Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
3,918 vulnerabilities · highest exploit probability first
- CVE-2004-0942Medium 5.0Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters.apache · http serverEPSS59%1 exploitPublished Feb 9, 2005
- CVE-2004-0964Critical 10.0Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file.zinf · zinfEPSS63%7 exploitsPublished Feb 9, 2005
- CVE-2005-0174Medium 5.0Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3)…squid · squidEPSS50%·Published Feb 7, 2005
- CVE-2004-0932High 7.5McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the…mcafee · antivirus engineEPSS64%1 exploitPublished Jan 27, 2005
- CVE-2005-0308High 7.5Buffer overflow in the wsprintf function in W32Dasm 8.93 and earlier allows remote attackers to execute arbitrary code via a large import or export function name.ursoftware · w32dasmEPSS69%2 exploitsPublished Jan 24, 2005
- CVE-2005-0116High 7.5AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacters in the configdir parameter to aswtats.pl.awstats · awstatsEPSS75%5 exploitsPublished Jan 18, 2005
- CVE-2005-0095Medium 5.0The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with source addresses that are spoofed to reference Squid's home router and invalid WCCP_I_SEE_YOU cache numbers.squid · squidEPSS69%·Published Jan 15, 2005
- CVE-2004-1172Critical 10.0Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9.1.4691 Hotfix 40, allows remote attackers to execute arbitrary code via a registration request with a long hostname.symantec veritas · backup execEPSS82%3 exploitsPublished Jan 10, 2005
- CVE-2004-1080Critical 10.0The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port…microsoft · windows 2000EPSS80%3 exploitsPublished Jan 10, 2005
- CVE-2004-0899Medium 5.0The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly validate the length of certain messages, which allows remote attackers to cause a denial of service (application crash) via a malformed DHCP…microsoft · windows ntEPSS73%·Published Jan 10, 2005
- CVE-2004-1211Critical 10.0Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via long arguments to the (1) EXAMINE, (2) SUBSCRIBE, (3) STATUS, (4) APPEND, (5) CHECK, (6)…david harris · mercuryEPSS72%8 exploitsPublished Jan 10, 2005
- CVE-2004-1134Critical 10.0Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long query string.microsoft · w3who.dllEPSS72%2 exploitsPublished Jan 10, 2005
- CVE-2004-1135Medium 5.0Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service crash) via long (1) SITE, (2) XMKD, (3) MKD, and (4) RNFR commands.ipswitch · ws ftp serverEPSS50%3 exploitsPublished Jan 10, 2005
- CVE-2004-2687Critical 9.3distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server without authorization checks.apple · xcodeEPSS88%2 exploitsPublished Dec 31, 2004
- CVE-2004-1561High 7.5Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a large number of headers.icecast · icecastEPSS78%4 exploitsPublished Dec 31, 2004
- CVE-2004-1388High 7.5Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests containing format string specifiers that are not properly handled in syslog calls.berlios · gps daemonEPSS68%5 exploitsPublished Dec 31, 2004
- CVE-2004-1317High 7.5Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbitrary code via a long DNS command.EPSS60%3 exploitsPublished Dec 31, 2004
- CVE-2004-1520Medium 4.6Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE command.ipswitch · imailEPSS89%5 exploitsPublished Dec 31, 2004
- CVE-2004-2111High 8.5Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via a long filename.solarwinds · serv-u file serverEPSS87%6 exploitsPublished Dec 31, 2004
- CVE-2004-2466Medium 5.0chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username parameter, possibly due to a buffer overflow.efs software · easy chat serverEPSS75%4 exploitsPublished Dec 31, 2004
- CVE-2004-2271High 7.5Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.minishare · minimal http serverEPSS72%4 exploitsPublished Dec 31, 2004
- CVE-2004-1558High 7.5Multiple stack-based buffer overflows in YPOPs!ypops · ypopsEPSS71%4 exploitsPublished Dec 31, 2004
- CVE-2004-0567High 7.5The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 2003 does not properly validate the computer name value in a WINS packet, which allows remote attackers to execute…microsoft · windows 2000EPSS69%1 exploitPublished Dec 31, 2004
- CVE-2004-1050Critical 10.0Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML…microsoft · internet explorerEPSS67%1 exploitPublished Dec 31, 2004
- CVE-2004-2416High 7.5Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP GET request.youngzsoft · ccproxyEPSS61%2 exploitsPublished Dec 31, 2004
- CVE-2004-2115Medium 6.8Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the (1) action, (2) username, or (3) password parameters in an isqlplus request.oracle · http serverEPSS58%1 exploitPublished Dec 31, 2004
- CVE-2004-2074Medium 5.0Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string specifiers in the (1) PASS or (2) RETR commands.bolintech · dream ftp serverEPSS36%3 exploitsPublished Dec 31, 2004
- CVE-2004-2221High 7.5Buffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute arbitrary code via a long parameter in an HTTP GET request.mercantec · softcartEPSS35%3 exploitsPublished Dec 31, 2004
- CVE-2004-1373High 7.5Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via format string specifiers in a content URL, as demonstrated in the filename portion of a .mp3 file.nullsoft · shoutcast serverEPSS70%4 exploitsPublished Dec 23, 2004
- CVE-2004-1305Medium 5.0The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to…microsoft · windows 2000EPSS59%1 exploitPublished Dec 23, 2004
- CVE-2004-0842High 7.5Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain malformed Cascading Style Sheet (CSS) elements that trigger heap-based buffer overflows, as…microsoft · internet explorerEPSS57%1 exploitPublished Dec 23, 2004
- CVE-2005-0068Medium 5.0The original design of ICMP does not require authentication for host-generated ICMP error messages, which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset…tcp · tcpEPSS54%·Published Dec 22, 2004
- CVE-2004-0608Critical 10.0The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and earlier, Rune 107 and earlier, Tactical Ops 3.4.0 and earlier, Unreal 1 226f and earlier, Unreal II XMP…arush · devastationEPSS74%5 exploitsPublished Dec 6, 2004
- CVE-2004-0330Critical 10.0Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time zone argument to the MDTM command.solarwinds · serv-u file serverEPSS85%7 exploitsPublished Nov 23, 2004
- CVE-2004-0297Critical 10.0Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via an LDAP message with a large tag length.ipswitch · imailEPSS68%3 exploitsPublished Nov 23, 2004
- CVE-2004-0636Critical 10.0Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message.aol · instant messengerEPSS66%4 exploitsPublished Nov 23, 2004
- CVE-2004-0313Critical 10.0Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request, as demonstrated using a long (1) GET argument or (2) method name.psoproxy · psoproxy serverEPSS64%6 exploitsPublished Nov 23, 2004
- CVE-2004-0326Critical 10.0Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET request.proxy-pro · professional gatekeeperEPSS63%4 exploitsPublished Nov 23, 2004
- CVE-2004-1315High 7.5viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrases to highlight, which allows remote attackers to execute arbitrary PHP code by double-encoding the highlight value so that special characters are inserted into…phpbb group · phpbbEPSS73%5 exploitsPublished Nov 12, 2004
- CVE-2003-0718Medium 5.0The WebDAV Message Handler for Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows remote attackers to cause a denial of service (memory and CPU exhaustion, application crash) via a PROPFIND request with an XML message containing XML elements with a large number of…microsoft · internet information servicesEPSS88%1 exploitPublished Nov 3, 2004
- CVE-2004-0847Critical 9.8The Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass authentication for .aspx files in restricted directories via a request containing a (1) "\" (backslash) or (2) "%5C" (encoded backslash), aka "Path Validation Vulnerability."microsoft · asp.netEPSS76%1 exploitPublished Nov 3, 2004
- CVE-2004-0206High 7.5Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an…microsoft · windows 2000EPSS75%3 exploitsPublished Nov 3, 2004
- CVE-2004-0574Critical 10.0The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper…microsoft · exchange serverEPSS64%1 exploitPublished Nov 3, 2004
- CVE-2004-0575Critical 10.0Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an "unchecked buffer" and improper…microsoft · windows xpEPSS60%2 exploitsPublished Nov 3, 2004
- CVE-2004-0209Critical 10.0Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats that involve "an…microsoft · windows 2000EPSS57%1 exploitPublished Nov 3, 2004
- CVE-2004-1626Medium 5.0Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a long STOR command.code-crafters · ability serverEPSS67%3 exploitsPublished Oct 22, 2004
- CVE-2004-0751Medium 5.0The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault).apache · http serverEPSS72%1 exploitPublished Oct 20, 2004
- CVE-2004-0798High 7.5Buffer overflow in the _maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1 allows remote attackers to execute arbitrary code via a long instancename parameter.progress · whatsup goldEPSS63%3 exploitsPublished Oct 20, 2004
- CVE-2004-1638High 7.5Buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long (1) EHLO and possibly (2) HELO command.EPSS63%4 exploitsPublished Oct 16, 2004
- CVE-2004-1595High 7.5Buffer overflow in ShixxNote 6.net build 117 allows remote attackers to execute arbitrary code via a long font field.shixxnote · shixxnoteEPSS59%3 exploitsPublished Oct 13, 2004
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2004-0942 | Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters. apache · http server | Medium 5.0 | 59% | 1 exploit | |
| CVE-2004-0964 | Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file. zinf · zinf | Critical 10.0 | 63% | 7 exploits | |
| CVE-2005-0174 | Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3)… squid · squid | Medium 5.0 | 50% | · | |
| CVE-2004-0932 | McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the… mcafee · antivirus engine | High 7.5 | 64% | 1 exploit | |
| CVE-2005-0308 | Buffer overflow in the wsprintf function in W32Dasm 8.93 and earlier allows remote attackers to execute arbitrary code via a large import or export function name. ursoftware · w32dasm | High 7.5 | 69% | 2 exploits | |
| CVE-2005-0116 | AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacters in the configdir parameter to aswtats.pl. awstats · awstats | High 7.5 | 75% | 5 exploits | |
| CVE-2005-0095 | The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with source addresses that are spoofed to reference Squid's home router and invalid WCCP_I_SEE_YOU cache numbers. squid · squid | Medium 5.0 | 69% | · | |
| CVE-2004-1172 | Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9.1.4691 Hotfix 40, allows remote attackers to execute arbitrary code via a registration request with a long hostname. symantec veritas · backup exec | Critical 10.0 | 82% | 3 exploits | |
| CVE-2004-1080 | The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port… microsoft · windows 2000 | Critical 10.0 | 80% | 3 exploits | |
| CVE-2004-0899 | The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly validate the length of certain messages, which allows remote attackers to cause a denial of service (application crash) via a malformed DHCP… microsoft · windows nt | Medium 5.0 | 73% | · | |
| CVE-2004-1211 | Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via long arguments to the (1) EXAMINE, (2) SUBSCRIBE, (3) STATUS, (4) APPEND, (5) CHECK, (6)… david harris · mercury | Critical 10.0 | 72% | 8 exploits | |
| CVE-2004-1134 | Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long query string. microsoft · w3who.dll | Critical 10.0 | 72% | 2 exploits | |
| CVE-2004-1135 | Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service crash) via long (1) SITE, (2) XMKD, (3) MKD, and (4) RNFR commands. ipswitch · ws ftp server | Medium 5.0 | 50% | 3 exploits | |
| CVE-2004-2687 | distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server without authorization checks. apple · xcode | Critical 9.3 | 88% | 2 exploits | |
| CVE-2004-1561 | Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a large number of headers. icecast · icecast | High 7.5 | 78% | 4 exploits | |
| CVE-2004-1388 | Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests containing format string specifiers that are not properly handled in syslog calls. berlios · gps daemon | High 7.5 | 68% | 5 exploits | |
| CVE-2004-1317 | Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbitrary code via a long DNS command. | High 7.5 | 60% | 3 exploits | |
| CVE-2004-1520 | Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE command. ipswitch · imail | Medium 4.6 | 89% | 5 exploits | |
| CVE-2004-2111 | Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via a long filename. solarwinds · serv-u file server | High 8.5 | 87% | 6 exploits | |
| CVE-2004-2466 | chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username parameter, possibly due to a buffer overflow. efs software · easy chat server | Medium 5.0 | 75% | 4 exploits | |
| CVE-2004-2271 | Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request. minishare · minimal http server | High 7.5 | 72% | 4 exploits | |
| CVE-2004-1558 | Multiple stack-based buffer overflows in YPOPs! ypops · ypops | High 7.5 | 71% | 4 exploits | |
| CVE-2004-0567 | The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 2003 does not properly validate the computer name value in a WINS packet, which allows remote attackers to execute… microsoft · windows 2000 | High 7.5 | 69% | 1 exploit | |
| CVE-2004-1050 | Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML… microsoft · internet explorer | Critical 10.0 | 67% | 1 exploit | |
| CVE-2004-2416 | Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP GET request. youngzsoft · ccproxy | High 7.5 | 61% | 2 exploits | |
| CVE-2004-2115 | Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the (1) action, (2) username, or (3) password parameters in an isqlplus request. oracle · http server | Medium 6.8 | 58% | 1 exploit | |
| CVE-2004-2074 | Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string specifiers in the (1) PASS or (2) RETR commands. bolintech · dream ftp server | Medium 5.0 | 36% | 3 exploits | |
| CVE-2004-2221 | Buffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute arbitrary code via a long parameter in an HTTP GET request. mercantec · softcart | High 7.5 | 35% | 3 exploits | |
| CVE-2004-1373 | Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via format string specifiers in a content URL, as demonstrated in the filename portion of a .mp3 file. nullsoft · shoutcast server | High 7.5 | 70% | 4 exploits | |
| CVE-2004-1305 | The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to… microsoft · windows 2000 | Medium 5.0 | 59% | 1 exploit | |
| CVE-2004-0842 | Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain malformed Cascading Style Sheet (CSS) elements that trigger heap-based buffer overflows, as… microsoft · internet explorer | High 7.5 | 57% | 1 exploit | |
| CVE-2005-0068 | The original design of ICMP does not require authentication for host-generated ICMP error messages, which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset… tcp · tcp | Medium 5.0 | 54% | · | |
| CVE-2004-0608 | The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and earlier, Rune 107 and earlier, Tactical Ops 3.4.0 and earlier, Unreal 1 226f and earlier, Unreal II XMP… arush · devastation | Critical 10.0 | 74% | 5 exploits | |
| CVE-2004-0330 | Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time zone argument to the MDTM command. solarwinds · serv-u file server | Critical 10.0 | 85% | 7 exploits | |
| CVE-2004-0297 | Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via an LDAP message with a large tag length. ipswitch · imail | Critical 10.0 | 68% | 3 exploits | |
| CVE-2004-0636 | Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message. aol · instant messenger | Critical 10.0 | 66% | 4 exploits | |
| CVE-2004-0313 | Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request, as demonstrated using a long (1) GET argument or (2) method name. psoproxy · psoproxy server | Critical 10.0 | 64% | 6 exploits | |
| CVE-2004-0326 | Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET request. proxy-pro · professional gatekeeper | Critical 10.0 | 63% | 4 exploits | |
| CVE-2004-1315 | viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrases to highlight, which allows remote attackers to execute arbitrary PHP code by double-encoding the highlight value so that special characters are inserted into… phpbb group · phpbb | High 7.5 | 73% | 5 exploits | |
| CVE-2003-0718 | The WebDAV Message Handler for Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows remote attackers to cause a denial of service (memory and CPU exhaustion, application crash) via a PROPFIND request with an XML message containing XML elements with a large number of… microsoft · internet information services | Medium 5.0 | 88% | 1 exploit | |
| CVE-2004-0847 | The Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass authentication for .aspx files in restricted directories via a request containing a (1) "\" (backslash) or (2) "%5C" (encoded backslash), aka "Path Validation Vulnerability." microsoft · asp.net | Critical 9.8 | 76% | 1 exploit | |
| CVE-2004-0206 | Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an… microsoft · windows 2000 | High 7.5 | 75% | 3 exploits | |
| CVE-2004-0574 | The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper… microsoft · exchange server | Critical 10.0 | 64% | 1 exploit | |
| CVE-2004-0575 | Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an "unchecked buffer" and improper… microsoft · windows xp | Critical 10.0 | 60% | 2 exploits | |
| CVE-2004-0209 | Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats that involve "an… microsoft · windows 2000 | Critical 10.0 | 57% | 1 exploit | |
| CVE-2004-1626 | Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a long STOR command. code-crafters · ability server | Medium 5.0 | 67% | 3 exploits | |
| CVE-2004-0751 | The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault). apache · http server | Medium 5.0 | 72% | 1 exploit | |
| CVE-2004-0798 | Buffer overflow in the _maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1 allows remote attackers to execute arbitrary code via a long instancename parameter. progress · whatsup gold | High 7.5 | 63% | 3 exploits | |
| CVE-2004-1638 | Buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long (1) EHLO and possibly (2) HELO command. | High 7.5 | 63% | 4 exploits | |
| CVE-2004-1595 | Buffer overflow in ShixxNote 6.net build 117 allows remote attackers to execute arbitrary code via a long font field. shixxnote · shixxnote | High 7.5 | 59% | 3 exploits |
Showing 3,701–3,750 of 3,918
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.