Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Watchlist

The CVE Watchlist, Under Review.

Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.

Synced hourly · figures as of Oct 19, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
1,410 vulnerabilities · highest score first
  • CVE-2016-4071Critical 9.8
    php: Format string vulnerability in php_snmp_error()
    php · php
    EPSS20%
    1 exploit
    Published Mar 2, 2016
  • CVE-2016-3645Critical 9.8
    Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP5; Symantec…
    symantec · advanced threat protection
    EPSS25%
    1 exploit
    Published Jun 30, 2016
  • CVE-2016-10009High 7.3
    openssh - security update
    openbsd · openssh
    EPSS37%
    1 exploit
    Published Sep 7, 2023
  • CVE-2015-7652Critical 9.3
    flash-plugin: multiple code execution issues fixed in APSB15-28
    adobe · air
    EPSS25%
    1 exploit
    Published Nov 10, 2015
  • CVE-2015-6152Critical 9.3
    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6162.
    microsoft · internet explorer
    EPSS34%
    2 exploits
    Published Dec 9, 2015
  • CVE-2015-5621High 7.5
    net-snmp - security update
    net-snmp · net-snmp
    EPSS41%
    1 exploit
    Published Feb 11, 2022
  • CVE-2015-4870Medium 4.0
    mysql-5.5 - packages as an option announcement
    mariadb · mariadb
    EPSS30%
    3 exploits
    Published Dec 4, 2015
  • CVE-2015-2482Critical 9.3
    The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted replace operation with a…
    microsoft · jscript
    EPSS32%
    1 exploit
    Published Oct 13, 2015
  • CVE-2015-2460Critical 9.3
    ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2,…
    microsoft · .net framework
    EPSS31%
    2 exploits
    Published Aug 14, 2015
  • CVE-2015-2459Critical 9.3
    ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary…
    microsoft · windows 10
    EPSS32%
    2 exploits
    Published Aug 14, 2015
  • CVE-2015-2458Critical 9.3
    ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary…
    microsoft · windows 10
    EPSS32%
    2 exploits
    Published Aug 14, 2015
  • CVE-2014-8322Critical 9.8
    Stack-based buffer overflow in the tcp_test function in aireplay-ng.c in Aircrack-ng before 1.2 RC 1 allows remote attackers to execute arbitrary code via a crafted length parameter value.
    aircrack-ng · aircrack-ng
    EPSS24%
    1 exploit
    Published Jan 31, 2020
  • CVE-2014-4650Critical 9.8
    The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character…
    python · python
    EPSS24%
    1 exploit
    Published Feb 20, 2020
  • CVE-2013-3143Critical 9.3
    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3161.
    microsoft · internet explorer
    EPSS33%
    2 exploits
    Published Jul 10, 2013
  • CVE-2013-2574High 7.5
    An Access vulnerability exists in FOSCAM IP Camera FI8620 due to insufficient access restrictions in the /tmpfs/ and /log/ directories, which could let a malicious user obtain sensitive information.
    foscam · fi8620 firmware
    EPSS30%
    2 exploits
    Published Jan 29, 2020
  • CVE-2013-2573Critical 9.8
    A Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wireless_mft.cgi file in TP-Link IP Cameras TL-SC 3130, TL-SC 3130G, 3171G.
    tp-link · tl-sc 3130g firmware
    EPSS42%
    1 exploit
    Published Jan 29, 2020
  • CVE-2013-2472Critical 10.0
    OpenJDK: Incorrect ShortBandedRaster size checks (2D, 8011253)
    oracle · jre
    EPSS23%
    1 exploit
    Published Jun 18, 2013
  • CVE-2013-2470Critical 10.0
    OpenJDK: ImagingLib byte lookup processing (2D, 8011243)
    oracle · jre
    EPSS23%
    1 exploit
    Published Jun 18, 2013
  • CVE-2012-3807Critical 9.8
    Samsung Kies before 2.5.0.12094_27_11 has arbitrary file execution.
    samsung · kies
    EPSS32%
    1 exploit
    Published Jan 9, 2020
  • CVE-2012-0830High 7.5
    php: remote code exec flaw introduced in the CVE-2011-4885 hashdos fix
    php · php
    EPSS30%
    2 exploits
    Published Feb 2, 2012
  • CVE-2011-1930Critical 9.8
    In klibc 1.5.20 and 1.5.21, the DHCP options written by ipconfig to /tmp/net-$DEVICE.conf are not properly escaped.
    klibc project · klibc
    EPSS21%
    1 exploit
    Published Nov 14, 2019
  • CVE-2011-0406Critical 10.0
    Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a long request to TCP port 777.
    wellintech · kingview
    EPSS21%
    2 exploits
    Published Jan 11, 2011
  • CVE-2010-3139Critical 9.3
    Untrusted search path vulnerability in Microsoft Windows Progman Group Converter (grpconv.exe) allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse imm.dll that is located in the same folder as a .grp…
    microsoft · windows
    EPSS24%
    2 exploits
    Published Aug 27, 2010
  • CVE-2010-1039Critical 10.0
    Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.31_09 and earlier on HP HP-UX B.11.11, B.11.23, and B.11.31; and SGI IRIX 6.5 allows remote attackers to execute arbitrary code…
    hp · nfs\/oncplus
    EPSS20%
    1 exploit
    Published May 20, 2010
  • CVE-2009-4873Critical 10.0
    Stack-based buffer overflow in the HTTP server in Rhino Software Serv-U Web Client 9.0.0.5 allows remote attackers to cause a denial of service (server crash) or execute arbitrary code via a long Session cookie.
    rhinosoft · serv-u
    EPSS21%
    2 exploits
    Published May 26, 2010
  • CVE-2009-2694Critical 10.0
    The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
    adium · adium
    EPSS20%
    1 exploit
    Published Aug 21, 2009
  • CVE-2009-1936Critical 9.8
    _functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass a protection mechanism to conduct remote file inclusion and directory traversal attacks, execute arbitrary PHP…
    cpcommerce project · cpcommerce
    EPSS42%
    1 exploit
    Published Jun 5, 2009
  • CVE-2008-5232Critical 9.3
    Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3917 in Windows Media Services on Microsoft Windows NT and 2000, and Avaya Media and Message Application servers, allows remote attackers to execute arbitrary…
    microsoft · windows nt
    EPSS32%
    1 exploit
    Published Nov 25, 2008
  • CVE-2008-3641Critical 10.0
    The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen width and pen color opcodes that overwrite arbitrary memory.
    apple · cups
    EPSS24%
    1 exploit
    Published Oct 10, 2008
  • CVE-2008-3529Critical 10.0
    Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML entity name.
    xmlsoft · libxml2
    EPSS23%
    1 exploit
    Published Sep 12, 2008
  • CVE-2008-0118Critical 9.3
    Unspecified vulnerability in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, Excel Viewer 2003 up to SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption from an "allocation…
    microsoft · office
    EPSS35%
    2 exploits
    Published Mar 11, 2008
  • CVE-2008-0113Critical 9.3
    Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execute arbitrary code via an Excel document with malformed cell comments that trigger memory corruption from an "allocation error," aka "Microsoft Office Cell…
    microsoft · excel viewer
    EPSS42%
    1 exploit
    Published Mar 11, 2008
  • CVE-2007-1211High 7.1
    Unspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1, and SP2 allows user-assisted remote attackers to cause a denial of service (possibly persistent restart) via a crafted Windows Metafile (WMF) image that causes an invalid…
    microsoft · windows 2000
    EPSS29%
    3 exploits
    Published Apr 4, 2007
  • CVE-2007-0024Critical 9.3
    Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, and 7 on Windows 2000 SP4, XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted web page that contains…
    microsoft · internet explorer
    EPSS44%
    2 exploits
    Published Jan 9, 2007
  • CVE-2006-5559Critical 9.3
    The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connection.2.8) in the Microsoft Data Access Components (MDAC) 2.5 SP3, 2.7 SP1, 2.8, and 2.8 SP1 does not properly track freed memory when the second argument is a…
    microsoft · data access components
    EPSS44%
    1 exploit
    Published Oct 27, 2006
  • CVE-2006-4924High 7.8
    sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector.
    openbsd · openssh
    EPSS38%
    1 exploit
    Published Sep 27, 2006
  • CVE-2006-1491High 7.5
    Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execute arbitrary code via the help viewer.
    horde · application framework
    EPSS39%
    1 exploit
    Published Mar 29, 2006
  • CVE-2005-3120Critical 9.8
    Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.
    invisible-island · lynx
    EPSS23%
    1 exploit
    Published Oct 17, 2005
  • CVE-2004-1769Critical 10.0
    The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attackers to execute arbitrary code via the user parameter to resetpass.
    cpanel · cpanel
    EPSS35%
    1 exploit
    Published Mar 11, 2004
  • CVE-2004-1166High 7.5
    CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the…
    microsoft · internet explorer
    EPSS39%
    1 exploit
    Published Dec 31, 2004
  • CVE-2004-0083Critical 10.0
    Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias) with a long token, a different vulnerability than CVE-2004-0084 and CVE-2004-0106.
    xfree86 project · x11r6
    EPSS21%
    1 exploit
    Published Feb 8, 2004
  • CVE-2003-0434High 7.5
    Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.
    adobe · acrobat
    EPSS41%
    1 exploit
    Published Jul 24, 2003
  • CVE-2001-0136Medium 5.0
    Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed.
    proftpd · proftpd
    EPSS45%
    3 exploits
    Published Mar 12, 2001
  • CVE-2026-83834High 7.0
    Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
    microsoft · windows 11 version 26h2 for arm64-based systems
    EPSS0.2%
    1 exploit
    Published Oct 13, 2026
  • CVE-2026-53787Critical 9.3
    Amasty Order Attributes for Magento 2 before version 4.0.0 contains an unauthenticated arbitrary file upload vulnerability that allows unauthenticated attackers to write arbitrary files to the store's media directory by submitting files of any type or name to the upload endpoint…
    EPSS6.5%
    4 exploits
    Published Jun 12, 2026
  • CVE-2026-111283Critical 9.5
    BMC Helix Network Management before 26.3.01 Authentication Bypass via SAML Configuration
    EPSS0.5%
    1 exploit
    Published Oct 15, 2026
  • CVE-2026-105445Critical 9.4
    Docker Hub account conversion could reassign an active personal access token to another user
    EPSS0.4%
    1 exploit
    Published Oct 13, 2026
  • CVE-2024-22836Critical 9.8
    An OS command injection vulnerability exists in Akaunting v3.1.3 and earlier.
    akaunting · akaunting
    EPSS30%
    1 exploit
    Published Feb 8, 2024
  • CVE-2023-4169High 8.8
    It has been declared as critical.
    ruijie · rg-ew1200g firmware
    EPSS49%
    1 exploit
    Published Aug 5, 2023
  • CVE-2022-46020Critical 9.8
    WBCE CMS v1.5.4 can implement getshell by modifying the upload file type.
    wbce · wbce cms
    EPSS39%
    1 exploit
    Published Dec 20, 2022
Showing 451–500 of 1,410

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.

Figures as of Oct 19, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.