Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Watchlist

The CVE Watchlist, Under Review.

Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.

Synced hourly · figures as of Oct 20, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
729 vulnerabilities · highest score first
  • CVE-2022-35555Critical 9.8
    A command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.9(4122), which allows attackers to construct cmdinput parameters for arbitrary command execution.
    tenda · w6 firmware
    EPSS26%
    1 exploit
    Published Aug 12, 2022
  • CVE-2022-30887Critical 9.8
    Pharmacy Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /php_action/editProductImage.php.
    pharmacy management system project · pharmacy management system
    EPSS26%
    1 exploit
    Published May 20, 2022
  • CVE-2022-26213Critical 9.8
    Totolink X5000R_Firmware v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function setNtpCfg, via the tz parameters.
    totolink · x5000r firmware
    EPSS26%
    1 exploit
    Published Mar 15, 2022
  • CVE-2021-27828Critical 9.1
    SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries.
    in4velocity · in4suite erp
    EPSS20%
    1 exploit
    Published Jun 1, 2021
  • CVE-2020-15906Critical 9.8
    tiki-login.php in Tiki before 21.2 sets the admin password to a blank value after 50 invalid login attempts.
    tiki · tiki
    EPSS27%
    1 exploit
    Published Oct 22, 2020
  • CVE-2019-8982Critical 9.6
    com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leading to disclosure of local files and SSRF.
    wavemaker · wavemarker studio
    EPSS28%
    1 exploit
    Published Feb 21, 2019
  • CVE-2019-16072Critical 9.8
    An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an attacker to execute arbitrary code because of improper neutralization of shell metacharacters in the ip_address variable within an snmp_browser action.
    netsas · enigma network management solution
    EPSS26%
    1 exploit
    Published Mar 19, 2020
  • CVE-2019-15106Critical 9.8
    One can bypass the user password requirement and execute commands on the server.
    zohocorp · manageengine opmanager
    EPSS25%
    1 exploit
    Published Aug 16, 2019
  • CVE-2016-7182Critical 9.8
    The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync…
    microsoft · live meeting
    EPSS30%
    1 exploit
    Published Oct 13, 2016
  • CVE-2016-4203Critical 9.8
    Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via…
    adobe · acrobat
    EPSS27%
    1 exploit
    Published Jul 12, 2016
  • CVE-2015-2523Critical 9.3
    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption…
    microsoft · excel
    EPSS30%
    1 exploit
    Published Sep 8, 2015
  • CVE-2015-2521Critical 9.3
    Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
    microsoft · excel
    EPSS28%
    1 exploit
    Published Sep 8, 2015
  • CVE-2015-2520Critical 9.3
    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
    microsoft · excel
    EPSS28%
    1 exploit
    Published Sep 8, 2015
  • CVE-2015-2431Critical 9.3
    Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lync Basic 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office Graphics Library (OGL) font, aka "Microsoft Office Graphics Component…
    microsoft · live meeting
    EPSS30%
    1 exploit
    Published Aug 14, 2015
  • CVE-2015-0065Critical 9.3
    Microsoft Word 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "OneTableDocumentStream Remote Code Execution Vulnerability."
    microsoft · word
    EPSS30%
    1 exploit
    Published Feb 11, 2015
  • CVE-2015-0064Critical 9.3
    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory…
    microsoft · office
    EPSS30%
    1 exploit
    Published Feb 11, 2015
  • CVE-2015-0040Critical 9.3
    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0018, CVE-2015-0037, and…
    microsoft · internet explorer
    EPSS30%
    1 exploit
    Published Feb 11, 2015
  • CVE-2014-4141Critical 9.3
    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
    microsoft · internet explorer
    EPSS31%
    1 exploit
    Published Oct 15, 2014
  • CVE-2014-1789Critical 9.3
    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1790.
    microsoft · internet explorer
    EPSS29%
    1 exploit
    Published Jun 11, 2014
  • CVE-2014-1201Critical 10.0
    Buffer overflow in the INetViewX ActiveX control in the Lorex Edge LH310 and Edge+ LH320 series with firmware 7-35-28-1B26E, Edge2 LH330 series with firmware 11.17.38-33_1D97A, and Edge3 LH340 series with firmware 11.19.85_1FE3A allows remote attackers to cause a denial of…
    lorextechnology · edge2
    EPSS29%
    1 exploit
    Published Jan 15, 2014
  • CVE-2013-5912Critical 10.0
    VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows remote attackers to execute arbitrary code via a URL in the fileName parameter during an importFile action.
    thomsonreuters · velocity analytics vhayu analytic server
    EPSS30%
    1 exploit
    Published Nov 28, 2013
  • CVE-2013-3686Critical 10.0
    cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password via a list action.
    ovislink · airlive wl2600cam
    EPSS28%
    1 exploit
    Published Oct 11, 2013
  • CVE-2013-3151Critical 9.3
    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3144 and…
    microsoft · internet explorer
    EPSS23%
    1 exploit
    Published Jul 10, 2013
  • CVE-2013-3144Critical 9.3
    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3151 and…
    microsoft · internet explorer
    EPSS23%
    1 exploit
    Published Jul 10, 2013
  • CVE-2013-1311Critical 9.3
    Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability."
    microsoft · internet explorer
    EPSS21%
    1 exploit
    Published May 15, 2013
  • CVE-2013-0946Critical 9.3
    Buffer overflow in the Library Control Program (LCP) in EMC AlphaStor 4.0 before build 910 allows remote attackers to execute arbitrary code via crafted commands.
    emc · alphastor
    EPSS29%
    1 exploit
    Published May 10, 2013
  • CVE-2011-2003Critical 9.3
    Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .fon…
    microsoft · windows 7
    EPSS27%
    1 exploit
    Published Oct 11, 2011
  • CVE-2011-1276Critical 9.3
    Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute…
    microsoft · excel
    EPSS28%
    1 exploit
    Published Jun 16, 2011
  • CVE-2011-0041Critical 9.3
    Integer overflow in gdiplus.dll in GDI+ in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted EMF image, aka "GDI+ Integer…
    microsoft · office
    EPSS28%
    1 exploit
    Published Apr 13, 2011
  • CVE-2010-3329Critical 9.3
    mshtmled.dll in Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code via a crafted Microsoft Office document that causes the HtmlDlgHelper class destructor to access uninitialized memory, aka "Uninitialized Memory Corruption Vulnerability."
    microsoft · internet explorer
    EPSS28%
    1 exploit
    Published Oct 13, 2010
  • CVE-2010-1225Critical 9.3
    The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server 2005 Gold and R2 SP1, and Windows Virtual PC does not properly restrict access from the guest OS to memory locations in the VMM…
    microsoft · virtual pc
    EPSS28%
    1 exploit
    Published Apr 1, 2010
  • CVE-2010-0269Critical 10.0
    The SMB client in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly allocate memory for SMB responses, which allows remote SMB servers and…
    microsoft · windows 2000
    EPSS28%
    1 exploit
    Published Apr 14, 2010
  • CVE-2010-0265Critical 9.3
    Buffer overflow in Microsoft Windows Movie Maker 2.1, 2.6, and 6.0, and Microsoft Producer 2003, allows remote attackers to execute arbitrary code via a crafted project (.MSWMM) file, aka "Movie Maker and Producer Buffer Overflow Vulnerability."
    microsoft · producer
    EPSS27%
    1 exploit
    Published Mar 10, 2010
  • CVE-2007-6401Critical 9.3
    Stack-based buffer overflow in mplayer2.exe in Microsoft Windows Media Player (WMP) 6.4, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6402.
    microsoft · windows media player
    EPSS30%
    1 exploit
    Published Dec 17, 2007
  • CVE-2007-6026Critical 9.3
    Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a…
    microsoft · jet
    EPSS28%
    1 exploit
    Published Nov 19, 2007
  • CVE-2007-5775Critical 9.8
    Unspecified vulnerability in BitDefender allows attackers to execute arbitrary code via unspecified vectors, aka EEYEB-20071024.
    bitdefender · antivirus
    EPSS29%
    1 exploit
    Published Nov 1, 2007
  • CVE-2005-3116Critical 10.0
    Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5.1 up to MP3A allows remote attackers to execute arbitrary code via a crafted packet.
    symantec veritas · netbackup
    EPSS28%
    1 exploit
    Published Nov 18, 2005
  • CVE-2003-0240Critical 10.0
    The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash).
    axis · 2100 network camera
    EPSS30%
    1 exploit
    Published Jun 9, 2003
  • CVE-2001-0552Critical 10.0
    ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message.
    hp · openview network node manager
    EPSS26%
    1 exploit
    Published Sep 20, 2001
  • CVE-1999-0002Critical 10.0
    Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.
    redhat · linux
    EPSS28%
    1 exploit
    Published Oct 12, 1998
  • CVE-2026-94169Critical 10.0
    WordPress The Grid plugin <= 2.8.1 - Remote Code Execution (RCE) vulnerability
    EPSS1.0%
    1 exploit
    Published Oct 16, 2026
  • CVE-2026-0006Critical 9.8
    In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow.
    google · android
    EPSS0.7%
    1 exploit
    Published Mar 2, 2026
  • CVE-2024-25830Critical 9.8
    F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction.
    f-logic · datacube3 firmware
    EPSS24%
    1 exploit
    Published Feb 28, 2024
  • CVE-2023-51123Critical 9.8
    An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted POST request to the service parameter in the soapcgi_main function of the cgibin binary component.
    dlink · dir-815 firmware
    EPSS24%
    1 exploit
    Published Jan 10, 2024
  • CVE-2023-46042Critical 9.8
    An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo().
    get-simple · getsimplecms
    EPSS23%
    1 exploit
    Published Oct 19, 2023
  • CVE-2023-31983Critical 9.8
    A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the mp function in /bin/webs without any limitations.
    edimax · br-6428ns firmware
    EPSS25%
    1 exploit
    Published May 12, 2023
  • CVE-2023-27076Critical 9.8
    Command injection vulnerability found in Tenda G103 v.1.0.0.5 allows attacker to execute arbitrary code via a the language parameter.
    tenda · g103 firmware
    EPSS23%
    1 exploit
    Published Apr 10, 2023
  • CVE-2023-24734Critical 9.8
    An arbitrary file upload vulnerability in the camera_upload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a crafted image file.
    sigb · pmb
    EPSS21%
    1 exploit
    Published Mar 6, 2023
  • CVE-2022-47949Critical 9.8
    The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn.
    nintendo · animal crossing\
    EPSS23%
    1 exploit
    Published Dec 24, 2022
  • CVE-2022-38828Critical 9.8
    TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to command injection via cstecgi.cgi
    totolink · t6 firmware
    EPSS20%
    1 exploit
    Published Sep 16, 2022
Showing 601–650 of 729

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.

Figures as of Oct 20, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.