Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Watchlist

The CVE Watchlist, Under Review.

Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.

Synced hourly · figures as of Oct 19, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
1,412 vulnerabilities · highest score first
  • CVE-2021-25162High 8.1
    A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant…
    arubanetworks · instant
    EPSS26%
    2 exploits
    Published Mar 29, 2021
  • CVE-2020-9375High 7.5
    TP-Link Archer C50 V3 devices before Build 200318 Rel.
    tp-link · archer c50
    EPSS27%
    2 exploits
    Published Mar 25, 2020
  • CVE-2020-8947High 7.2
    functions_netflow.php in Artica Pandora FMS 7.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the index.php?operation/netflow/nf_live_view ip_dst, dst_port, or src_port parameter, a different vulnerability than CVE-2019-20224.
    artica · pandora fms
    EPSS22%
    3 exploits
    Published Feb 12, 2020
  • CVE-2020-5505Critical 9.8
    Freelancy v1.0.0 allows remote command execution via the "file":"data:application/x-php;base64 substring (in conjunction with "type":"application/x-php"} to the /api/files/ URI.
    vaaip · freelancy
    EPSS44%
    1 exploit
    Published Jan 14, 2020
  • CVE-2020-35576High 8.8
    A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 (JP) with firmware versions prior to 201216 allows authenticated users to execute arbitrary code as root via shell metacharacters, a different vulnerability than CVE-2018-12577.
    tp-link · tl-wr841n firmware
    EPSS42%
    1 exploit
    Published Jan 26, 2021
  • CVE-2019-12593High 7.5
    IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail/calendar/minimizer/index.php?style=..%5c directory traversal.
    icewarp · mail server
    EPSS41%
    2 exploits
    Published Jun 3, 2019
  • CVE-2019-0572High 7.8
    An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.
    microsoft · windows 10
    EPSS25%
    2 exploits
    Published Jan 8, 2019
  • CVE-2018-8269High 7.5
    Denial of service in ASP.NET Core
    microsoft · microsoft.data.odata
    EPSS27%
    1 exploit
    Published Oct 16, 2018
  • CVE-2018-7583High 7.5
    Proxy.exe in DualDesk 20 allows Remote Denial Of Service (daemon crash) via a long string to TCP port 5500.
    advantig · dualdesk
    EPSS38%
    2 exploits
    Published Mar 3, 2018
  • CVE-2018-6849Medium 4.3
    In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com), the browser can disclose a private IP address in a STUN request.
    duckduckgo · duckduckgo
    EPSS29%
    2 exploits
    Published Apr 1, 2018
  • CVE-2018-6794Medium 5.3
    Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c.
    suricata-ids · suricata
    EPSS24%
    2 exploits
    Published Feb 7, 2018
  • CVE-2018-5997Critical 9.8
    Due to an unrestricted upload feature and a path traversal vulnerability, it is possible to upload a file on a filesystem with root privileges: this will lead to remote code execution as root.
    ravpower · filehub firmware
    EPSS24%
    2 exploits
    Published Jan 25, 2018
  • CVE-2018-4936Medium 6.5
    Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Heap Overflow vulnerability.
    adobe · flash player
    EPSS25%
    2 exploits
    Published May 19, 2018
  • CVE-2018-16288High 8.6
    LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs.
    lg · supersign cms
    EPSS36%
    2 exploits
    Published Sep 14, 2018
  • CVE-2018-16158Critical 9.8
    Eaton Power Xpert Meter 4000, 6000, and 8000 devices before 13.4.0.10 have a single SSH private key across different customers' installations and do not properly restrict access to this key, which makes it easier for remote attackers to perform SSH logins (to uid 0) via the…
    eaton · power xpert meter 4000 firmware
    EPSS35%
    1 exploit
    Published Aug 30, 2018
  • CVE-2018-14392Medium 6.1
    The New Threads plugin before 1.2 for MyBB has XSS.
    mybb · new threads
    EPSS49%
    2 exploits
    Published Jul 18, 2018
  • CVE-2018-13417Critical 9.8
    In Vuze Bittorrent Client 5.7.6.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack.
    vuze · bittorrent client
    EPSS20%
    2 exploits
    Published Aug 13, 2018
  • CVE-2018-12571Critical 9.8
    uniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries for arbitrary hosts via a comma-separated list of URLs in the orig_url parameter, possibly causing a traffic amplification and/or…
    microsoft · forefront unified access gateway
    EPSS31%
    1 exploit
    Published Jul 5, 2018
  • CVE-2017-11346Critical 9.8
    Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload of help desk videos.
    zohocorp · manageengine desktop central
    EPSS43%
    1 exploit
    Published Jul 17, 2017
  • CVE-2016-3386High 7.5
    ChakraCore RCE Vulnerability
    microsoft · edge
    EPSS41%
    1 exploit
    Published May 14, 2022
  • CVE-2016-2209High 7.3
    Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP5; Symantec Endpoint…
    symantec · advanced threat protection
    EPSS21%
    1 exploit
    Published Jun 30, 2016
  • CVE-2016-0145High 8.8
    The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold and 1511; Office 2007 SP3 and 2010 SP2; Word Viewer; .NET Framework 3.0 SP2, 3.5, and 3.5.1; Skype…
    microsoft · live meeting
    EPSS43%
    1 exploit
    Published Apr 12, 2016
  • CVE-2016-0016High 7.8
    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted…
    microsoft · windows 10
    EPSS30%
    2 exploits
    Published Jan 13, 2016
  • CVE-2015-7622Critical 10.0
    Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to execute arbitrary code or cause a denial…
    adobe · acrobat
    EPSS23%
    1 exploit
    Published Oct 14, 2015
  • CVE-2015-6127Medium 4.3
    Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows remote attackers to read arbitrary files via a crafted .mcl file, aka "Windows Media Center Information Disclosure Vulnerability."
    microsoft · windows 7
    EPSS46%
    2 exploits
    Published Dec 9, 2015
  • CVE-2015-3083Medium 6.4
    flash-plugin: multiple code execution issues fixed in APSB15-09
    adobe · air
    EPSS41%
    1 exploit
    Published May 12, 2015
  • CVE-2015-2562High 7.5
    Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla!
    web-dorado · ecommerce wd
    EPSS39%
    2 exploits
    Published Mar 20, 2015
  • CVE-2015-0081Critical 9.3
    Windows Text Services (WTS) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a…
    microsoft · windows 7
    EPSS24%
    1 exploit
    Published Mar 11, 2015
  • CVE-2014-8499Medium 6.5
    Multiple SQL injection vulnerabilities in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition before 7.1 build 7105 allow remote authenticated users to execute arbitrary SQL commands via the SEARCH_ALL parameter to (1)…
    manageengine · password manager pro
    EPSS36%
    3 exploits
    Published Nov 17, 2014
  • CVE-2014-2962High 7.8
    Absolute path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware before 1.00.08 allows remote attackers to read arbitrary files via a full pathname in the getpage parameter.
    belkin · n150 f9k1009
    EPSS47%
    1 exploit
    Published Jun 19, 2014
  • CVE-2014-2383Medium 6.8
    DOMPDF Arbitrary File Read
    dompdf · dompdf
    EPSS39%
    1 exploit
    Published May 14, 2022
  • CVE-2013-3174Critical 9.3
    DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a crafted GIF file, aka "DirectShow Arbitrary…
    microsoft · windows 7
    EPSS32%
    1 exploit
    Published Jul 10, 2013
  • CVE-2013-3120Critical 9.3
    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3118 and CVE-2013-3125.
    microsoft · internet explorer
    EPSS32%
    1 exploit
    Published Jun 12, 2013
  • CVE-2013-3111Critical 9.3
    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3123.
    microsoft · internet explorer
    EPSS34%
    1 exploit
    Published Jun 12, 2013
  • CVE-2013-1306Critical 9.3
    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1313.
    microsoft · internet explorer
    EPSS33%
    1 exploit
    Published May 15, 2013
  • CVE-2013-0657Critical 10.0
    Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System (IGSS) 10 and earlier allows remote attackers to execute arbitrary code by sending TCP port-12397 data that does not comply with a protocol.
    schneider-electric · interactive graphical scada system
    EPSS21%
    2 exploits
    Published Jan 21, 2013
  • CVE-2013-0019Critical 9.3
    Use-after-free vulnerability in Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer COmWindowProxy Use After Free Vulnerability."
    microsoft · internet explorer
    EPSS35%
    1 exploit
    Published Feb 13, 2013
  • CVE-2012-5863Critical 10.0
    These Sinapsi devices do not check for special elements in commands sent to the system.
    sinapsitech · esolar duo photovoltaic system monitor
    EPSS25%
    2 exploits
    Published Nov 23, 2012
  • CVE-2012-5612Medium 6.5
    mysql: MDL subsystem heap-based buffer overflow
    mariadb · mariadb
    EPSS21%
    2 exploits
    Published Dec 1, 2012
  • CVE-2012-1661Critical 9.3
    ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, which allows user-assisted remote attackers to execute arbitrary VBA code via a crafted map (.mxd) file.
    esri · arcmap
    EPSS24%
    2 exploits
    Published Jul 12, 2012
  • CVE-2011-1866Critical 10.0
    Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to execute arbitrary code via a crafted request, related to the EXEC_CMD functionality.
    hp · openview storage data protector
    EPSS21%
    1 exploit
    Published Jul 1, 2011
  • CVE-2011-0978Critical 9.3
    Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via vectors related to an…
    microsoft · excel
    EPSS43%
    1 exploit
    Published Feb 10, 2011
  • CVE-2011-0966Medium 6.8
    Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to read arbitrary files via a ..
    cisco · ciscoworks common services
    EPSS41%
    3 exploits
    Published May 20, 2011
  • CVE-2011-0285Critical 10.0
    The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted…
    mit · kerberos 5
    EPSS21%
    1 exploit
    Published Apr 15, 2011
  • CVE-2010-4588Critical 9.3
    The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier allows remote attackers to execute arbitrary code via a crafted argument to the ReleaseContext method, a different vector than CVE-2010-3973, possibly an untrusted pointer…
    microsoft · wmi administrative tools
    EPSS33%
    1 exploit
    Published Dec 23, 2010
  • CVE-2010-4172Medium 4.3
    Improper Neutralization of Input During Web Page Generation in Apache Tomcat
    apache · tomcat
    EPSS42%
    1 exploit
    Published May 14, 2022
  • CVE-2010-3714High 7.1
    TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism
    typo3 · typo3
    EPSS24%
    1 exploit
    Published May 17, 2022
  • CVE-2008-2469Critical 10.0
    Heap-based buffer overflow in the SPF_dns_resolv_lookup function in Spf_dns_resolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code via a long DNS TXT record with a modified length field.
    libspf · libspf2
    EPSS22%
    1 exploit
    Published Oct 23, 2008
  • CVE-2008-0105Critical 9.3
    Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section header index table information, aka "Microsoft Works File Converter Index Table…
    microsoft · office
    EPSS44%
    1 exploit
    Published Feb 12, 2008
  • CVE-2007-1399Critical 9.8
    Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as bundled with PHP 5.2.0 and 5.2.1, allows remote attackers to execute arbitrary code via a long zip:// URL, as demonstrated by actively triggering URL access from a remote PHP interpreter via…
    php · php
    EPSS20%
    1 exploit
    Published Mar 10, 2007
Showing 801–850 of 1,412

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.

Figures as of Oct 19, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.