Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Watchlist

The CVE Watchlist, Under Review.

Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.

Synced hourly · figures as of Oct 19, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
499 vulnerabilities · highest score first
  • CVE-2016-6896High 7.1
    Directory traversal vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress 4.5.3 allows remote authenticated users to cause a denial of service or read certain text files via a ..
    wordpress · wordpress
    EPSS38%
    1 exploit
    Published Jan 18, 2017
  • CVE-2016-6816High 7.1
    Improper Input Validation in Apache Tomcat
    apache · tomcat
    EPSS40%
    1 exploit
    Published May 13, 2022
  • CVE-2016-4230High 8.8
    flash-plugin: multiple code execution issues fixed in APSB16-25
    adobe · flash player
    EPSS32%
    1 exploit
    Published Jul 12, 2016
  • CVE-2016-4229High 8.8
    flash-plugin: multiple code execution issues fixed in APSB16-25
    adobe · flash player
    EPSS32%
    1 exploit
    Published Jul 12, 2016
  • CVE-2016-4228High 8.8
    flash-plugin: multiple code execution issues fixed in APSB16-25
    adobe · flash player
    EPSS33%
    1 exploit
    Published Jul 12, 2016
  • CVE-2016-4226High 8.8
    flash-plugin: multiple code execution issues fixed in APSB16-25
    adobe · flash player
    EPSS33%
    1 exploit
    Published Jul 12, 2016
  • CVE-2016-10009High 7.3
    openssh - security update
    openbsd · openssh
    EPSS37%
    1 exploit
    Published Sep 7, 2023
  • CVE-2015-5621High 7.5
    net-snmp - security update
    net-snmp · net-snmp
    EPSS41%
    1 exploit
    Published Feb 11, 2022
  • CVE-2013-2574High 7.5
    An Access vulnerability exists in FOSCAM IP Camera FI8620 due to insufficient access restrictions in the /tmpfs/ and /log/ directories, which could let a malicious user obtain sensitive information.
    foscam · fi8620 firmware
    EPSS30%
    2 exploits
    Published Jan 29, 2020
  • CVE-2012-0830High 7.5
    php: remote code exec flaw introduced in the CVE-2011-4885 hashdos fix
    php · php
    EPSS30%
    2 exploits
    Published Feb 2, 2012
  • CVE-2007-1211High 7.1
    Unspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1, and SP2 allows user-assisted remote attackers to cause a denial of service (possibly persistent restart) via a crafted Windows Metafile (WMF) image that causes an invalid…
    microsoft · windows 2000
    EPSS29%
    3 exploits
    Published Apr 4, 2007
  • CVE-2006-4924High 7.8
    sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector.
    openbsd · openssh
    EPSS38%
    1 exploit
    Published Sep 27, 2006
  • CVE-2006-1491High 7.5
    Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execute arbitrary code via the help viewer.
    horde · application framework
    EPSS39%
    1 exploit
    Published Mar 29, 2006
  • CVE-2004-1166High 7.5
    CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the…
    microsoft · internet explorer
    EPSS39%
    1 exploit
    Published Dec 31, 2004
  • CVE-2003-0434High 7.5
    Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.
    adobe · acrobat
    EPSS41%
    1 exploit
    Published Jul 24, 2003
  • CVE-2026-83834High 7.0
    Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
    microsoft · windows 11 version 26h2 for arm64-based systems
    EPSS0.2%
    1 exploit
    Published Oct 13, 2026
  • CVE-2023-4169High 8.8
    It has been declared as critical.
    ruijie · rg-ew1200g firmware
    EPSS49%
    1 exploit
    Published Aug 5, 2023
  • CVE-2022-3552High 7.2
    Unrestricted Upload of File with Dangerous Type in GitHub repository boxbilling/boxbilling prior to 0.0.1.
    boxbilling · boxbilling
    EPSS44%
    1 exploit
    Published Oct 17, 2022
  • CVE-2021-22146High 7.5
    All versions of Elastic Cloud Enterprise has the Elasticsearch “anonymous” user enabled by default in deployed clusters.
    elastic · elasticsearch
    EPSS36%
    2 exploits
    Published Jul 21, 2021
  • CVE-2021-1531High 8.8
    A vulnerability in the web UI of Cisco Modeling Labs could allow an authenticated, remote attacker to execute arbitrary commands with the privileges of the web application on the underlying operating system of an affected Cisco Modeling Labs server.
    cisco · modeling labs
    EPSS30%
    1 exploit
    Published May 24, 2021
  • CVE-2020-6010High 8.8
    LearnPress Wordpress plugin version prior and including 3.2.6.7 is vulnerable to SQL Injection
    thimpress · learnpress
    EPSS49%
    1 exploit
    Published Apr 30, 2020
  • CVE-2020-3956High 8.8
    VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4 do not properly handle input leading to a code injection vulnerability.
    vmware · vcloud director
    EPSS21%
    3 exploits
    Published May 20, 2020
  • CVE-2020-35948High 8.8
    It gave authenticated attackers the ability to modify arbitrary files, including PHP files.
    xcloner · xcloner
    EPSS25%
    2 exploits
    Published Jan 1, 2021
  • CVE-2019-20224High 8.8
    netflow_get_stats in functions_netflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ip_src parameter in an index.php?operation/netflow/nf_live_view request.
    artica · pandora fms
    EPSS50%
    2 exploits
    Published Jan 9, 2020
  • CVE-2019-15984High 7.2
    Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device.
    cisco · data center network manager
    EPSS47%
    2 exploits
    Published Jan 6, 2020
  • CVE-2018-8625High 7.5
    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.
    microsoft · internet explorer
    EPSS44%
    2 exploits
    Published Dec 11, 2018
  • CVE-2018-8619High 7.5
    A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions, aka "Internet Explorer Remote Code Execution Vulnerability." This affects Internet Explorer 9, Internet Explorer 11,…
    microsoft · internet explorer
    EPSS45%
    2 exploits
    Published Dec 11, 2018
  • CVE-2018-7719High 7.5
    Acrolinx Server before 5.2.5 on Windows allows Directory Traversal.
    acrolinx · acrolinx server
    EPSS47%
    2 exploits
    Published Mar 25, 2018
  • CVE-2018-19458High 7.5
    Unauthenticated File Read in PHP Proxy
    php-proxy · php-proxy
    EPSS33%
    2 exploits
    Published May 14, 2022
  • CVE-2018-13109High 7.5
    All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerability where attackers are able to access and manipulate settings within the web interface that are forbidden to end users (e.g., by the ISP).
    adbglobal · dv2210 firmware
    EPSS35%
    1 exploit
    Published Jul 6, 2018
  • CVE-2018-10201High 7.5
    It is possible to read arbitrary files outside the root directory of the web server.
    ncomputing · vspace pro
    EPSS44%
    2 exploits
    Published Apr 20, 2018
  • CVE-2017-8541High 7.8
    The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…
    microsoft · malware protection engine
    EPSS48%
    1 exploit
    Published May 26, 2017
  • CVE-2017-11155High 7.5
    An information exposure vulnerability in index.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to obtain sensitive system information via unspecified vectors.
    synology · photo station
    EPSS47%
    1 exploit
    Published Aug 8, 2017
  • CVE-2016-7189High 7.5
    ChakraCore RCE Vulnerability
    microsoft · edge
    EPSS48%
    1 exploit
    Published May 14, 2022
  • CVE-2015-8770High 7.5
    Directory traversal vulnerability in the set_skin function in program/include/rcmail_output_html.php in Roundcube before 1.0.8 and 1.1.x before 1.1.4 allows remote authenticated users with certain permissions to read arbitrary files or possibly execute arbitrary code via a ..
    roundcube · roundcube webmail
    EPSS22%
    2 exploits
    Published Jan 29, 2016
  • CVE-2015-2525High 7.2
    Task Scheduler in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to bypass intended filesystem restrictions and delete arbitrary…
    microsoft · windows 10
    EPSS31%
    2 exploits
    Published Sep 8, 2015
  • CVE-2015-2097High 7.5
    Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary code via unspecified vectors to the (1) LoadImage or (2) LoadImageEx function in the WESPMonitor.WESPMonitorCtrl.1 control, (3) ChangePassword function in the…
    webgate · webgate embedded standard protocol sdk
    EPSS24%
    5 exploits
    Published Mar 9, 2015
  • CVE-2013-6420High 7.5
    php: memory corruption in openssl_x509_parse()
    php · php
    EPSS36%
    1 exploit
    Published Dec 10, 2013
  • CVE-2013-1598High 8.8
    A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to the farseer.out binary file, which cold let a malicious user execute arbitrary code.
    vivotek · pt7135 firmware
    EPSS20%
    2 exploits
    Published Jan 24, 2020
  • CVE-2013-0249High 7.5
    Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1, when negotiating SASL DIGEST-MD5 authentication, allows remote attackers to cause a denial of service (crash) and possibly execute…
    haxx · curl
    EPSS22%
    2 exploits
    Published Mar 8, 2013
  • CVE-2012-0896High 7.5
    Count per Day <= 3.1 - Arbitrary File Download
    count per day project · count per day
    EPSS23%
    2 exploits
    Published Jan 11, 2012
  • CVE-2011-1938High 7.5
    php: stack-based buffer overflow in socket_connect()
    php · php
    EPSS23%
    3 exploits
    Published May 23, 2011
  • CVE-2011-1669High 7.5
    WP Custom Pages <= 0.5.0.1 - Path Traversal
    mikoviny · wp custom pages
    EPSS22%
    2 exploits
    Published Apr 2, 2011
  • CVE-2006-6332High 7.5
    Stack-based buffer overflow in net80211/ieee80211_wireless.c in MadWifi before 0.9.2.1 allows remote attackers to execute arbitrary code via unspecified vectors, related to the encode_ie and giwscan_cb functions.
    madwifi · madwifi
    EPSS20%
    3 exploits
    Published Dec 10, 2006
  • CVE-2006-4193High 7.5
    Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and possibly execute arbitrary code by instantiating COM objects as ActiveX controls, including (1) imskdic.dll (Microsoft IME), (2) chtskdic.dll (Microsoft IME),…
    microsoft · internet explorer
    EPSS47%
    2 exploits
    Published Aug 16, 2006
  • CVE-2005-1219High 7.5
    Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags.
    microsoft · image color management
    EPSS50%
    2 exploits
    Published Jul 12, 2005
  • CVE-2003-0816High 7.5
    Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript,…
    microsoft · internet explorer
    EPSS48%
    2 exploits
    Published Feb 3, 2004
  • CVE-2003-0725High 7.5
    Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and RealServer G2 allows remote attackers to execute arbitrary code.
    realnetworks · helix universal server
    EPSS49%
    1 exploit
    Published Oct 20, 2003
  • CVE-2001-0876High 7.5
    Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL.
    microsoft · windows 98
    EPSS49%
    2 exploits
    Published Dec 20, 2001
  • CVE-2025-11001High 7.8
    7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability.
    7-zip · 7-zip
    EPSS27%
    1 exploit
    Published Nov 19, 2025
Showing 151–200 of 499

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.

Figures as of Oct 19, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.