Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Watchlist

The CVE Watchlist, Under Review.

Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.

Synced hourly · figures as of Oct 19, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
1,410 vulnerabilities · highest score first
  • CVE-2022-3552High 7.2
    Unrestricted Upload of File with Dangerous Type in GitHub repository boxbilling/boxbilling prior to 0.0.1.
    boxbilling · boxbilling
    EPSS44%
    1 exploit
    Published Oct 17, 2022
  • CVE-2022-22916Critical 9.8
    O2OA v6.4.7 was discovered to contain a remote code execution (RCE) vulnerability via /x_program_center/jaxrs/invoke.
    zoneland · o2oa
    EPSS39%
    1 exploit
    Published Feb 17, 2022
  • CVE-2021-46424Critical 9.1
    Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request.
    telesquare · tlr-2005ksh firmware
    EPSS36%
    2 exploits
    Published Apr 27, 2022
  • CVE-2021-45092Critical 9.8
    Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter.
    cybelesoft · thinfinity virtualui
    EPSS41%
    1 exploit
    Published Dec 16, 2021
  • CVE-2021-3817Critical 9.8
    wbce_cms is vulnerable to Improper Neutralization of Special Elements used in an SQL Command
    wbce · wbce cms
    EPSS38%
    2 exploits
    Published Dec 9, 2021
  • CVE-2021-3278Critical 9.8
    Local Service Search Engine Management System 1.0 has a vulnerability through authentication bypass using SQL injection .
    local services search engine management system project · local services search engine management system
    EPSS25%
    2 exploits
    Published Jan 26, 2021
  • CVE-2021-29003Critical 9.8
    Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sys_config_valid.xgi, as demonstrated by the sys_config_valid.xgi?exeshell=%60telnetd%20%26%60 URI.
    genexis · platinum 4410 firmware
    EPSS45%
    1 exploit
    Published Apr 13, 2021
  • CVE-2021-22146High 7.5
    All versions of Elastic Cloud Enterprise has the Elasticsearch “anonymous” user enabled by default in deployed clusters.
    elastic · elasticsearch
    EPSS36%
    2 exploits
    Published Jul 21, 2021
  • CVE-2021-1531High 8.8
    A vulnerability in the web UI of Cisco Modeling Labs could allow an authenticated, remote attacker to execute arbitrary commands with the privileges of the web application on the underlying operating system of an affected Cisco Modeling Labs server.
    cisco · modeling labs
    EPSS30%
    1 exploit
    Published May 24, 2021
  • CVE-2020-6010High 8.8
    LearnPress Wordpress plugin version prior and including 3.2.6.7 is vulnerable to SQL Injection
    thimpress · learnpress
    EPSS49%
    1 exploit
    Published Apr 30, 2020
  • CVE-2020-3956High 8.8
    VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4 do not properly handle input leading to a code injection vulnerability.
    vmware · vcloud director
    EPSS21%
    3 exploits
    Published May 20, 2020
  • CVE-2020-35948High 8.8
    It gave authenticated attackers the ability to modify arbitrary files, including PHP files.
    xcloner · xcloner
    EPSS25%
    2 exploits
    Published Jan 1, 2021
  • CVE-2020-35314Critical 9.8
    A remote code execution vulnerability in the installUpdateThemePluginAction function in index.php in WonderCMS 3.1.3, allows remote attackers to upload a custom plugin which can contain arbitrary code and obtain a webshell via the theme/plugin installer.
    wondercms · wondercms
    EPSS27%
    2 exploits
    Published Apr 20, 2021
  • CVE-2020-20277Critical 9.8
    There are multiple unauthenticated directory traversal vulnerabilities in different FTP commands in uftpd FTP server versions 2.7 to 2.10 due to improper implementation of a chroot jail in common.c's compose_abspath function that can be abused to read or write to arbitrary files…
    troglobit · uftpd
    EPSS26%
    2 exploits
    Published Dec 18, 2020
  • CVE-2020-14011Critical 9.8
    Lansweeper 6.0.x through 7.2.x has a default installation in which the admin password is configured for the admin account, unless "Built-in admin" is manually unchecked.
    lansweeper · lansweeper
    EPSS29%
    1 exploit
    Published Jun 15, 2020
  • CVE-2019-25024Critical 9.8
    OpenRepeater (ORP) before 2.2 allows unauthenticated command injection via shell metacharacters in the functions/ajax_system.php post_service parameter.
    alleghenycreative · openrepeater
    EPSS28%
    2 exploits
    Published Feb 19, 2021
  • CVE-2019-20224High 8.8
    netflow_get_stats in functions_netflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ip_src parameter in an index.php?operation/netflow/nf_live_view request.
    artica · pandora fms
    EPSS50%
    2 exploits
    Published Jan 9, 2020
  • CVE-2019-15984High 7.2
    Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device.
    cisco · data center network manager
    EPSS47%
    2 exploits
    Published Jan 6, 2020
  • CVE-2018-9032Critical 9.8
    An authentication bypass vulnerability on D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router (Hardware Version : A1, B1; Firmware Version : 1.02-2.06) devices potentially allows attackers to bypass SharePort Web Access Portal by directly visiting /category_view.php…
    dlink · dir-850l firmware
    EPSS28%
    2 exploits
    Published Mar 27, 2018
  • CVE-2018-8625High 7.5
    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.
    microsoft · internet explorer
    EPSS44%
    2 exploits
    Published Dec 11, 2018
  • CVE-2018-8619High 7.5
    A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions, aka "Internet Explorer Remote Code Execution Vulnerability." This affects Internet Explorer 9, Internet Explorer 11,…
    microsoft · internet explorer
    EPSS45%
    2 exploits
    Published Dec 11, 2018
  • CVE-2018-7719High 7.5
    Acrolinx Server before 5.2.5 on Windows allows Directory Traversal.
    acrolinx · acrolinx server
    EPSS47%
    2 exploits
    Published Mar 25, 2018
  • CVE-2018-19458High 7.5
    Unauthenticated File Read in PHP Proxy
    php-proxy · php-proxy
    EPSS33%
    2 exploits
    Published May 14, 2022
  • CVE-2018-17440Critical 9.8
    An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1.
    dlink · central wifimanager
    EPSS38%
    2 exploits
    Published Oct 8, 2018
  • CVE-2018-14064Critical 9.8
    The uc-http service 1.0.0 on VelotiSmart WiFi B-380 camera devices allows Directory Traversal, as demonstrated by /../../etc/passwd on TCP port 80.
    velotismart project · velotismart wifi firmware
    EPSS37%
    2 exploits
    Published Jul 15, 2018
  • CVE-2018-13109High 7.5
    All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerability where attackers are able to access and manipulate settings within the web interface that are forbidden to end users (e.g., by the ISP).
    adbglobal · dv2210 firmware
    EPSS35%
    1 exploit
    Published Jul 6, 2018
  • CVE-2018-13050Critical 9.8
    A SQL Injection vulnerability exists in Zoho ManageEngine Applications Manager 13.x before build 13800 via the j_username parameter in a /j_security_check POST request.
    zohocorp · manageengine applications manager
    EPSS40%
    1 exploit
    Published Jul 2, 2018
  • CVE-2018-10201High 7.5
    It is possible to read arbitrary files outside the root directory of the web server.
    ncomputing · vspace pro
    EPSS44%
    2 exploits
    Published Apr 20, 2018
  • CVE-2018-0833Medium 5.3
    The Microsoft Server Message Block 2.0 and 3.0 (SMBv2/SMBv3) client in Windows 8.1 and RT 8.1 and Windows Server 2012 R2 allows a denial of service vulnerability due to how specially crafted requests are handled, aka "SMBv2/SMBv3 Null Dereference Denial of Service Vulnerability".
    microsoft · windows 8.1
    EPSS40%
    3 exploits
    Published Feb 14, 2018
  • CVE-2017-8541High 7.8
    The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…
    microsoft · malware protection engine
    EPSS48%
    1 exploit
    Published May 26, 2017
  • CVE-2017-12943Critical 9.8
    D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/show_info.php?REQUIRE_FILE= absolute path traversal attack, as demonstrated by discovering the admin password.
    dlink · dir-600 b1 firmware
    EPSS39%
    1 exploit
    Published Aug 18, 2017
  • CVE-2017-11155High 7.5
    An information exposure vulnerability in index.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to obtain sensitive system information via unspecified vectors.
    synology · photo station
    EPSS47%
    1 exploit
    Published Aug 8, 2017
  • CVE-2016-7189High 7.5
    ChakraCore RCE Vulnerability
    microsoft · edge
    EPSS48%
    1 exploit
    Published May 14, 2022
  • CVE-2015-8770High 7.5
    Directory traversal vulnerability in the set_skin function in program/include/rcmail_output_html.php in Roundcube before 1.0.8 and 1.1.x before 1.1.4 allows remote authenticated users with certain permissions to read arbitrary files or possibly execute arbitrary code via a ..
    roundcube · roundcube webmail
    EPSS22%
    2 exploits
    Published Jan 29, 2016
  • CVE-2015-6131Critical 9.3
    Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted .mcl file, aka "Media Center Library Parsing RCE Vulnerability."
    microsoft · windows 7
    EPSS31%
    2 exploits
    Published Dec 9, 2015
  • CVE-2015-3036Critical 10.0
    Stack-based buffer overflow in the run_init_sbus function in the KCodes NetUSB module for the Linux kernel, as used in certain NETGEAR products, TP-LINK products, and other products, allows remote attackers to execute arbitrary code by providing a long computer name in a session…
    kcodes · netusb
    EPSS28%
    2 exploits
    Published May 20, 2015
  • CVE-2015-2525High 7.2
    Task Scheduler in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to bypass intended filesystem restrictions and delete arbitrary…
    microsoft · windows 10
    EPSS31%
    2 exploits
    Published Sep 8, 2015
  • CVE-2015-2097High 7.5
    Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary code via unspecified vectors to the (1) LoadImage or (2) LoadImageEx function in the WESPMonitor.WESPMonitorCtrl.1 control, (3) ChangePassword function in the…
    webgate · webgate embedded standard protocol sdk
    EPSS24%
    5 exploits
    Published Mar 9, 2015
  • CVE-2014-2671Medium 6.8
    Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted WAV file.
    microsoft · windows media player
    EPSS46%
    8 exploits
    Published Mar 31, 2014
  • CVE-2013-6420High 7.5
    php: memory corruption in openssl_x509_parse()
    php · php
    EPSS36%
    1 exploit
    Published Dec 10, 2013
  • CVE-2013-4976Critical 9.8
    Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials
    hikvision · ds-2cd7153-e firmware
    EPSS36%
    1 exploit
    Published Dec 27, 2019
  • CVE-2013-2570Critical 9.8
    A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 in the General.Time.NTP.Server parameter to the sub_C8C8 function of the binary /opt/cgi/view/param, which could let a remove malicious user execute arbitrary code.
    zavio · f3105 firmware
    EPSS27%
    1 exploit
    Published Jan 29, 2020
  • CVE-2013-1598High 8.8
    A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to the farseer.out binary file, which cold let a malicious user execute arbitrary code.
    vivotek · pt7135 firmware
    EPSS20%
    2 exploits
    Published Jan 24, 2020
  • CVE-2013-0633Critical 9.3
    flash-plugin: multiple code execution flaws (APSB13-04)
    adobe · flash player
    EPSS21%
    1 exploit
    Published Feb 7, 2013
  • CVE-2013-0249High 7.5
    Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1, when negotiating SASL DIGEST-MD5 authentication, allows remote attackers to cause a denial of service (crash) and possibly execute…
    haxx · curl
    EPSS22%
    2 exploits
    Published Mar 8, 2013
  • CVE-2012-0896High 7.5
    Count per Day <= 3.1 - Arbitrary File Download
    count per day project · count per day
    EPSS23%
    2 exploits
    Published Jan 11, 2012
  • CVE-2011-3142Critical 10.0
    Stack-based buffer overflow in an ActiveX control in KVWebSvr.dll in WellinTech KingView 6.52 and 6.53 allows remote attackers to execute arbitrary code via a long second argument to the ValidateUser method.
    wellintech · kingview
    EPSS38%
    2 exploits
    Published Aug 16, 2011
  • CVE-2011-1938High 7.5
    php: stack-based buffer overflow in socket_connect()
    php · php
    EPSS23%
    3 exploits
    Published May 23, 2011
  • CVE-2011-1669High 7.5
    WP Custom Pages <= 0.5.0.1 - Path Traversal
    mikoviny · wp custom pages
    EPSS22%
    2 exploits
    Published Apr 2, 2011
  • CVE-2011-0096Medium 6.1
    The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for content blocks in a document,…
    microsoft · windows 7
    EPSS47%
    2 exploits
    Published Jan 31, 2011
Showing 501–550 of 1,410

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.

Figures as of Oct 19, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.