Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Watchlist

The CVE Watchlist, Under Review.

Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.

Synced hourly · figures as of Oct 19, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
1,412 vulnerabilities · highest score first
  • CVE-2019-17503Medium 5.3
    An unauthenticated user can access /osm/REGISTER.cmd (aka /osm_tiles/REGISTER.cmd) directly: it contains sensitive information about the database through the SQL queries within this batch file.
    kirona · dynamic resource scheduling
    EPSS48%
    3 exploits
    Published Oct 11, 2019
  • CVE-2019-13358High 7.5
    lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying operating system.
    opencats · opencats
    EPSS24%
    2 exploits
    Published Jul 5, 2019
  • CVE-2018-2791High 8.2
    Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites.
    oracle · webcenter sites
    EPSS38%
    1 exploit
    Published Apr 18, 2018
  • CVE-2018-20470High 7.5
    A directory traversal (arbitrary file access) vulnerability exists in the web reports module.
    sahipro · sahi pro
    EPSS46%
    2 exploits
    Published Jun 17, 2019
  • CVE-2018-15535High 7.5
    /filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize get_file sequences such as ".." that can resolve to a location that is…
    tecrail · responsive filemanager
    EPSS45%
    2 exploits
    Published Aug 24, 2018
  • CVE-2018-14058Medium 6.5
    Pimcore SQLi Vulnerability
    pimcore · pimcore
    EPSS29%
    3 exploits
    Published May 14, 2022
  • CVE-2018-12589High 7.8
    Polaris Office 2017 8.1 allows attackers to execute arbitrary code via a Trojan horse puiframeworkproresenu.dll file in the current working directory.
    polarisoffice · polaris office 2017
    EPSS20%
    3 exploits
    Published Jun 28, 2018
  • CVE-2018-12453High 7.5
    Type confusion in the xgroupCommand function in t_stream.c in redis-server in Redis before 5.0 allows remote attackers to cause denial-of-service via an XGROUP command in which the key is not a stream.
    redislabs · redis
    EPSS24%
    3 exploits
    Published Jun 16, 2018
  • CVE-2017-8295Medium 5.9
    WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for remote attackers to reset arbitrary passwords by making a crafted wp-login.php?action=lostpassword request and then arranging for this message to bounce or be…
    wordpress · wordpress
    EPSS27%
    2 exploits
    Published May 4, 2017
  • CVE-2017-11885Medium 6.6
    Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow a remote code execution vulnerability due to the way the Routing and…
    microsoft · windows 10
    EPSS46%
    2 exploits
    Published Dec 12, 2017
  • CVE-2017-1002000Medium 5.3
    How to Create an App for Android iPhone Easytouch <= 3.0 - Missing Authorization
    mobile-friendly-app-builder-by-easytouch project · mobile-friendly-app-builder-by-easytouch
    EPSS27%
    2 exploits
    Published Feb 28, 2017
  • CVE-2016-7982High 7.5
    Directory traversal vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to enumerate the files on the system via the var_url parameter in a valider_xml action.
    spip · spip
    EPSS21%
    1 exploit
    Published Jan 18, 2017
  • CVE-2016-6808High 8.1
    Buffer overflow in Apache Tomcat Connectors (mod_jk) before 1.2.42.
    apache · tomcat jk connector
    EPSS23%
    1 exploit
    Published Oct 6, 2016
  • CVE-2016-6272High 7.5
    XPath injection vulnerability in Epic MyChart allows remote attackers to access contents of an XML document containing static display strings, such as field labels, via the topic parameter to help.asp.
    epic · mychart
    EPSS21%
    3 exploits
    Published Feb 20, 2018
  • CVE-2016-2819High 8.8
    Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via foreign-context HTML5 fragments, as demonstrated by fragments within an SVG element.
    mozilla · firefox
    EPSS24%
    1 exploit
    Published Jun 13, 2016
  • CVE-2016-1606Critical 9.8
    Multiple stack-based buffer overflows in COM objects in Micro Focus Rumba 9.4.x before 9.4 HF 13960 allow remote attackers to execute arbitrary code via (1) the NetworkName property value to ObjectXSNAConfig.ObjectXSNAConfig in iconfig.dll, (2) the CPName property value to…
    microfocus · rumba
    EPSS46%
    1 exploit
    Published Jul 2, 2016
  • CVE-2015-8636High 8.8
    flash-plugin: multiple code execution issues fixed in APSB16-01
    adobe · air
    EPSS21%
    1 exploit
    Published Dec 28, 2015
  • CVE-2015-3082Medium 6.4
    flash-plugin: multiple code execution issues fixed in APSB15-09
    adobe · air
    EPSS43%
    1 exploit
    Published May 12, 2015
  • CVE-2015-2432Critical 9.3
    ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a…
    microsoft · windows 7
    EPSS30%
    1 exploit
    Published Aug 14, 2015
  • CVE-2014-8147High 7.5
    The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause…
    icu-project · international components for unicode
    EPSS24%
    1 exploit
    Published Sep 13, 2021
  • CVE-2014-8146High 7.5
    The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 does not properly track directionally isolated pieces of text, which allows remote attackers to cause a…
    icu-project · international components for unicode
    EPSS25%
    1 exploit
    Published Sep 13, 2021
  • CVE-2014-7235Critical 10.0
    htdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording Interface (ARI) in FreePBX before 2.9.0.9, 2.10.x, and 2.11 before 2.11.1.5 allows remote attackers to execute arbitrary code via the ari_auth cookie, related to the PHP unserialize function, as…
    freepbx · freepbx
    EPSS43%
    1 exploit
    Published Oct 7, 2014
  • CVE-2014-1785Critical 9.3
    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1769, CVE-2014-1782,…
    microsoft · internet explorer
    EPSS30%
    2 exploits
    Published Jun 11, 2014
  • CVE-2013-2569High 7.5
    A Security Bypass vulnerability exists in Zavio IP Cameras through 1.6.3 because the RTSP protocol authentication is disabled by default, which could let a malicious user obtain unauthorized access to the live video stream.
    zavio · f3105 firmware
    EPSS31%
    1 exploit
    Published Jan 29, 2020
  • CVE-2013-1309Critical 9.3
    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than…
    microsoft · internet explorer
    EPSS39%
    1 exploit
    Published May 15, 2013
  • CVE-2012-0207High 7.5
    kernel: igmp: Avoid zero delay when receiving odd mixture of IGMP queries
    linux · linux kernel
    EPSS20%
    1 exploit
    Published Jan 10, 2012
  • CVE-2011-4367High 7.5
    Apache MyFaces Vulnerable to Path Traversal
    apache · myfaces
    EPSS34%
    1 exploit
    Published May 13, 2022
  • CVE-2011-2757Medium 5.0
    Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12 and earlier allows remote attackers to read arbitrary files via a ..
    manageengine · servicedesk plus
    EPSS39%
    4 exploits
    Published Jul 17, 2011
  • CVE-2011-1248Critical 9.3
    WINS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 does not properly handle socket send exceptions, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted packets, related to…
    microsoft · windows server 2003
    EPSS48%
    1 exploit
    Published May 13, 2011
  • CVE-2011-1137Medium 5.0
    Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service (memory consumption leading to OOM kill) via a malformed SSH message.
    proftpd · proftpd
    EPSS28%
    2 exploits
    Published Mar 11, 2011
  • CVE-2010-2330Critical 9.3
    Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Content-Length header.
    upredsun · isharer file sharing wizard
    EPSS28%
    1 exploit
    Published Jun 18, 2010
  • CVE-2010-1938Critical 9.3
    Off-by-one error in the opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a…
    nrl · opie
    EPSS22%
    1 exploit
    Published May 28, 2010
  • CVE-2010-1717High 7.5
    Directory traversal vulnerability in the iF surfALERT (com_if_surfalert) component 1.2 for Joomla!
    if surfalert project · if surfalert
    EPSS22%
    2 exploits
    Published May 4, 2010
  • CVE-2010-1248Critical 9.3
    Buffer overflow in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed HFPicture (0x866) record, aka "Excel HFPicture Memory Corruption Vulnerability."
    microsoft · excel
    EPSS27%
    2 exploits
    Published Jun 8, 2010
  • CVE-2010-0028Critical 9.3
    Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG (.JPG) file, aka "MS Paint Integer Overflow Vulnerability."
    microsoft · windows 2000
    EPSS48%
    1 exploit
    Published Feb 10, 2010
  • CVE-2009-3244Critical 9.3
    Heap-based buffer overflow in the SwDir.dll ActiveX control in Adobe Shockwave Player 11.5.1.601 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PlayerVersion property value.
    adobe · shockwave player
    EPSS20%
    2 exploits
    Published Sep 18, 2009
  • CVE-2009-2754Critical 10.0
    Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix Dynamic Server (IDS) 10.x before 10.00.TC9 and 11.x before 11.10.TC3 and EMC Legato NetWorker, allows…
    emc · legato networker
    EPSS40%
    1 exploit
    Published Mar 5, 2010
  • CVE-2009-2514Critical 9.3
    win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not correctly parse font code during construction of a directory-entry table, which allows remote attackers to execute arbitrary code via a crafted Embedded OpenType (EOT) font, aka…
    microsoft · windows 2000
    EPSS47%
    1 exploit
    Published Nov 11, 2009
  • CVE-2009-1547High 8.8
    Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream header that triggers memory corruption, aka "Data Stream Header Corruption Vulnerability."
    microsoft · internet explorer
    EPSS37%
    2 exploits
    Published Oct 14, 2009
  • CVE-2009-1523Medium 5.3
    Directory traversal in Mort Bay Jetty
    mortbay · jetty
    EPSS26%
    2 exploits
    Published May 2, 2022
  • CVE-2009-0932Medium 6.4
    horde: XSS vulnerability and directory traversal vulnerability
    debian · horde
    EPSS46%
    1 exploit
    Published Jan 27, 2009
  • CVE-2009-0815Medium 6.9
    TYPO3 leaks a hash secret in an error message
    typo3 · typo3
    EPSS42%
    1 exploit
    Published May 2, 2022
  • CVE-2009-0520Critical 9.3
    flash-plugin: Buffer overflow (arbitrary code execution) via crafted SWF file.
    adobe · flash player
    EPSS28%
    1 exploit
    Published Feb 24, 2009
  • CVE-2008-1721High 7.5
    python: integer signedness error in the zlib extension module
    python · python
    EPSS23%
    1 exploit
    Published Apr 9, 2008
  • CVE-2007-1306High 7.8
    Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending a Session Initiation Protocol (SIP) packet without a URI and SIP-version header, which results in a NULL pointer dereference.
    digium · asterisk
    EPSS21%
    1 exploit
    Published Mar 7, 2007
  • CVE-2006-5085High 7.5
    Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the nom_blog parameter, which is injected into include/variables.php.
    pixel motion · pixel motion blog
    EPSS47%
    1 exploit
    Published Sep 28, 2006
  • CVE-2006-2389High 9.3
    Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with a malformed property that triggers memory corruption related to record lengths,…
    microsoft · office
    EPSS39%
    1 exploit
    Published Jul 11, 2006
  • CVE-2006-0287Critical 10.0
    Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 10.1.0.5 and Application Server 10.1.2.0.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# OHS02.
    oracle · application server
    EPSS29%
    1 exploit
    Published Jan 18, 2006
  • CVE-2006-0254Medium 4.3
    Apache Geronimo console 1.0 vulnerable to cross-site scripting
    apache · geronimo
    EPSS32%
    2 exploits
    Published May 1, 2022
  • CVE-2005-3388Medium 4.3
    Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a "stacked array assignment."
    php · php
    EPSS49%
    1 exploit
    Published Oct 31, 2005
Showing 701–750 of 1,412

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.

Figures as of Oct 19, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.