Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 19, 2026
780 vulnerabilities · highest exploit probability first
- CVE-2018-19206Medium 6.1steps/mail/func.inc in Roundcube before 1.3.8 has XSS via crafted use of , as demonstrated by an onload attribute in a BODY element, within an HTML attachment.roundcube · webmailEPSS56%·Published Nov 12, 2018
- CVE-2018-11770Medium 4.2org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 Improper Authentication vulnerabilityapache · sparkEPSS66%1 exploitPublished Nov 9, 2018
- CVE-2018-8006Medium 6.1Apache ActiveMQ web console vulnerable to Cross-site Scriptingapache · activemqEPSS55%·Published Oct 30, 2018
- CVE-2018-18778Medium 6.5ACME mini_httpd before 1.30 lets remote users read arbitrary files.acme · mini-httpdEPSS71%·Published Oct 29, 2018
- CVE-2018-14665Medium 6.6An incorrect permission check for -modulepath and -logfile options when starting Xorg.x.org · x serverEPSS27%18 exploitsPublished Oct 25, 2018
- CVE-2018-11763Medium 5.9In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any connection timeout coming to effect.apache · http serverEPSS51%·Published Sep 25, 2018
- CVE-2018-16833Medium 6.1Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI.zohocorp · manageengine desktop centralEPSS65%·Published Sep 21, 2018
- CVE-2018-17128Medium 5.4A Persistent XSS issue was discovered in the Visual Editor in MyBB before 1.8.19 via a Video MyCode.mybb · mybbEPSS75%2 exploitsPublished Sep 17, 2018
- CVE-2018-15473Medium 5.9OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.openbsd · opensshEPSS99%6 exploitsPublished Aug 17, 2018
- CVE-2018-1612Medium 5.8IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and obtain sensitive information.ibm · qradar security information and event managerEPSS56%2 exploitsPublished Jul 17, 2018
- CVE-2018-8046Medium 6.1The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data.sencha · ext jsEPSS67%·Published Jul 5, 2018
- CVE-2018-12998Medium 6.1A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 allows remote…zohocorp · firewall analyzerEPSS99%2 exploitsPublished Jun 29, 2018
- CVE-2018-8239Medium 5.5An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.microsoft · windows 10EPSS58%·Published Jun 14, 2018
- CVE-2018-11409Medium 5.3Splunk through 7.0.1 allows information disclosure by appending raw/services/server/info/server-info?output_mode=json to a query, as demonstrated by discovering a license key.splunk · splunkEPSS98%3 exploitsPublished Jun 8, 2018
- CVE-2018-3639Medium 5.5Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis,…EPSS61%2 exploitsPublished May 22, 2018
- CVE-2018-9948Medium 6.5This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935.foxitsoftware · foxit readerEPSS63%3 exploitsPublished May 17, 2018
- CVE-2018-8831Medium 6.1A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the context of the victim user's browser via a playlist.kodi · kodiEPSS52%2 exploitsPublished Apr 18, 2018
- CVE-2018-8770Medium 5.3Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php, controllers/getConfigTest.php, controllers/getUpdateTest.php, controllers/postclientdataTest.php, controllers/posterrorTest.php, controllers/posteventTest.php, controllers/posttagTest.php,…cobub · razorEPSS59%3 exploitsPublished Mar 18, 2018
- CVE-2018-7286Medium 6.5res_pjsip allows remote authenticated users to crash Asterisk (segmentation fault) by sending a number of SIP INVITE messages on a TCP or TLS connection and then suddenly closing the connection.digium · asteriskEPSS53%2 exploitsPublished Feb 21, 2018
- CVE-2018-5378Medium 5.9The Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent with a NOTIFY to a peer, if an attribute length is invalid.quagga · quaggaEPSS74%·Published Feb 19, 2018
- CVE-2018-6377Medium 6.1In Joomla!joomla · joomla\!EPSS57%·Published Jan 30, 2018
- CVE-2018-5712Medium 6.1There is Reflected XSS on the PHAR 404 error page via the URI of a request for a .phar file.php · phpEPSS80%·Published Jan 16, 2018
- CVE-2017-5715Medium 5.6Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.EPSS74%3 exploitsPublished Jan 4, 2018
- CVE-2018-0780Medium 5.3Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure…microsoft · edgeEPSS59%2 exploitsPublished Jan 4, 2018
- CVE-2018-0767Medium 5.3Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure…microsoft · edgeEPSS65%1 exploitPublished Jan 4, 2018
- CVE-2017-5754Medium 5.6Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.arm · cortex-aEPSS84%Ransomware1 actorPublished Jan 4, 2018
- CVE-2017-5753Medium 5.6Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.EPSS94%Ransomware3 exploits1 actorPublished Jan 4, 2018
- CVE-2017-3737Medium 5.9OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism.openssl · opensslEPSS79%·Published Dec 7, 2017
- CVE-2015-3224Medium 4.3Web Console (Ruby gem) contains whitelisted_ips bypassrubyonrails · web consoleEPSS45%2 exploitsPublished Oct 24, 2017
- CVE-2017-14494Medium 5.9dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.thekelleys · dnsmasqEPSS68%1 exploitPublished Oct 3, 2017
- CVE-2017-9506Medium 6.1The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote attackers to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery (SSRF).atlassian · oauthEPSS72%·Published Aug 23, 2017
- CVE-2017-9554Medium 5.3An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers to enumerate valid usernames via unspecified vectors.synology · diskstation managerEPSS77%1 exploitPublished Jul 24, 2017
- CVE-2017-3548Medium 6.5Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.oracle · peoplesoft enterprise peopletoolsEPSS51%2 exploitsPublished Apr 24, 2017
- CVE-2015-8256Medium 6.1Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras.axis · network camera firmwareEPSS51%3 exploitsPublished Apr 17, 2017
- CVE-2016-5312Medium 6.5Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a ..symantec · messaging gatewayEPSS54%3 exploitsPublished Apr 14, 2017
- CVE-2017-0038Medium 5.5gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive…microsoft · windows 10EPSS82%1 exploitPublished Feb 20, 2017
- CVE-2016-6210Medium 5.9sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large…openbsd · opensshEPSS89%2 exploitsPublished Feb 13, 2017
- CVE-2017-5487Medium 5.3wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote attackers to obtain sensitive information via a wp-json/wp/v2/users request.wordpress · wordpressEPSS87%1 exploitPublished Jan 15, 2017
- CVE-2016-7237Medium 6.5Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote…microsoft · windows 10EPSS67%1 exploitPublished Nov 10, 2016
- CVE-2016-3209Medium 5.5Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for…microsoft · live meetingEPSS54%1 exploitPublished Oct 13, 2016
- CVE-2016-2775Medium 5.9ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol.isc · bindEPSS63%·Published Jul 19, 2016
- CVE-2016-2107Medium 5.9The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session.openssl · opensslEPSS89%1 exploitPublished May 5, 2016
- CVE-2016-0161Medium 6.5Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Edge Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0158.microsoft · edgeEPSS69%·Published Apr 12, 2016
- CVE-2015-8399Medium 4.3Atlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files via the decoratorName parameter to (1) spaces/viewdefaultdecorator.action or (2) admin/viewdefaultdecorator.action.atlassian · confluenceEPSS60%1 exploitPublished Apr 11, 2016
- CVE-2016-1285Medium 6.8named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka…isc · bindEPSS59%·Published Mar 9, 2016
- CVE-2016-2774Medium 5.9ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows remote attackers to cause a denial of service (INSIST assertion failure or request-processing outage) by establishing many sessions.isc · dhcpEPSS74%·Published Mar 9, 2016
- CVE-2016-0800Medium 5.9The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS…openssl · opensslEPSS82%·Published Mar 1, 2016
- CVE-2016-0492Medium 6.4Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Load Testing for Web Apps, a different…oracle · application testing suiteEPSS92%6 exploitsPublished Jan 21, 2016
- CVE-2016-0491Medium 6.4Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect integrity and availability via unknown vectors related to Load Testing for Web Apps.oracle · application testing suiteEPSS80%6 exploitsPublished Jan 21, 2016
- CVE-2016-0489Medium 6.5Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Test Manager for…oracle · application testing suiteEPSS55%·Published Jan 21, 2016
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-19206 | steps/mail/func.inc in Roundcube before 1.3.8 has XSS via crafted use of , as demonstrated by an onload attribute in a BODY element, within an HTML attachment. roundcube · webmail | Medium 6.1 | 56% | · | |
| CVE-2018-11770 | org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 Improper Authentication vulnerability apache · spark | Medium 4.2 | 66% | 1 exploit | |
| CVE-2018-8006 | Apache ActiveMQ web console vulnerable to Cross-site Scripting apache · activemq | Medium 6.1 | 55% | · | |
| CVE-2018-18778 | ACME mini_httpd before 1.30 lets remote users read arbitrary files. acme · mini-httpd | Medium 6.5 | 71% | · | |
| CVE-2018-14665 | An incorrect permission check for -modulepath and -logfile options when starting Xorg. x.org · x server | Medium 6.6 | 27% | 18 exploits | |
| CVE-2018-11763 | In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any connection timeout coming to effect. apache · http server | Medium 5.9 | 51% | · | |
| CVE-2018-16833 | Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI. zohocorp · manageengine desktop central | Medium 6.1 | 65% | · | |
| CVE-2018-17128 | A Persistent XSS issue was discovered in the Visual Editor in MyBB before 1.8.19 via a Video MyCode. mybb · mybb | Medium 5.4 | 75% | 2 exploits | |
| CVE-2018-15473 | OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c. openbsd · openssh | Medium 5.9 | 99% | 6 exploits | |
| CVE-2018-1612 | IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and obtain sensitive information. ibm · qradar security information and event manager | Medium 5.8 | 56% | 2 exploits | |
| CVE-2018-8046 | The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data. sencha · ext js | Medium 6.1 | 67% | · | |
| CVE-2018-12998 | A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 allows remote… zohocorp · firewall analyzer | Medium 6.1 | 99% | 2 exploits | |
| CVE-2018-8239 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. microsoft · windows 10 | Medium 5.5 | 58% | · | |
| CVE-2018-11409 | Splunk through 7.0.1 allows information disclosure by appending raw/services/server/info/server-info?output_mode=json to a query, as demonstrated by discovering a license key. splunk · splunk | Medium 5.3 | 98% | 3 exploits | |
| CVE-2018-3639 | Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis,… | Medium 5.5 | 61% | 2 exploits | |
| CVE-2018-9948 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. foxitsoftware · foxit reader | Medium 6.5 | 63% | 3 exploits | |
| CVE-2018-8831 | A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the context of the victim user's browser via a playlist. kodi · kodi | Medium 6.1 | 52% | 2 exploits | |
| CVE-2018-8770 | Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php, controllers/getConfigTest.php, controllers/getUpdateTest.php, controllers/postclientdataTest.php, controllers/posterrorTest.php, controllers/posteventTest.php, controllers/posttagTest.php,… cobub · razor | Medium 5.3 | 59% | 3 exploits | |
| CVE-2018-7286 | res_pjsip allows remote authenticated users to crash Asterisk (segmentation fault) by sending a number of SIP INVITE messages on a TCP or TLS connection and then suddenly closing the connection. digium · asterisk | Medium 6.5 | 53% | 2 exploits | |
| CVE-2018-5378 | The Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent with a NOTIFY to a peer, if an attribute length is invalid. quagga · quagga | Medium 5.9 | 74% | · | |
| CVE-2018-6377 | In Joomla! joomla · joomla\! | Medium 6.1 | 57% | · | |
| CVE-2018-5712 | There is Reflected XSS on the PHAR 404 error page via the URI of a request for a .phar file. php · php | Medium 6.1 | 80% | · | |
| CVE-2017-5715 | Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. | Medium 5.6 | 74% | 3 exploits | |
| CVE-2018-0780 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure… microsoft · edge | Medium 5.3 | 59% | 2 exploits | |
| CVE-2018-0767 | Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure… microsoft · edge | Medium 5.3 | 65% | 1 exploit | |
| CVE-2017-5754 | Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache. arm · cortex-a | Medium 5.6 | 84% | Ransomware1 actor | |
| CVE-2017-5753 | Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. | Medium 5.6 | 94% | Ransomware3 exploits1 actor | |
| CVE-2017-3737 | OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. openssl · openssl | Medium 5.9 | 79% | · | |
| CVE-2015-3224 | Web Console (Ruby gem) contains whitelisted_ips bypass rubyonrails · web console | Medium 4.3 | 45% | 2 exploits | |
| CVE-2017-14494 | dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests. thekelleys · dnsmasq | Medium 5.9 | 68% | 1 exploit | |
| CVE-2017-9506 | The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote attackers to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery (SSRF). atlassian · oauth | Medium 6.1 | 72% | · | |
| CVE-2017-9554 | An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers to enumerate valid usernames via unspecified vectors. synology · diskstation manager | Medium 5.3 | 77% | 1 exploit | |
| CVE-2017-3548 | Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. oracle · peoplesoft enterprise peopletools | Medium 6.5 | 51% | 2 exploits | |
| CVE-2015-8256 | Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras. axis · network camera firmware | Medium 6.1 | 51% | 3 exploits | |
| CVE-2016-5312 | Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. symantec · messaging gateway | Medium 6.5 | 54% | 3 exploits | |
| CVE-2017-0038 | gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive… microsoft · windows 10 | Medium 5.5 | 82% | 1 exploit | |
| CVE-2016-6210 | sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large… openbsd · openssh | Medium 5.9 | 89% | 2 exploits | |
| CVE-2017-5487 | wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote attackers to obtain sensitive information via a wp-json/wp/v2/users request. wordpress · wordpress | Medium 5.3 | 87% | 1 exploit | |
| CVE-2016-7237 | Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote… microsoft · windows 10 | Medium 6.5 | 67% | 1 exploit | |
| CVE-2016-3209 | Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for… microsoft · live meeting | Medium 5.5 | 54% | 1 exploit | |
| CVE-2016-2775 | ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol. isc · bind | Medium 5.9 | 63% | · | |
| CVE-2016-2107 | The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. openssl · openssl | Medium 5.9 | 89% | 1 exploit | |
| CVE-2016-0161 | Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Edge Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0158. microsoft · edge | Medium 6.5 | 69% | · | |
| CVE-2015-8399 | Atlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files via the decoratorName parameter to (1) spaces/viewdefaultdecorator.action or (2) admin/viewdefaultdecorator.action. atlassian · confluence | Medium 4.3 | 60% | 1 exploit | |
| CVE-2016-1285 | named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka… isc · bind | Medium 6.8 | 59% | · | |
| CVE-2016-2774 | ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows remote attackers to cause a denial of service (INSIST assertion failure or request-processing outage) by establishing many sessions. isc · dhcp | Medium 5.9 | 74% | · | |
| CVE-2016-0800 | The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS… openssl · openssl | Medium 5.9 | 82% | · | |
| CVE-2016-0492 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Load Testing for Web Apps, a different… oracle · application testing suite | Medium 6.4 | 92% | 6 exploits | |
| CVE-2016-0491 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect integrity and availability via unknown vectors related to Load Testing for Web Apps. oracle · application testing suite | Medium 6.4 | 80% | 6 exploits | |
| CVE-2016-0489 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Test Manager for… oracle · application testing suite | Medium 6.5 | 55% | · |
Showing 351–400 of 780
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.