Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Watchlist

The CVE Watchlist, Under Review.

Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.

Synced hourly · figures as of Oct 20, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
1,412 vulnerabilities · highest score first
  • CVE-2023-2796Medium 5.3
    The EventON WordPress plugin before 2.1.2 lacks authentication and authorization in its eventon_ics_download ajax action, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id.
    myeventon · eventon
    EPSS43%
    1 exploit
    Published Jul 10, 2023
  • CVE-2023-27076Critical 9.8
    Command injection vulnerability found in Tenda G103 v.1.0.0.5 allows attacker to execute arbitrary code via a the language parameter.
    tenda · g103 firmware
    EPSS23%
    1 exploit
    Published Apr 10, 2023
  • CVE-2023-24734Critical 9.8
    An arbitrary file upload vulnerability in the camera_upload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a crafted image file.
    sigb · pmb
    EPSS21%
    1 exploit
    Published Mar 6, 2023
  • CVE-2022-47949Critical 9.8
    The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn.
    nintendo · animal crossing\
    EPSS23%
    1 exploit
    Published Dec 24, 2022
  • CVE-2022-38828Critical 9.8
    TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to command injection via cstecgi.cgi
    totolink · t6 firmware
    EPSS20%
    1 exploit
    Published Sep 16, 2022
  • CVE-2022-36572Critical 9.8
    Sinsiu Sinsiu Enterprise Website System v1.1.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /upload/admin.php?/deal/.
    sinsiu · enterprise website system
    EPSS22%
    1 exploit
    Published Aug 28, 2022
  • CVE-2022-34555Critical 9.8
    TP-LINK TL-R473G 2.0.1 Build 220529 Rel.65574n was discovered to contain a remote code execution vulnerability which is exploited via a crafted packet.
    tp-link · tl-r473g firmware
    EPSS23%
    1 exploit
    Published Jul 28, 2022
  • CVE-2022-34531Critical 9.8
    DedeCMS v5.7.95 was discovered to contain a remote code execution (RCE) vulnerability via the component mytag_ main.php.
    dedecms · dedecms
    EPSS24%
    1 exploit
    Published Jul 29, 2022
  • CVE-2022-30079High 8.8
    Command injection vulnerability was discovered in Netgear R6200 v2 firmware through R6200v2-V1.0.3.12 via binary /sbin/acos_service that could allow remote authenticated attackers the ability to modify values in the vulnerable parameter.
    netgear · r6200
    EPSS25%
    1 exploit
    Published Sep 8, 2022
  • CVE-2022-29592Critical 9.8
    Tenda TX9 Pro 22.03.02.10 devices allow OS command injection via set_route (called by doSystemCmd_route).
    tenda · tx9 pro firmware
    EPSS20%
    1 exploit
    Published May 5, 2022
  • CVE-2022-2863Medium 4.9
    Migration, Backup, Staging – WPvivid <= 0.9.75 - Authenticated (Administrator+) Path Traversal
    wpvivid · migration\, backup\, staging
    EPSS25%
    1 exploit
    Published Sep 16, 2022
  • CVE-2022-28557Critical 9.8
    There is a command injection vulnerability at the /goform/setsambacfg interface of Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin device web, which can also cooperate with CVE-2021-44971 to cause unconditional arbitrary command execution
    tenda · ac15 firmware
    EPSS23%
    1 exploit
    Published May 4, 2022
  • CVE-2022-28096High 7.2
    Skycaiji v2.4 was discovered to contain a remote code execution (RCE) vulnerability via /SkycaijiApp/admin/controller/Develop.php.
    skycaiji · skycaiji
    EPSS21%
    1 exploit
    Published May 4, 2022
  • CVE-2022-28021Critical 9.8
    Purchase Order Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /purchase_order/admin/?page=user.
    purchase order management system project · purchase order management system
    EPSS24%
    1 exploit
    Published Apr 21, 2022
  • CVE-2022-27474High 7.2
    SuiteCRM v7.11.23 was discovered to allow remote code execution via a crafted payload injected into the FirstName text field.
    salesagility · suitecrm
    EPSS23%
    1 exploit
    Published Apr 15, 2022
  • CVE-2022-23389Critical 9.8
    PublicCMS v4.0 was discovered to contain a remote code execution (RCE) vulnerability via the cmdarray parameter.
    publiccms · publiccms
    EPSS22%
    1 exploit
    Published Feb 14, 2022
  • CVE-2021-34805High 7.5
    For each URL request, it accesses the corresponding .fau file on the operating system without preventing %2e%2e%5c directory traversal.
    land-software · faust iserver
    EPSS27%
    1 exploit
    Published Jan 31, 2022
  • CVE-2021-31932Critical 9.8
    Nokia BTS TRS web console FTM_W20_FP2_2019.08.16_0010 allows Authentication Bypass.
    nokia · bts trs web console
    EPSS22%
    1 exploit
    Published Feb 11, 2022
  • CVE-2020-28070Critical 9.8
    SourceCodester Alumni Management System 1.0 is affected by SQL injection causing arbitrary remote code execution from GET input in view_event.php via the 'id' parameter.
    alumni management system project · alumni management system
    EPSS23%
    1 exploit
    Published Dec 23, 2020
  • CVE-2020-11579High 7.5
    installer/test-connection.php (part of the installation process) allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled.
    chadhaajay · phpkb
    EPSS27%
    1 exploit
    Published Sep 3, 2020
  • CVE-2019-9757High 7.5
    Sending an SVG containing an XXE payload to the endpoint visualization-exportImage.view or visualization-exportPDF.view allows local files to be read.
    labkey · labkey server
    EPSS37%
    1 exploit
    Published Oct 29, 2019
  • CVE-2019-8016Critical 9.8
    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds write vulnerability.
    adobe · acrobat dc
    EPSS22%
    1 exploit
    Published Aug 20, 2019
  • CVE-2019-16893High 7.5
    The Web Management of TP-Link TP-SG105E V4 1.0.0 Build 20181120 devices allows an unauthenticated attacker to reboot the device via a reboot.cgi request.
    tp-link · tp-sg105e firmware
    EPSS38%
    1 exploit
    Published Feb 3, 2020
  • CVE-2019-13063High 7.5
    Within Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim files on the system via the script parameter on the Script_view page.
    sahipro · sahi pro
    EPSS27%
    1 exploit
    Published Sep 23, 2019
  • CVE-2019-12616Medium 6.5
    phpMyAdmin CSRF Vulnerability
    phpmyadmin · phpmyadmin
    EPSS20%
    1 exploit
    Published May 24, 2022
  • CVE-2018-8533Medium 5.5
    An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious XML content containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server…
    microsoft · sql server management studio
    EPSS23%
    2 exploits
    Published Oct 10, 2018
  • CVE-2018-8532Medium 5.5
    An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XMLA file containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server…
    microsoft · sql server management studio
    EPSS23%
    2 exploits
    Published Oct 10, 2018
  • CVE-2018-8527Medium 5.5
    An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XEL file containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server…
    microsoft · sql server management studio
    EPSS23%
    2 exploits
    Published Oct 10, 2018
  • CVE-2018-18006Critical 9.8
    Hardcoded credentials in the Ricoh myPrint application 2.9.2.4 for Windows and 2.2.7 for Android give access to any externally disclosed myPrint WSDL API, as demonstrated by discovering API secrets of related Google cloud printers, encrypted passwords of mail servers, and names…
    ricoh · myprint
    EPSS21%
    1 exploit
    Published Dec 14, 2018
  • CVE-2018-14493Medium 6.1
    Cross-site scripting (XSS) vulnerability in the Groups Page in Open-Audit Community 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the group name.
    opmantek · open-audit
    EPSS41%
    2 exploits
    Published Jul 25, 2018
  • CVE-2018-12596Critical 9.8
    Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspx pages via the "activateuser.aspx" page, even if a page is located under the /WorkArea/ path, which is forbidden (normally available…
    episerver · ektron cms
    EPSS22%
    1 exploit
    Published Oct 10, 2018
  • CVE-2018-10822High 7.5
    Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices allows remote attackers…
    dlink · dir-140l firmware
    EPSS39%
    1 exploit
    Published Oct 17, 2018
  • CVE-2017-8683Medium 5.5
    Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an attacker to execute remote code by the way it handles embedded…
    microsoft · windows 10
    EPSS23%
    2 exploits
    Published Sep 12, 2017
  • CVE-2017-8303Critical 9.8
    An issue was discovered on Accellion FTA devices before FTA_9_12_180.
    accellion · file transfer appliance
    EPSS24%
    1 exploit
    Published May 5, 2017
  • CVE-2017-6548Critical 9.8
    Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with…
    asus · rt-ac53 firmware
    EPSS21%
    1 exploit
    Published Mar 9, 2017
  • CVE-2017-5869High 8.8
    Directory traversal vulnerability in the file import feature in Nuxeo Platform 6.0, 7.1, 7.2, and 7.3 allows remote authenticated users to upload and execute arbitrary JSP code via a ..
    nuxeo · nuxeo
    EPSS35%
    1 exploit
    Published Mar 24, 2017
  • CVE-2017-15647High 7.5
    On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value.
    fiberhome · routerfiberhome firmware
    EPSS27%
    1 exploit
    Published Oct 19, 2017
  • CVE-2016-9554High 7.2
    The Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface.
    sophos · web appliance
    EPSS25%
    1 exploit
    Published Jan 28, 2017
  • CVE-2016-5725Medium 5.9
    Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command.
    jcraft · jsch
    EPSS24%
    1 exploit
    Published Apr 21, 2021
  • CVE-2016-4201Critical 9.8
    Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via…
    adobe · acrobat
    EPSS21%
    1 exploit
    Published Jul 12, 2016
  • CVE-2016-3717Medium 5.5
    The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image.
    imagemagick · imagemagick
    EPSS20%
    1 exploit
    Published May 5, 2016
  • CVE-2016-2389High 7.5
    Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMII) component 15.0 for SAP NetWeaver 7.4 allows remote attackers to read arbitrary files via a ..
    sap · netweaver
    EPSS41%
    1 exploit
    Published Feb 16, 2016
  • CVE-2016-0122High 7.8
    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Word 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption…
    microsoft · excel
    EPSS41%
    1 exploit
    Published Apr 12, 2016
  • CVE-2016-0111High 7.5
    Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than…
    microsoft · edge
    EPSS39%
    1 exploit
    Published Mar 9, 2016
  • CVE-2016-0108High 7.5
    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0102, CVE-2016-0103,…
    microsoft · internet explorer
    EPSS39%
    1 exploit
    Published Mar 9, 2016
  • CVE-2014-1800Critical 9.3
    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
    microsoft · internet explorer
    EPSS24%
    1 exploit
    Published Jun 11, 2014
  • CVE-2014-1797Critical 9.3
    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1772, CVE-2014-1780,…
    microsoft · internet explorer
    EPSS24%
    1 exploit
    Published Jun 11, 2014
  • CVE-2014-1795Critical 9.3
    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1773,…
    microsoft · internet explorer
    EPSS25%
    1 exploit
    Published Jun 11, 2014
  • CVE-2014-1791Critical 9.3
    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
    microsoft · internet explorer
    EPSS25%
    1 exploit
    Published Jun 11, 2014
  • CVE-2014-1779Critical 9.3
    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0282,…
    microsoft · internet explorer
    EPSS24%
    1 exploit
    Published Jun 11, 2014
Showing 1,201–1,250 of 1,412

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.

Figures as of Oct 20, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.