Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Watchlist

The CVE Watchlist, Under Review.

Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.

Synced hourly · figures as of Oct 20, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
1,412 vulnerabilities · highest score first
  • CVE-2021-46418High 7.5
    An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts.
    telesquare · tlr-2855ks6 firmware
    EPSS24%
    2 exploits
    Published Apr 7, 2022
  • CVE-2021-44595High 8.8
    Wondershare Dr.
    wondershare · dr.fone
    EPSS21%
    2 exploits
    Published Apr 29, 2022
  • CVE-2021-27828Critical 9.1
    SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries.
    in4velocity · in4suite erp
    EPSS20%
    1 exploit
    Published Jun 1, 2021
  • CVE-2021-25156Medium 4.9
    A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant…
    arubanetworks · instant
    EPSS40%
    2 exploits
    Published Mar 29, 2021
  • CVE-2021-24563Medium 6.1
    The Frontend Uploader WordPress plugin through 1.3.2 does not prevent HTML files from being uploaded via its form, allowing unauthenticated user to upload a malicious HTML file containing JavaScript for example, which will be triggered when someone access the file directly
    frontend uploader project · frontend uploader
    EPSS26%
    2 exploits
    Published Oct 11, 2021
  • CVE-2020-8958High 7.2
    Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the boaform/admin/formPing Dest IP Address field.
    gpononu · 1ge\+3fe\+wifi onu v2804rgw firmware
    EPSS46%
    1 exploit
    Published Jul 15, 2020
  • CVE-2020-28976Medium 5.3
    The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability.
    canto · canto
    EPSS28%
    1 exploit
    Published Nov 30, 2020
  • CVE-2020-23972High 7.5
    In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application and can also upload files which due to issues of unrestricted file uploads which can be bypassed by changing the content-type and name file…
    gmapfp · gmapfp
    EPSS31%
    1 exploit
    Published Aug 27, 2020
  • CVE-2020-15906Critical 9.8
    tiki-login.php in Tiki before 21.2 sets the admin password to a blank value after 50 invalid login attempts.
    tiki · tiki
    EPSS27%
    1 exploit
    Published Oct 22, 2020
  • CVE-2020-11798Medium 5.3
    A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access arbitrary files from restricted directories of the server via a crafted URL, due to insufficient access validation.
    mitel · micollab audio\, web \& video conferencing
    EPSS49%
    1 exploit
    Published Jun 10, 2020
  • CVE-2019-8982Critical 9.6
    com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leading to disclosure of local files and SSRF.
    wavemaker · wavemarker studio
    EPSS28%
    1 exploit
    Published Feb 21, 2019
  • CVE-2019-16072Critical 9.8
    An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an attacker to execute arbitrary code because of improper neutralization of shell metacharacters in the ip_address variable within an snmp_browser action.
    netsas · enigma network management solution
    EPSS26%
    1 exploit
    Published Mar 19, 2020
  • CVE-2019-15106Critical 9.8
    One can bypass the user password requirement and execute commands on the server.
    zohocorp · manageengine opmanager
    EPSS25%
    1 exploit
    Published Aug 16, 2019
  • CVE-2018-1189Medium 4.8
    Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the Antivirus Page within the OneFS web administration interface.
    dell · emc isilon
    EPSS28%
    2 exploits
    Published Mar 26, 2018
  • CVE-2017-11906Medium 5.3
    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the…
    microsoft · internet explorer
    EPSS25%
    2 exploits
    Published Dec 12, 2017
  • CVE-2017-1130Medium 6.5
    IBM Notes 8.5 and 9.0 is vulnerable to a denial of service.
    ibm · inotes
    EPSS29%
    2 exploits
    Published Sep 5, 2017
  • CVE-2016-7182Critical 9.8
    The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync…
    microsoft · live meeting
    EPSS30%
    1 exploit
    Published Oct 13, 2016
  • CVE-2016-6897Medium 6.5
    Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 allows remote attackers to hijack the authentication of subscribers for /dev/random read operations by leveraging a late call to…
    wordpress · wordpress
    EPSS29%
    1 exploit
    Published Jan 18, 2017
  • CVE-2016-4203Critical 9.8
    Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via…
    adobe · acrobat
    EPSS27%
    1 exploit
    Published Jul 12, 2016
  • CVE-2016-0121High 8.8
    The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted OpenType…
    microsoft · windows 10
    EPSS39%
    1 exploit
    Published Mar 9, 2016
  • CVE-2015-2790Medium 4.3
    Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted (1) Ubyte Size in a DataSubBlock structure or (2) LZWMinimumCodeSize in a GIF image.
    foxitsoftware · enterprise reader
    EPSS25%
    4 exploits
    Published Mar 30, 2015
  • CVE-2015-2523Critical 9.3
    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption…
    microsoft · excel
    EPSS30%
    1 exploit
    Published Sep 8, 2015
  • CVE-2015-2521Critical 9.3
    Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
    microsoft · excel
    EPSS28%
    1 exploit
    Published Sep 8, 2015
  • CVE-2015-2520Critical 9.3
    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
    microsoft · excel
    EPSS28%
    1 exploit
    Published Sep 8, 2015
  • CVE-2015-2431Critical 9.3
    Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lync Basic 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office Graphics Library (OGL) font, aka "Microsoft Office Graphics Component…
    microsoft · live meeting
    EPSS30%
    1 exploit
    Published Aug 14, 2015
  • CVE-2015-0065Critical 9.3
    Microsoft Word 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "OneTableDocumentStream Remote Code Execution Vulnerability."
    microsoft · word
    EPSS30%
    1 exploit
    Published Feb 11, 2015
  • CVE-2015-0064Critical 9.3
    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory…
    microsoft · office
    EPSS30%
    1 exploit
    Published Feb 11, 2015
  • CVE-2015-0040Critical 9.3
    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0018, CVE-2015-0037, and…
    microsoft · internet explorer
    EPSS30%
    1 exploit
    Published Feb 11, 2015
  • CVE-2014-7864High 7.5
    Multiple SQL injection vulnerabilities in the FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine OpManager 8 through 11.5 build 11400 and IT360 10.5 and earlier allow remote attackers and remote authenticated users to execute arbitrary SQL commands via the (1)…
    zohocorp · manageengine opmanager
    EPSS23%
    2 exploits
    Published Feb 4, 2015
  • CVE-2014-5111Medium 5.0
    Multiple directory traversal vulnerabilities in Fonality trixbox allow remote attackers to read arbitrary files via a ..
    netfortris · trixbox
    EPSS22%
    5 exploits
    Published Jul 28, 2014
  • CVE-2014-4141Critical 9.3
    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
    microsoft · internet explorer
    EPSS31%
    1 exploit
    Published Oct 15, 2014
  • CVE-2014-1789Critical 9.3
    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1790.
    microsoft · internet explorer
    EPSS29%
    1 exploit
    Published Jun 11, 2014
  • CVE-2014-1201Critical 10.0
    Buffer overflow in the INetViewX ActiveX control in the Lorex Edge LH310 and Edge+ LH320 series with firmware 7-35-28-1B26E, Edge2 LH330 series with firmware 11.17.38-33_1D97A, and Edge3 LH340 series with firmware 11.19.85_1FE3A allows remote attackers to cause a denial of…
    lorextechnology · edge2
    EPSS29%
    1 exploit
    Published Jan 15, 2014
  • CVE-2013-5912Critical 10.0
    VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows remote attackers to execute arbitrary code via a URL in the fileName parameter during an importFile action.
    thomsonreuters · velocity analytics vhayu analytic server
    EPSS30%
    1 exploit
    Published Nov 28, 2013
  • CVE-2013-4878High 7.5
    The default configuration of Parallels Plesk Panel 9.0.x and 9.2.x on UNIX, and Small Business Panel 10.x on UNIX, has an improper ScriptAlias directive for phppath, which makes it easier for remote attackers to execute arbitrary code via a crafted request, a different…
    parallels · parallels plesk panel
    EPSS31%
    1 exploit
    Published Jul 18, 2013
  • CVE-2013-3686Critical 10.0
    cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password via a list action.
    ovislink · airlive wl2600cam
    EPSS28%
    1 exploit
    Published Oct 11, 2013
  • CVE-2013-3151Critical 9.3
    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3144 and…
    microsoft · internet explorer
    EPSS23%
    1 exploit
    Published Jul 10, 2013
  • CVE-2013-3144Critical 9.3
    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3151 and…
    microsoft · internet explorer
    EPSS23%
    1 exploit
    Published Jul 10, 2013
  • CVE-2013-1606High 7.5
    Buffer overflow in the ubnt-streamer RTSP service on the Ubiquiti UBNT AirCam with airVision firmware before 1.1.6 allows remote attackers to execute arbitrary code via a long rtsp: URI in a DESCRIBE request.
    ui · aircam
    EPSS23%
    2 exploits
    Published Jul 18, 2013
  • CVE-2013-1311Critical 9.3
    Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability."
    microsoft · internet explorer
    EPSS21%
    1 exploit
    Published May 15, 2013
  • CVE-2013-0946Critical 9.3
    Buffer overflow in the Library Control Program (LCP) in EMC AlphaStor 4.0 before build 910 allows remote attackers to execute arbitrary code via crafted commands.
    emc · alphastor
    EPSS29%
    1 exploit
    Published May 10, 2013
  • CVE-2013-0090High 8.8
    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CCaret Use After Free Vulnerability."
    microsoft · internet explorer
    EPSS38%
    1 exploit
    Published Mar 12, 2013
  • CVE-2012-5469High 7.3
    Portable phpMyAdmin <= 1.3.0 - Authentication Bypass
    phpmyadmin · phpmyadmin
    EPSS24%
    1 exploit
    Published Jul 31, 2014
  • CVE-2012-3456High 7.5
    Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted…
    calligra · calligra
    EPSS20%
    1 exploit
    Published Aug 20, 2012
  • CVE-2012-1226High 7.5
    Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly execute arbitrary code via a ..
    dolibarr · dolibarr erp\/crm
    EPSS24%
    2 exploits
    Published Feb 21, 2012
  • CVE-2011-2003Critical 9.3
    Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .fon…
    microsoft · windows 7
    EPSS27%
    1 exploit
    Published Oct 11, 2011
  • CVE-2011-1276Critical 9.3
    Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute…
    microsoft · excel
    EPSS28%
    1 exploit
    Published Jun 16, 2011
  • CVE-2011-0041Critical 9.3
    Integer overflow in gdiplus.dll in GDI+ in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted EMF image, aka "GDI+ Integer…
    microsoft · office
    EPSS28%
    1 exploit
    Published Apr 13, 2011
  • CVE-2010-3329Critical 9.3
    mshtmled.dll in Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code via a crafted Microsoft Office document that causes the HtmlDlgHelper class destructor to access uninitialized memory, aka "Uninitialized Memory Corruption Vulnerability."
    microsoft · internet explorer
    EPSS28%
    1 exploit
    Published Oct 13, 2010
  • CVE-2010-2632High 7.8
    Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability.
    sun · sunos
    EPSS35%
    1 exploit
    Published Jan 19, 2011
Showing 1,101–1,150 of 1,412

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.

Figures as of Oct 20, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.