Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Watchlist

The CVE Watchlist, Under Review.

Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.

Synced hourly · figures as of Oct 20, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
1,412 vulnerabilities · highest score first
  • CVE-2021-39378Critical 9.8
    A SQL Injection vulnerability exists in openSIS 8.0 when MySQL (MariaDB) is being used as the application database.
    os4ed · opensis
    EPSS23%
    1 exploit
    Published Sep 1, 2021
  • CVE-2021-27224High 7.5
    The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allow remote attackers to execute arbitrary code.
    irfanview · wpg
    EPSS38%
    1 exploit
    Published Feb 17, 2021
  • CVE-2021-27114Critical 9.8
    Within the handler function of the /goform/addassignment route, a very long text entry for the"'s_ip" and "s_mac" fields could lead to a Stack-Based Buffer Overflow and overwrite the return address.
    dlink · dir-816 firmware
    EPSS25%
    1 exploit
    Published Apr 14, 2021
  • CVE-2020-35606High 8.8
    Arbitrary command execution can occur in Webmin through 1.962.
    webmin · webmin
    EPSS28%
    2 exploits
    Published Dec 21, 2020
  • CVE-2020-10931High 7.5
    Memcached 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted binary protocol header to try_read_command_binary in memcached.c.
    memcached · memcached
    EPSS28%
    1 exploit
    Published Mar 24, 2020
  • CVE-2020-10549Critical 9.8
    rConfig 3.9.4 and previous versions has unauthenticated snippets.inc.php SQL injection.
    rconfig · rconfig
    EPSS32%
    1 exploit
    Published Jun 4, 2020
  • CVE-2019-9203Critical 9.8
    Authorization bypass in Nagios IM (component of Nagios XI) before 2.2.7 allows closing incidents in IM via the API.
    nagios · incident manager
    EPSS20%
    1 exploit
    Published Mar 28, 2019
  • CVE-2019-8196Critical 9.8
    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an untrusted pointer dereference vulnerability.
    adobe · acrobat dc
    EPSS23%
    1 exploit
    Published Oct 17, 2019
  • CVE-2019-8195Critical 9.8
    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an untrusted pointer dereference vulnerability.
    adobe · acrobat dc
    EPSS23%
    1 exploit
    Published Oct 17, 2019
  • CVE-2019-8048Critical 9.8
    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a buffer error vulnerability.
    adobe · acrobat dc
    EPSS35%
    1 exploit
    Published Aug 20, 2019
  • CVE-2019-3948High 7.5
    The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0.R, Dahua DH-IPC HX883X and DH-IPC-HX863X V2.622.0000000.7.R, Dahua DH-SD4XXXXX V2.623.0000000.7.R, Dahua DH-SD5XXXXX V2.623.0000000.1.R, Dahua DH-SD6XXXXX…
    dahua · dh-ipc-hx863x
    EPSS25%
    2 exploits
    Published Jul 29, 2019
  • CVE-2019-17418High 7.2
    There is SQL injection via the admin/?n=language&c=language_general&a=doSearchParameter appno parameter, a different issue than CVE-2019-16997.
    metinfo · metinfo
    EPSS49%
    1 exploit
    Published Oct 9, 2019
  • CVE-2019-16997High 7.2
    In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/language/admin/language_general.class.php via the admin/?n=language&c=language_general&a=doExportPack appno parameter.
    metinfo · metinfo
    EPSS49%
    1 exploit
    Published Sep 30, 2019
  • CVE-2019-13086Critical 9.8
    core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrf_csz parameter.
    cszcms · csz cms
    EPSS32%
    1 exploit
    Published Jun 30, 2019
  • CVE-2018-7777High 8.8
    The vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider Electric U.motion Builder software versions prior to v1.3.4.
    schneider-electric · u.motion builder
    EPSS32%
    1 exploit
    Published Jul 3, 2018
  • CVE-2018-19864Critical 9.8
    NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow), resulting in ability to read camera feeds or reconfigure the device.
    nuuo · nvrmini2 firmware
    EPSS25%
    1 exploit
    Published Dec 5, 2018
  • CVE-2018-15517High 8.6
    The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but actually allows outbound TCP to any port on any IP address, leading to SSRF, as demonstrated by an…
    dlink · central wifimanager
    EPSS44%
    1 exploit
    Published Jan 31, 2019
  • CVE-2017-9355High 7.4
    XML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted XSPF playlist file.
    subsonic · subsonic
    EPSS27%
    2 exploits
    Published Jun 7, 2017
  • CVE-2017-8225Critical 9.8
    On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not correctly checked.
    wificam · wireless ip camera \(p2p\) firmware
    EPSS35%
    1 exploit
    Published Apr 25, 2017
  • CVE-2017-7588Critical 9.8
    On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a failed login attempt.
    brother · ads firmware
    EPSS34%
    1 exploit
    Published Apr 12, 2017
  • CVE-2017-3623Critical 10.0
    For supported versions that are affected see note.
    oracle · solaris
    EPSS23%
    1 exploit
    Published Apr 24, 2017
  • CVE-2017-12787Critical 9.8
    A network interface of the novi_process_manager_daemon service, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, can be inadvertently exposed if an operator attempts to modify ACLs, because of a bug when ACL modifications are…
    noviflow · noviware
    EPSS25%
    1 exploit
    Published Aug 22, 2017
  • CVE-2017-0090High 8.8
    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…
    microsoft · windows 7
    EPSS43%
    1 exploit
    Published Mar 16, 2017
  • CVE-2017-0088High 8.8
    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Uniscribe Remote Code Execution Vulnerability."
    microsoft · windows 7
    EPSS42%
    1 exploit
    Published Mar 16, 2017
  • CVE-2017-0087High 8.8
    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…
    microsoft · windows 7
    EPSS43%
    1 exploit
    Published Mar 16, 2017
  • CVE-2017-0086High 8.8
    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…
    microsoft · windows 7
    EPSS43%
    1 exploit
    Published Mar 16, 2017
  • CVE-2017-0083High 8.8
    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…
    microsoft · windows 7
    EPSS43%
    1 exploit
    Published Mar 16, 2017
  • CVE-2017-0072High 8.8
    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…
    microsoft · windows 7
    EPSS43%
    1 exploit
    Published Mar 16, 2017
  • CVE-2016-9682Critical 9.8
    The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface.
    dell · sonicwall secure remote access server
    EPSS23%
    1 exploit
    Published Feb 22, 2017
  • CVE-2016-7274High 8.8
    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web…
    microsoft · windows 10
    EPSS42%
    1 exploit
    Published Dec 20, 2016
  • CVE-2016-5649Critical 9.8
    A vulnerability is in the 'BSW_cxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.50_7.0.50, and DGND3700, version DGND3700-V1.0.0.17_1.0.17, which can allow a remote attacker to access this page without any authentication.
    netgear · dgn2200 firmware
    EPSS24%
    1 exploit
    Published Jul 24, 2018
  • CVE-2016-3316High 7.8
    Microsoft Word 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory Corruption Vulnerability."
    microsoft · word
    EPSS47%
    1 exploit
    Published Aug 9, 2016
  • CVE-2016-3301High 7.8
    The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync…
    microsoft · live meeting
    EPSS44%
    1 exploit
    Published Aug 9, 2016
  • CVE-2015-8617Critical 9.8
    php: Format string vulnerability in class name error message
    php · php
    EPSS23%
    1 exploit
    Published Dec 12, 2015
  • CVE-2015-5471Medium 5.3
    Swim Team < 1.45.1085 - Directory Traversal
    swim team project · swim team
    EPSS32%
    2 exploits
    Published Jul 7, 2015
  • CVE-2015-3622Medium 5.9
    The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.
    gnu · libtasn1
    EPSS33%
    1 exploit
    Published May 12, 2015
  • CVE-2015-2510Critical 9.3
    Buffer overflow in the Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, and Live Meeting 2007 Console allows remote attackers to execute…
    microsoft · lync
    EPSS36%
    1 exploit
    Published Sep 8, 2015
  • CVE-2015-2444Critical 9.3
    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2442.
    microsoft · internet explorer
    EPSS34%
    1 exploit
    Published Aug 14, 2015
  • CVE-2015-0050Critical 9.3
    Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-8967 and CVE-2015-0044.
    microsoft · internet explorer
    EPSS33%
    1 exploit
    Published Feb 11, 2015
  • CVE-2014-8387Critical 9.0
    cgi/utility.cgi in Advantech EKI-6340 2.05 Wi-Fi Mesh Access Point allows remote authenticated users to execute arbitrary commands via shell metacharacters in the pinghost parameter to ping.cgi.
    advantech · eki-6340
    EPSS31%
    1 exploit
    Published Nov 20, 2014
  • CVE-2014-4138Critical 9.3
    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-4130 and CVE-2014-4132.
    microsoft · internet explorer
    EPSS32%
    1 exploit
    Published Oct 15, 2014
  • CVE-2014-1799Critical 9.3
    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0282,…
    microsoft · internet explorer
    EPSS33%
    1 exploit
    Published Jun 11, 2014
  • CVE-2013-7052Critical 9.8
    D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script
    dlink · dir-100 firmware
    EPSS25%
    1 exploit
    Published Feb 4, 2020
  • CVE-2013-3827Medium 5.0
    Path Traversal in Eclipse Mojarra
    oracle · fusion middleware
    EPSS32%
    1 exploit
    Published May 17, 2022
  • CVE-2013-3164Critical 9.3
    Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
    microsoft · internet explorer
    EPSS24%
    1 exploit
    Published Jul 10, 2013
  • CVE-2013-3152Critical 9.3
    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3146.
    microsoft · internet explorer
    EPSS24%
    1 exploit
    Published Jul 10, 2013
  • CVE-2013-3146Critical 9.3
    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3152.
    microsoft · internet explorer
    EPSS24%
    1 exploit
    Published Jul 10, 2013
  • CVE-2013-2160Medium 5.0
    Missing XML Validation in Apache CXF
    apache · cxf
    EPSS32%
    1 exploit
    Published May 13, 2022
  • CVE-2012-5960Critical 10.0
    libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)
    portable sdk for upnp project · portable sdk for upnp
    EPSS33%
    1 exploit
    Published Jan 29, 2013
  • CVE-2012-4353Critical 9.3
    Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that triggers an incorrect file-open attempt by the…
    sielcosistemi · winlog lite
    EPSS25%
    1 exploit
    Published Aug 19, 2012
Showing 1,001–1,050 of 1,412

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.

Figures as of Oct 20, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.