Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Watchlist

The CVE Watchlist, Under Review.

Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.

Synced hourly · figures as of Oct 19, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
499 vulnerabilities · highest score first
  • CVE-2025-2011High 7.5
    Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection via 's' Parameter
    EPSS46%
    1 exploit
    Published May 5, 2025
  • CVE-2023-5149High 8.8
    UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231.
    dlink · dar-7000 firmware
    EPSS21%
    1 exploit
    Published Sep 25, 2023
  • CVE-2023-48292High 8.8
    Run Shell Command allows Cross-Site Request Forgery
    xwiki · admin tools
    EPSS23%
    1 exploit
    Published Nov 20, 2023
  • CVE-2023-2114High 7.2
    The NEX-Forms WordPress plugin before 8.4 does not properly escape the table parameter, which is populated with user input, before concatenating it to an SQL query.
    basixonline · nex-forms
    EPSS45%
    1 exploit
    Published May 8, 2023
  • CVE-2022-4510High 7.8
    Path traversal in binwalk
    microsoft · binwalk
    EPSS22%
    1 exploit
    Published Jan 26, 2023
  • CVE-2022-29298High 7.5
    SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal.
    contec · sv-cpt-mc310 firmware
    EPSS47%
    2 exploits
    Published May 12, 2022
  • CVE-2022-24630High 7.2
    BrowseFiles.php allows a ?cmd=ssh POST request with an ssh_command field that is executed.
    audiocodes · device manager express
    EPSS24%
    1 exploit
    Published May 30, 2023
  • CVE-2022-0651High 7.5
    The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_type parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL…
    veronalabs · wp statistics
    EPSS32%
    1 exploit
    Published Feb 24, 2022
  • CVE-2021-46378High 7.5
    DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through an unauthenticated remote configuration download.
    dlink · dir-850l firmware
    EPSS32%
    2 exploits
    Published Mar 4, 2022
  • CVE-2021-3317High 8.8
    KLog Server through 2.4.1 allows authenticated command injection.
    klogserver · klog server
    EPSS41%
    2 exploits
    Published Jan 26, 2021
  • CVE-2021-26419High 7.5
    Scripting Engine Memory Corruption Vulnerability
    microsoft · internet explorer
    EPSS23%
    1 exploit
    Published Sep 15, 2021
  • CVE-2020-14425High 7.8
    Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API.
    foxitsoftware · foxit reader
    EPSS31%
    2 exploits
    Published Nov 2, 2020
  • CVE-2020-13432High 7.5
    rejetto HFS (aka HTTP File Server) v2.3m Build #300, when virtual files or folders are used, allows remote attackers to trigger an invalid-pointer write access violation via concurrent HTTP requests with a long URI or long HTTP headers.
    rejetto · http file server
    EPSS31%
    2 exploits
    Published Jun 8, 2020
  • CVE-2020-12608High 7.8
    There are insecure file permissions for %PROGRAMDATA%\SolarWinds MSP\SolarWinds.MSP.CacheService\config\.
    solarwinds · managed service provider patch management engine
    EPSS22%
    3 exploits
    Published May 7, 2020
  • CVE-2019-18217High 7.5
    ProFTPD before 1.3.6b and 1.3.7rc before 1.3.7rc2 allows remote unauthenticated denial-of-service due to incorrect handling of overly long commands because main.c in a child process enters an infinite loop.
    proftpd · proftpd
    EPSS20%
    1 exploit
    Published Oct 21, 2019
  • CVE-2019-13358High 7.5
    lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying operating system.
    opencats · opencats
    EPSS24%
    2 exploits
    Published Jul 5, 2019
  • CVE-2018-2791High 8.2
    Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites.
    oracle · webcenter sites
    EPSS38%
    1 exploit
    Published Apr 18, 2018
  • CVE-2018-20470High 7.5
    A directory traversal (arbitrary file access) vulnerability exists in the web reports module.
    sahipro · sahi pro
    EPSS46%
    2 exploits
    Published Jun 17, 2019
  • CVE-2018-15535High 7.5
    /filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize get_file sequences such as ".." that can resolve to a location that is…
    tecrail · responsive filemanager
    EPSS45%
    2 exploits
    Published Aug 24, 2018
  • CVE-2018-12589High 7.8
    Polaris Office 2017 8.1 allows attackers to execute arbitrary code via a Trojan horse puiframeworkproresenu.dll file in the current working directory.
    polarisoffice · polaris office 2017
    EPSS20%
    3 exploits
    Published Jun 28, 2018
  • CVE-2018-12453High 7.5
    Type confusion in the xgroupCommand function in t_stream.c in redis-server in Redis before 5.0 allows remote attackers to cause denial-of-service via an XGROUP command in which the key is not a stream.
    redislabs · redis
    EPSS24%
    3 exploits
    Published Jun 16, 2018
  • CVE-2016-7982High 7.5
    Directory traversal vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to enumerate the files on the system via the var_url parameter in a valider_xml action.
    spip · spip
    EPSS21%
    1 exploit
    Published Jan 18, 2017
  • CVE-2016-6808High 8.1
    Buffer overflow in Apache Tomcat Connectors (mod_jk) before 1.2.42.
    apache · tomcat jk connector
    EPSS23%
    1 exploit
    Published Oct 6, 2016
  • CVE-2016-6272High 7.5
    XPath injection vulnerability in Epic MyChart allows remote attackers to access contents of an XML document containing static display strings, such as field labels, via the topic parameter to help.asp.
    epic · mychart
    EPSS21%
    3 exploits
    Published Feb 20, 2018
  • CVE-2016-2819High 8.8
    Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via foreign-context HTML5 fragments, as demonstrated by fragments within an SVG element.
    mozilla · firefox
    EPSS24%
    1 exploit
    Published Jun 13, 2016
  • CVE-2015-8636High 8.8
    flash-plugin: multiple code execution issues fixed in APSB16-01
    adobe · air
    EPSS21%
    1 exploit
    Published Dec 28, 2015
  • CVE-2014-8147High 7.5
    The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause…
    icu-project · international components for unicode
    EPSS24%
    1 exploit
    Published Sep 13, 2021
  • CVE-2014-8146High 7.5
    The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 does not properly track directionally isolated pieces of text, which allows remote attackers to cause a…
    icu-project · international components for unicode
    EPSS25%
    1 exploit
    Published Sep 13, 2021
  • CVE-2013-2569High 7.5
    A Security Bypass vulnerability exists in Zavio IP Cameras through 1.6.3 because the RTSP protocol authentication is disabled by default, which could let a malicious user obtain unauthorized access to the live video stream.
    zavio · f3105 firmware
    EPSS31%
    1 exploit
    Published Jan 29, 2020
  • CVE-2012-0207High 7.5
    kernel: igmp: Avoid zero delay when receiving odd mixture of IGMP queries
    linux · linux kernel
    EPSS20%
    1 exploit
    Published Jan 10, 2012
  • CVE-2011-4367High 7.5
    Apache MyFaces Vulnerable to Path Traversal
    apache · myfaces
    EPSS34%
    1 exploit
    Published May 13, 2022
  • CVE-2010-1717High 7.5
    Directory traversal vulnerability in the iF surfALERT (com_if_surfalert) component 1.2 for Joomla!
    if surfalert project · if surfalert
    EPSS22%
    2 exploits
    Published May 4, 2010
  • CVE-2009-1547High 8.8
    Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream header that triggers memory corruption, aka "Data Stream Header Corruption Vulnerability."
    microsoft · internet explorer
    EPSS37%
    2 exploits
    Published Oct 14, 2009
  • CVE-2008-1721High 7.5
    python: integer signedness error in the zlib extension module
    python · python
    EPSS23%
    1 exploit
    Published Apr 9, 2008
  • CVE-2007-1306High 7.8
    Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending a Session Initiation Protocol (SIP) packet without a URI and SIP-version header, which results in a NULL pointer dereference.
    digium · asterisk
    EPSS21%
    1 exploit
    Published Mar 7, 2007
  • CVE-2006-5085High 7.5
    Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the nom_blog parameter, which is injected into include/variables.php.
    pixel motion · pixel motion blog
    EPSS47%
    1 exploit
    Published Sep 28, 2006
  • CVE-2006-2389High 9.3
    Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with a malformed property that triggers memory corruption related to record lengths,…
    microsoft · office
    EPSS39%
    1 exploit
    Published Jul 11, 2006
  • CVE-2004-0835High 7.5
    MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.
    mysql · mysql
    EPSS22%
    1 exploit
    Published Mar 23, 2004
  • CVE-2004-0110High 7.5
    Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL.
    xmlsoft · libxml
    EPSS24%
    1 exploit
    Published Mar 15, 2004
  • CVE-2003-0659High 7.2
    Buffer overflow in a function in User32.dll on Windows NT through Server 2003 allows local users to execute arbitrary code via long (1) LB_DIR messages to ListBox or (2) CB_DIR messages to ComboBox controls in a privileged application.
    microsoft · windows nt
    EPSS43%
    2 exploits
    Published Nov 17, 2003
  • CVE-2003-0015High 7.5
    Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.
    cvs · cvs
    EPSS24%
    1 exploit
    Published Feb 7, 2003
  • CVE-2001-1021High 7.5
    Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDTM, (3) MLST, (4) MKD, (5) RMD, (6) RNFR, (7) RNTO, (8) SIZE, (9) STAT, (10) XMKD, or (11) XRMD.
    progress · ws ftp server
    EPSS42%
    2 exploits
    Published Jul 26, 2001
  • CVE-2024-5585High 8.8
    In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spaces.
    php · php
    EPSS29%
    1 exploit
    Published Jun 7, 2024
  • CVE-2023-26609High 7.2
    ABUS TVIP 20000-21150 devices allows remote attackers to execute arbitrary code via shell metacharacters in the /cgi-bin/mft/wireless_mft ap field.
    abus · tvip 20000-21150 firmware
    EPSS39%
    2 exploits
    Published Feb 26, 2023
  • CVE-2021-46367High 7.2
    RiteCMS version 3.1.0 and below suffers from a remote code execution vulnerability in the admin panel.
    ritecms · ritecms
    EPSS30%
    2 exploits
    Published Apr 8, 2022
  • CVE-2021-43405High 8.8
    The fax_extension may have risky characters (it is not constrained to be numeric).
    fusionpbx · fusionpbx
    EPSS36%
    2 exploits
    Published Nov 5, 2021
  • CVE-2021-40345High 7.2
    In the Manage Dashlets section of the Admin panel, an administrator can upload ZIP files.
    nagios · nagios xi
    EPSS23%
    1 exploit
    Published Oct 27, 2021
  • CVE-2021-35380High 7.5
    A Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download…
    solari · termtalk server
    EPSS37%
    1 exploit
    Published Feb 15, 2022
  • CVE-2021-25162High 8.1
    A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant…
    arubanetworks · instant
    EPSS26%
    2 exploits
    Published Mar 29, 2021
  • CVE-2020-9375High 7.5
    TP-Link Archer C50 V3 devices before Build 200318 Rel.
    tp-link · archer c50
    EPSS27%
    2 exploits
    Published Mar 25, 2020
Showing 251–300 of 499

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.

Figures as of Oct 19, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.