Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Watchlist

The CVE Watchlist, Under Review.

Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.

Synced hourly · figures as of Oct 19, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
725 vulnerabilities · highest score first
  • CVE-2007-6015Critical 9.3
    Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset…
    samba · samba
    EPSS27%
    1 exploit
    Published Dec 13, 2007
  • CVE-2006-3059Critical 9.3
    Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors.
    microsoft · excel
    EPSS41%
    1 exploit
    Published Jun 17, 2006
  • CVE-2004-0214Critical 10.0
    Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated…
    microsoft · internet explorer
    EPSS47%
    1 exploit
    Published Nov 3, 2004
  • CVE-2000-0666Critical 10.0
    rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.
    conectiva · linux
    EPSS26%
    3 exploits
    Published Jul 16, 2000
  • CVE-2026-102255Critical 10.0
    A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path.
    EPSS0.5%
    2 exploits
    Published Oct 7, 2026
  • CVE-2024-0939Critical 9.8
    The manipulation of the argument file_upload leads to unrestricted upload.
    byzoro · smart s210 firmware
    EPSS44%
    1 exploit
    Published Jan 26, 2024
  • CVE-2023-3824Critical 9.8
    In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE.
    php · php
    EPSS22%
    1 exploit
    Published Aug 11, 2023
  • CVE-2023-37629Critical 9.8
    Online Piggery Management System 1.0 is vulnerable to File Upload.
    simple online piggery management system project · simple online piggery management system
    EPSS23%
    3 exploits
    Published Jul 12, 2023
  • CVE-2022-29383Critical 9.8
    NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi.
    netgear · ssl312 firmware
    EPSS49%
    1 exploit
    Published May 13, 2022
  • CVE-2022-1556Critical 9.8
    StaffList <= 3.1.2 - Authenticated SQL Injection
    era404 · stafflist
    EPSS20%
    1 exploit
    Published May 31, 2022
  • CVE-2020-24214Critical 9.8
    Attackers can send a crafted unauthenticated RTSP request to cause a buffer overflow and application crash.
    provideoinstruments · vecaster-4k-hevc firmware
    EPSS35%
    2 exploits
    Published Oct 6, 2020
  • CVE-2019-7265Critical 9.8
    Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).
    nortekcontrol · linear emerge elite firmware
    EPSS23%
    2 exploits
    Published Jul 2, 2019
  • CVE-2019-5893Critical 9.8
    Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter.
    nelson-it · open source erp
    EPSS25%
    3 exploits
    Published Jan 10, 2019
  • CVE-2019-17124Critical 9.8
    Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.
    kramerav · viaware
    EPSS23%
    3 exploits
    Published Oct 9, 2019
  • CVE-2019-16119Critical 9.8
    SQL injection in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via the admin/controllers/Albumsgalleries.php album_id parameter.
    10web · photo gallery
    EPSS25%
    1 exploit
    Published Sep 8, 2019
  • CVE-2018-6317Critical 9.1
    The remote management interface in Claymore Dual Miner 10.5 and earlier is vulnerable to an unauthenticated format string vulnerability, allowing remote attackers to read memory or cause a denial of service.
    claymore dual miner project · claymore dual miner
    EPSS44%
    2 exploits
    Published Feb 2, 2018
  • CVE-2018-5973Critical 9.8
    SQL Injection exists in Professional Local Directory Script 1.0 via the sellers_subcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter.
    eihitech · professional local directory script
    EPSS20%
    3 exploits
    Published Jan 25, 2018
  • CVE-2018-14364Critical 9.8
    GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write access and resultant remote code execution via the GitLab projects import component.
    gitlab · gitlab
    EPSS48%
    1 exploit
    Published Jul 18, 2018
  • CVE-2018-12584Critical 9.8
    The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cause a denial of service (buffer overflow) or possibly execute arbitrary code when TLS communication is enabled.
    resiprocate · resiprocate
    EPSS24%
    1 exploit
    Published Jul 16, 2018
  • CVE-2018-10718Critical 10.0
    Stack-based buffer overflow in Activision Infinity Ward Call of Duty Modern Warfare 2 before 2018-04-26 allows remote attackers to execute arbitrary code via crafted packets.
    activision · call of duty modern warfare 2
    EPSS31%
    2 exploits
    Published May 3, 2018
  • CVE-2017-6542Critical 9.8
    The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect to the Unix-domain socket representing the forwarded agent connection, which…
    putty · putty
    EPSS22%
    1 exploit
    Published Mar 27, 2017
  • CVE-2017-3077Critical 9.8
    flash-plugin: multiple code execution issues fixed in APSB17-17
    adobe · flash player
    EPSS22%
    1 exploit
    Published Jun 13, 2017
  • CVE-2017-3076Critical 9.8
    flash-plugin: multiple code execution issues fixed in APSB17-17
    adobe · flash player
    EPSS25%
    1 exploit
    Published Jun 13, 2017
  • CVE-2017-3061Critical 9.8
    flash-plugin: multiple code execution issues fixed in APSB17-10
    adobe · flash player
    EPSS25%
    1 exploit
    Published Apr 11, 2017
  • CVE-2017-2885Critical 9.8
    An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58.
    gnome · libsoup
    EPSS23%
    1 exploit
    Published Apr 24, 2018
  • CVE-2017-16885Critical 9.8
    Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices (intended for obtaining information about Internet Usage, Changing Passwords, etc.) allows remote attackers to look for the information without authenticating.
    fiberhome · lm53q1 firmware
    EPSS33%
    2 exploits
    Published Jan 12, 2018
  • CVE-2017-10366Critical 9.8
    Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools.
    oracle · peoplesoft enterprise peopletools
    EPSS43%
    1 exploit
    Published Oct 19, 2017
  • CVE-2016-9899Critical 9.8
    Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption.
    mozilla · firefox
    EPSS21%
    1 exploit
    Published Jun 11, 2018
  • CVE-2016-5108Critical 9.8
    Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted QuickTime IMA file.
    videolan · vlc media player
    EPSS25%
    1 exploit
    Published Jun 8, 2016
  • CVE-2016-4071Critical 9.8
    php: Format string vulnerability in php_snmp_error()
    php · php
    EPSS20%
    1 exploit
    Published Mar 2, 2016
  • CVE-2016-3645Critical 9.8
    Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP5; Symantec…
    symantec · advanced threat protection
    EPSS25%
    1 exploit
    Published Jun 30, 2016
  • CVE-2015-7652Critical 9.3
    flash-plugin: multiple code execution issues fixed in APSB15-28
    adobe · air
    EPSS25%
    1 exploit
    Published Nov 10, 2015
  • CVE-2015-6152Critical 9.3
    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6162.
    microsoft · internet explorer
    EPSS34%
    2 exploits
    Published Dec 9, 2015
  • CVE-2015-2482Critical 9.3
    The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted replace operation with a…
    microsoft · jscript
    EPSS32%
    1 exploit
    Published Oct 13, 2015
  • CVE-2015-2460Critical 9.3
    ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2,…
    microsoft · .net framework
    EPSS31%
    2 exploits
    Published Aug 14, 2015
  • CVE-2015-2459Critical 9.3
    ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary…
    microsoft · windows 10
    EPSS32%
    2 exploits
    Published Aug 14, 2015
  • CVE-2015-2458Critical 9.3
    ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary…
    microsoft · windows 10
    EPSS32%
    2 exploits
    Published Aug 14, 2015
  • CVE-2014-8322Critical 9.8
    Stack-based buffer overflow in the tcp_test function in aireplay-ng.c in Aircrack-ng before 1.2 RC 1 allows remote attackers to execute arbitrary code via a crafted length parameter value.
    aircrack-ng · aircrack-ng
    EPSS24%
    1 exploit
    Published Jan 31, 2020
  • CVE-2014-4650Critical 9.8
    The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character…
    python · python
    EPSS24%
    1 exploit
    Published Feb 20, 2020
  • CVE-2013-3143Critical 9.3
    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3161.
    microsoft · internet explorer
    EPSS33%
    2 exploits
    Published Jul 10, 2013
  • CVE-2013-2573Critical 9.8
    A Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wireless_mft.cgi file in TP-Link IP Cameras TL-SC 3130, TL-SC 3130G, 3171G.
    tp-link · tl-sc 3130g firmware
    EPSS42%
    1 exploit
    Published Jan 29, 2020
  • CVE-2013-2472Critical 10.0
    OpenJDK: Incorrect ShortBandedRaster size checks (2D, 8011253)
    oracle · jre
    EPSS23%
    1 exploit
    Published Jun 18, 2013
  • CVE-2013-2470Critical 10.0
    OpenJDK: ImagingLib byte lookup processing (2D, 8011243)
    oracle · jre
    EPSS23%
    1 exploit
    Published Jun 18, 2013
  • CVE-2012-3807Critical 9.8
    Samsung Kies before 2.5.0.12094_27_11 has arbitrary file execution.
    samsung · kies
    EPSS32%
    1 exploit
    Published Jan 9, 2020
  • CVE-2011-1930Critical 9.8
    In klibc 1.5.20 and 1.5.21, the DHCP options written by ipconfig to /tmp/net-$DEVICE.conf are not properly escaped.
    klibc project · klibc
    EPSS21%
    1 exploit
    Published Nov 14, 2019
  • CVE-2011-0406Critical 10.0
    Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a long request to TCP port 777.
    wellintech · kingview
    EPSS21%
    2 exploits
    Published Jan 11, 2011
  • CVE-2010-3139Critical 9.3
    Untrusted search path vulnerability in Microsoft Windows Progman Group Converter (grpconv.exe) allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse imm.dll that is located in the same folder as a .grp…
    microsoft · windows
    EPSS24%
    2 exploits
    Published Aug 27, 2010
  • CVE-2010-1039Critical 10.0
    Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.31_09 and earlier on HP HP-UX B.11.11, B.11.23, and B.11.31; and SGI IRIX 6.5 allows remote attackers to execute arbitrary code…
    hp · nfs\/oncplus
    EPSS20%
    1 exploit
    Published May 20, 2010
  • CVE-2009-4873Critical 10.0
    Stack-based buffer overflow in the HTTP server in Rhino Software Serv-U Web Client 9.0.0.5 allows remote attackers to cause a denial of service (server crash) or execute arbitrary code via a long Session cookie.
    rhinosoft · serv-u
    EPSS21%
    2 exploits
    Published May 26, 2010
  • CVE-2009-2694Critical 10.0
    The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
    adium · adium
    EPSS20%
    1 exploit
    Published Aug 21, 2009
Showing 251–300 of 725

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.

Figures as of Oct 19, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.