet information servicesEPSS87%2 exploitsPublished Dec 19, 2005
- CVE-2005-3352Medium 4.3Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps.apache · http serverEPSS74%·Published Dec 13, 2005
- CVE-2005-4145Medium 6.5The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space ("lyris" and up to 5 digits, possibly from the process ID), which allows remote attackers to gain access via a brute force attack.lyris technologies inc · listmanagerEPSS44%2 exploitsPublished Dec 10, 2005
- CVE-2005-2123High 7.5Multiple integer overflows in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allow remote attackers to execute arbitrary code via crafted Windows Metafile (WMF) and Enhanced Metafile (EMF) format images that lead to heap-based…microsoft · windows 2000EPSS61%1 exploitPublished Nov 29, 2005
- CVE-2005-2124High 7.6Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1, related to "An unchecked buffer" and possibly buffer overflows, allows remote attackers to execute arbitrary code via a crafted Windows Metafile (WMF)…microsoft · windows 2000EPSS56%2 exploitsPublished Nov 29, 2005
- CVE-2005-3757High 7.5The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to obtain sensitive information and execute arbitrary code via dangerous Java class methods in select attribute of xsl:value-of tags in XSLT style sheets, such as…google · mini search applianceEPSS41%3 exploitsPublished Nov 22, 2005
- CVE-2005-3683High 7.5Stack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled, allows remote attackers to cause a denial of service (application crash), and possibly execute arbitrary code, via a long USER command.freeftpd · freeftpdEPSS72%3 exploitsPublished Nov 18, 2005
- CVE-2005-3314High 7.5Stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary code via "long verb arguments."novell · netmailEPSS66%2 exploitsPublished Nov 18, 2005
- CVE-2005-3589High 7.8Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service (terminal crash) via a long USER ftp command.filezilla · filezilla server terminalEPSS53%1 exploitPublished Nov 16, 2005
- CVE-2005-3390High 7.5The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a "GLOBALS"…php · phpEPSS66%1 exploitPublished Oct 31, 2005
- CVE-2005-3252High 7.5Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to execute arbitrary code via a crafted UDP packet.sourcefire · snortEPSS84%6 exploitsPublished Oct 18, 2005
- CVE-2005-3190High 7.5Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to execute arbitrary code via HTTP GET requests.broadcom · igatewayEPSS65%3 exploitsPublished Oct 13, 2005
- CVE-2005-2120Medium 6.5Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "\" (backslash) characters in a registry key name,…microsoft · windows 2000EPSS62%2 exploitsPublished Oct 13, 2005
- CVE-2005-2715Critical 10.0Format string vulnerability in the Java user interface service (bpjava-msvc) daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the…symantec veritas · netbackup data and business centerEPSS60%3 exploitsPublished Oct 12, 2005
- CVE-2005-1978High 7.5COM+ in Microsoft Windows does not properly "create and use memory structures," which allows local users or remote attackers to execute arbitrary code.microsoft · windows 2000EPSS53%1 exploitPublished Oct 12, 2005
- CVE-2005-3155High 7.5Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute arbitrary code.mailenable · mailenable enterpriseEPSS64%3 exploitsPublished Oct 5, 2005
- CVE-2005-3081Medium 4.6wzdftpd 0.5.4 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the SITE command.wzdftpd · wzdftpdEPSS77%2 exploitsPublished Sep 27, 2005
- CVE-2005-2877High 7.5The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers.twiki · twikiEPSS71%4 exploitsPublished Sep 16, 2005
- CVE-2005-2799High 7.5Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remote attackers to execute arbitrary code via a long HTTP POST request.linksys · wrt54gEPSS71%4 exploitsPublished Sep 15, 2005
- CVE-2005-2847High 7.5img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter.barracuda networks · barracuda spam firewallEPSS53%3 exploitsPublished Sep 8, 2005
- CVE-2005-2852Medium 5.0Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a denial of service (ABEND) via an incorrect password length, as exploited by the "worm.rbot.ccc" worm.novell · netwareEPSS40%2 exploitsPublished Sep 8, 2005
- CVE-2005-2733High 7.5upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which could allow remote attackers to execute arbitrary code.alexander palmo · simple php blogEPSS51%3 exploitsPublished Aug 30, 2005
- CVE-2005-2668Critical 10.0Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow remote attackers to execute arbitrary code via unknown vectors.broadcom · advantage data transportEPSS75%2 exploitsPublished Aug 23, 2005
- CVE-2005-2127High 7.5Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet…microsoft · .net frameworkEPSS64%1 exploitPublished Aug 19, 2005
- CVE-2005-2612High 8.8Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP code via the cache_lastpostdate[server] cookie.wordpress · wordpressEPSS39%2 exploitsPublished Aug 17, 2005
- CVE-2005-2611Critical 10.0VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static password during authentication from the NDMP agent to the server, which allows remote attackers to…symantec veritas · backup execEPSS87%1 exploitPublished Aug 17, 2005
- CVE-2005-2551High 7.5Buffer overflow in dhost.exe in iMonitor for Novell eDirectory 8.7.3 on Windows allows attackers to cause a denial of service (crash) and obtain access to files via unknown vectors.novell · edirectoryEPSS55%3 exploitsPublished Aug 12, 2005
- CVE-2005-1983Critical 10.0Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the…microsoft · windows 2000EPSS93%5 exploitsPublished Aug 10, 2005
- CVE-2005-2535High 7.5Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packet to TCP port 41523, a different vulnerability than CVE-2005-0260.broadcom · brightstor arcserve backupEPSS81%3 exploitsPublished Aug 10, 2005
- CVE-2005-1218Medium 5.0The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial of service (crash) via crafted Remote Desktop Protocol (RDP) requests.microsoft · windows 2000EPSS57%1 exploitPublished Aug 10, 2005
- CVE-2005-1984High 7.5Buffer overflow in the Print Spooler service (Spoolsv.exe) for Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via a malicious message.microsoft · windows 2000EPSS55%·Published Aug 10, 2005
- CVE-2005-1272High 7.5Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code via a long string sent to port (1) 6070 or (2) 6050.ca · brightstor arcserve backupEPSS66%3 exploitsPublished Aug 5, 2005
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2006-1148 | Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to execute arbitrary code via an HTTP GET request with a long (1) parameter name or (2) value in a URL, which triggers the overflow in the… peercast · peercast | High 7.5 | 73% | 5 exploits | |
| CVE-2006-1016 | Buffer overflow in the IsComponentInstalled method in Internet Explorer 6.0, when used on Windows 2000 before SP4 or Windows XP before SP1, allows remote attackers to execute arbitrary code via JavaScript that calls IsComponentInstalled with a long first argument. microsoft · internet explorer | High 7.5 | 67% | 2 exploits | |
| CVE-2006-0987 | The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification)… isc · bind | Medium 5.0 | 58% | · | |
| CVE-2006-0988 | The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers… microsoft · windows 2000 | High 7.8 | 60% | · | |
| CVE-2006-0900 | nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demonstrated by the ProtoVer NFS test suite. freebsd · freebsd | High 7.8 | 65% | 1 exploit | |
| CVE-2006-0848 | The "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to execute arbitrary commands by tricking a user into downloading a MACOSX folder that contains metadata (resource fork) that invokes the Terminal, which… apple · mac os x | Medium 5.1 | 58% | 2 exploits | |
| CVE-2006-0460 | Multiple buffer overflows in BomberClone before 0.11.6.2 allow remote attackers to execute arbitrary code via long error messages. bomberclone · bomberclone | High 7.5 | 68% | 3 exploits | |
| CVE-2006-0021 | Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang) via an IGMP packet with an invalid IP option, aka the "IGMP v3 DoS Vulnerability." microsoft · windows xp | High 7.8 | 63% | 1 exploit | |
| CVE-2006-0564 | Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included in the Microsoft HTML Help 1.4 SDK, allows context-dependent attackers to execute arbitrary code via a .hhp file with a long Contents file field. microsoft · html help | High 7.5 | 72% | 10 exploits | |
| CVE-2006-0295 | Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the QueryInterface method of the built-in Location and Navigator objects, which leads to memory corruption. mozilla · firefox | Medium 5.1 | 71% | 4 exploits | |
| CVE-2006-0476 | Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (File1 field). nullsoft · winamp | High 7.6 | 75% | 4 exploits | |
| CVE-2006-0441 | Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER command, which triggers the overflow when the log is viewed. karjasoft · sami ftp server | High 7.5 | 71% | 8 exploits | |
| CVE-2005-4085 | Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header. bluecoat · proxyav | High 7.5 | 66% | 3 exploits | |
| CVE-2005-1939 | Directory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers to read arbitrary files via ".." (dot dot) sequences in a request to the Report service (TCP 8022). ipswitch · whatsup small business | Medium 5.0 | 64% | 1 exploit | |
| CVE-2005-4734 | Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.3 for IIS allows remote attackers to execute arbitrary code via a long url parameter in the Redirect method. rsa · authentication agent for web | Medium 6.4 | 55% | 2 exploits | |
| CVE-2005-4560 | The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) format image with a crafted SETABORTPROC GDI Escape function call, related to the Windows Picture and Fax Viewer… microsoft · windows 2003 server | High 7.5 | 86% | 2 exploits | |
| CVE-2005-4267 | Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP command that ends with a "}" character, as demonstrated using long (1) LIST, (2) LSUB, (3) SEARCH TEXT, (4) STATUS INBOX, (5) AUTHENTICATE, (6) FETCH, (7)… qualcomm · worldmail | High 7.5 | 67% | 3 exploits | |
| CVE-2005-4411 | Buffer overflow in Mercury Mail Transport System 4.01b allows remote attackers to execute arbitrary code via a long request to TCP port 105. david harris · mercury mail transport system | High 7.5 | 65% | 2 exploits | |
| CVE-2005-4360 | The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to ".dll" followed by arguments such as "~0" through "~9", which causes ntdll.dll to produce a return value… microsoft · internet information services | High 7.8 | 87% | 2 exploits | |
| CVE-2005-3352 | Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps. apache · http server | Medium 4.3 | 74% | · | |
| CVE-2005-4145 | The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space ("lyris" and up to 5 digits, possibly from the process ID), which allows remote attackers to gain access via a brute force attack. lyris technologies inc · listmanager | Medium 6.5 | 44% | 2 exploits | |
| CVE-2005-2123 | Multiple integer overflows in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allow remote attackers to execute arbitrary code via crafted Windows Metafile (WMF) and Enhanced Metafile (EMF) format images that lead to heap-based… microsoft · windows 2000 | High 7.5 | 61% | 1 exploit | |
| CVE-2005-2124 | Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1, related to "An unchecked buffer" and possibly buffer overflows, allows remote attackers to execute arbitrary code via a crafted Windows Metafile (WMF)… microsoft · windows 2000 | High 7.6 | 56% | 2 exploits | |
| CVE-2005-3757 | The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to obtain sensitive information and execute arbitrary code via dangerous Java class methods in select attribute of xsl:value-of tags in XSLT style sheets, such as… google · mini search appliance | High 7.5 | 41% | 3 exploits | |
| CVE-2005-3683 | Stack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled, allows remote attackers to cause a denial of service (application crash), and possibly execute arbitrary code, via a long USER command. freeftpd · freeftpd | High 7.5 | 72% | 3 exploits | |
| CVE-2005-3314 | Stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary code via "long verb arguments." novell · netmail | High 7.5 | 66% | 2 exploits | |
| CVE-2005-3589 | Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service (terminal crash) via a long USER ftp command. filezilla · filezilla server terminal | High 7.8 | 53% | 1 exploit | |
| CVE-2005-3390 | The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a "GLOBALS"… php · php | High 7.5 | 66% | 1 exploit | |
| CVE-2005-3252 | Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to execute arbitrary code via a crafted UDP packet. sourcefire · snort | High 7.5 | 84% | 6 exploits | |
| CVE-2005-3190 | Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to execute arbitrary code via HTTP GET requests. broadcom · igateway | High 7.5 | 65% | 3 exploits | |
| CVE-2005-2120 | Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "\" (backslash) characters in a registry key name,… microsoft · windows 2000 | Medium 6.5 | 62% | 2 exploits | |
| CVE-2005-2715 | Format string vulnerability in the Java user interface service (bpjava-msvc) daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the… symantec veritas · netbackup data and business center | Critical 10.0 | 60% | 3 exploits | |
| CVE-2005-1978 | COM+ in Microsoft Windows does not properly "create and use memory structures," which allows local users or remote attackers to execute arbitrary code. microsoft · windows 2000 | High 7.5 | 53% | 1 exploit | |
| CVE-2005-3155 | Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute arbitrary code. mailenable · mailenable enterprise | High 7.5 | 64% | 3 exploits | |
| CVE-2005-3081 | wzdftpd 0.5.4 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the SITE command. wzdftpd · wzdftpd | Medium 4.6 | 77% | 2 exploits | |
| CVE-2005-2877 | The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers. twiki · twiki | High 7.5 | 71% | 4 exploits | |
| CVE-2005-2799 | Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remote attackers to execute arbitrary code via a long HTTP POST request. linksys · wrt54g | High 7.5 | 71% | 4 exploits | |
| CVE-2005-2847 | img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter. barracuda networks · barracuda spam firewall | High 7.5 | 53% | 3 exploits | |
| CVE-2005-2852 | Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a denial of service (ABEND) via an incorrect password length, as exploited by the "worm.rbot.ccc" worm. novell · netware | Medium 5.0 | 40% | 2 exploits | |
| CVE-2005-2733 | upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which could allow remote attackers to execute arbitrary code. alexander palmo · simple php blog | High 7.5 | 51% | 3 exploits | |
| CVE-2005-2668 | Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow remote attackers to execute arbitrary code via unknown vectors. broadcom · advantage data transport | Critical 10.0 | 75% | 2 exploits | |
| CVE-2005-2127 | Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet… microsoft · .net framework | High 7.5 | 64% | 1 exploit | |
| CVE-2005-2612 | Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP code via the cache_lastpostdate[server] cookie. wordpress · wordpress | High 8.8 | 39% | 2 exploits | |
| CVE-2005-2611 | VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static password during authentication from the NDMP agent to the server, which allows remote attackers to… symantec veritas · backup exec | Critical 10.0 | 87% | 1 exploit | |
| CVE-2005-2551 | Buffer overflow in dhost.exe in iMonitor for Novell eDirectory 8.7.3 on Windows allows attackers to cause a denial of service (crash) and obtain access to files via unknown vectors. novell · edirectory | High 7.5 | 55% | 3 exploits | |
| CVE-2005-1983 | Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the… microsoft · windows 2000 | Critical 10.0 | 93% | 5 exploits | |
| CVE-2005-2535 | Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packet to TCP port 41523, a different vulnerability than CVE-2005-0260. broadcom · brightstor arcserve backup | High 7.5 | 81% | 3 exploits | |
| CVE-2005-1218 | The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial of service (crash) via crafted Remote Desktop Protocol (RDP) requests. microsoft · windows 2000 | Medium 5.0 | 57% | 1 exploit | |
| CVE-2005-1984 | Buffer overflow in the Print Spooler service (Spoolsv.exe) for Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via a malicious message. microsoft · windows 2000 | High 7.5 | 55% | · | |
| CVE-2005-1272 | Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code via a long string sent to port (1) 6070 or (2) 6050. ca · brightstor arcserve backup | High 7.5 | 66% | 3 exploits |
Showing 3,601–3,650 of 3,918
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.