Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Watchlist

The CVE Watchlist, Under Review.

Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.

Synced hourly · figures as of Oct 19, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
1,409 vulnerabilities · highest score first
  • CVE-2015-2456Critical 9.3
    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1,…
    microsoft · live meeting
    EPSS36%
    2 exploits
    Published Aug 14, 2015
  • CVE-2014-6436Critical 9.8
    Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices improperly manage sessions, which allows remote attackers to bypass authentication in opportunistic circumstances and execute arbitrary commands with administrator privileges by leveraging an existing web portal login.
    aztech · adsl dsl5018en \(1t1r\) firmware
    EPSS42%
    2 exploits
    Published Jan 12, 2018
  • CVE-2014-1912High 7.5
    Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.
    python · python
    EPSS28%
    2 exploits
    Published Mar 1, 2014
  • CVE-2014-1766Critical 9.3
    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrated by Sebastian Apelt and Andreas Schmidt during a Pwn2Own competition at CanSecWest 2014.
    microsoft · internet explorer
    EPSS33%
    1 exploit
    Published Apr 27, 2014
  • CVE-2011-5046Critical 9.3
    The Graphics Device Interface (GDI) in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which…
    microsoft · windows 7
    EPSS45%
    2 exploits
    Published Dec 30, 2011
  • CVE-2009-1699High 7.5
    The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle XML external entities, which allows remote attackers to read arbitrary files via a crafted DTD, as…
    apple · safari
    EPSS29%
    2 exploits
    Published Jun 10, 2009
  • CVE-2008-0387High 7.8
    Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via crafted (1) op_receive, (2) op_start, (3) op_start_and_receive, (4) op_send, (5) op_start_and_send,…
    firebirdsql · firebird
    EPSS46%
    1 exploit
    Published Jan 29, 2008
  • CVE-2007-3410Critical 9.3
    RealPlayer/HelixPlayer buffer overflow
    realnetworks · helix player
    EPSS36%
    1 exploit
    Published Jun 26, 2007
  • CVE-2005-0048High 7.5
    Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IP packets with malformed options, aka the "IP Validation Vulnerability."
    microsoft · windows xp
    EPSS39%
    3 exploits
    Published May 2, 2005
  • CVE-2003-0150Critical 9.0
    MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.
    oracle · mysql
    EPSS45%
    1 exploit
    Published Mar 8, 2003
  • CVE-2003-0107High 7.5
    Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.
    zlib · zlib
    EPSS26%
    2 exploits
    Published Mar 7, 2003
  • CVE-2026-98260High 7.8
    exec: Cleanup POSIX timers right after de_thread()
    linux · linux kernel
    EPSS0.1%
    2 exploits
    Published Oct 6, 2026
  • CVE-2026-92392High 8.1
    HTTP/2 upload Use-After-Free
    microsoft · azl3 mysql 8.0.46-2
    EPSS0.7%
    1 exploit
    Published Oct 14, 2026
  • CVE-2026-61732Critical 10.0
    Versions prior to 1.1.17 wrap web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals.
    EPSS1.2%
    2 exploits
    Published Sep 24, 2026
  • CVE-2026-104736Critical 9.8
    LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter
    EPSS0.4%
    2 exploits
    Published Oct 16, 2026
  • CVE-2026-103849Critical 10.0
    Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
    EPSS0.8%
    1 exploit
    Published Oct 13, 2026
  • CVE-2025-29306Critical 9.8
    An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component.
    foxcms · foxcms
    EPSS47%
    2 exploits
    Published Mar 27, 2025
  • CVE-2024-42640Critical 9.3
    angular-base64-upload vulnerable to unauthenticated remote code execution
    EPSS40%
    2 exploits
    Published Oct 11, 2024
  • CVE-2024-24724Critical 9.8
    Gibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template Injection leading to Remote Code Execution because input is passed to the Twig template engine (messengerSettings.php) without sanitization.
    gibbonedu · gibbon
    EPSS26%
    2 exploits
    Published Apr 3, 2024
  • CVE-2023-5150High 8.8
    UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical has been found in D-Link DAR-7000 and DAR-8000 up to 20151231.
    dlink · dar-7000 firmware
    EPSS23%
    2 exploits
    Published Sep 25, 2023
  • CVE-2023-4168High 7.5
    It has been classified as problematic.
    templatecookie · adlisting
    EPSS46%
    2 exploits
    Published Aug 5, 2023
  • CVE-2023-24709High 7.5
    An issue found in Paradox Security Systems IPR512 allows attackers to cause a denial of service via the login.html and login.xml parameters.
    paradox · ipr512 firmware
    EPSS44%
    3 exploits
    Published Mar 21, 2023
  • CVE-2023-22496Critical 9.8
    An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent.
    netdata · netdata
    EPSS36%
    1 exploit
    Published Jan 14, 2023
  • CVE-2022-37130Critical 9.8
    In D-Link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced into v10 by snprintf, and the system will be executed, resulting in a command injection vulnerability
    dlink · dir-816 firmware
    EPSS27%
    1 exploit
    Published Sep 1, 2022
  • CVE-2022-31854High 7.2
    Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel.
    codologic · codoforum
    EPSS32%
    3 exploits
    Published Jul 7, 2022
  • CVE-2022-31161Critical 9.8
    Prior to version 6.1.1.0, the system command can be run remotely via the subprocess_execute function without processing the inputs received from the user in the /app/options.py file.
    roxy-wi · roxy-wi
    EPSS29%
    1 exploit
    Published Jul 15, 2022
  • CVE-2022-31101High 8.8
    BlockWishList SQL Injection vulnerability
    prestashop · blockwishlist
    EPSS23%
    2 exploits
    Published Jun 25, 2022
  • CVE-2022-25359Critical 9.1
    On ICL ScadaFlex II SCADA Controller SC-1 and SC-2 1.03.07 devices, unauthenticated remote attackers can overwrite, delete, or create files.
    iclinks · scadaflex ii firmware
    EPSS37%
    2 exploits
    Published Feb 26, 2022
  • CVE-2022-24627Critical 9.8
    It is an unauthenticated SQL injection in the p parameter of the process_login.php login form.
    audiocodes · device manager express
    EPSS26%
    1 exploit
    Published May 30, 2023
  • CVE-2022-23513Medium 5.3
    In case of an attack, the threat actor will obtain the ability to perform an unauthorized query for blocked domains on queryads endpoint.
    pi-hole · adminlte
    EPSS41%
    3 exploits
    Published Dec 22, 2022
  • CVE-2021-39608High 7.2
    Remote Code Execution (RCE) vulnerabilty exists in FlatCore-CMS 2.0.7 via the upload addon plugin, which could let a remote malicious user exeuct arbitrary php code.
    flatcore · flatcore-cms
    EPSS46%
    3 exploits
    Published Aug 23, 2021
  • CVE-2021-37589High 7.5
    Virtua Cobranca before 12R allows SQL Injection on the login page.
    virtuasoftware · cobranca
    EPSS33%
    3 exploits
    Published Jun 7, 2022
  • CVE-2021-3120Critical 9.8
    An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote code execution on the operating system in the security context of the web server.
    yithemes · yith woocommerce gift cards
    EPSS37%
    Ransomware1 exploit3 actors
    Published Feb 22, 2021
  • CVE-2021-26709Critical 9.8
    D-Link DSL-320B-D1 devices through EU_1.25 are prone to multiple Stack-Based Buffer Overflows that allow unauthenticated remote attackers to take over a device via the login.xgi user and pass parameters.
    d-link · dsl-320b-d1
    EPSS40%
    1 exploit
    Published Apr 7, 2021
  • CVE-2021-24750High 8.8
    WP Visitor Statistics (Real Time Traffic) <= 4.7 - SQL Injection
    codepress · visitor statistics
    EPSS38%
    2 exploits
    Published Dec 21, 2021
  • CVE-2020-7237High 8.8
    Cacti 1.2.8 allows Remote Code Execution (by privileged users) via shell metacharacters in the Performance Boost Debug Log field of poller_automation.php.
    cacti · cacti
    EPSS37%
    1 exploit
    Published Jan 20, 2020
  • CVE-2020-5504High 8.8
    phpMyAdmin SQL injection in user accounts page
    phpmyadmin · phpmyadmin
    EPSS39%
    1 exploit
    Published May 24, 2022
  • CVE-2020-29607High 7.2
    A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access in the host through the "manage files" functionality, which may result in remote code execution.
    pluck-cms · pluck
    EPSS33%
    4 exploits
    Published Dec 16, 2020
  • CVE-2019-18952Critical 9.8
    SibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arbitrary file upload.
    sibsoft · xfilesharing
    EPSS45%
    2 exploits
    Published Nov 13, 2019
  • CVE-2018-9118High 7.5
    exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a ..
    99robots · wp background takeover advertisements
    EPSS46%
    2 exploits
    Published Apr 12, 2018
  • CVE-2018-5262Critical 9.8
    A stack-based buffer overflow in Flexense DiskBoss 8.8.16 and earlier allows unauthenticated remote attackers to execute arbitrary code in the context of a highly privileged account.
    flexense · diskboss
    EPSS39%
    2 exploits
    Published Jan 12, 2018
  • CVE-2018-20525Critical 9.1
    Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.
    roxyfileman · roxy fileman
    EPSS22%
    4 exploits
    Published Mar 21, 2019
  • CVE-2018-15839Critical 9.8
    D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header.
    dlink · dir-615 firmware
    EPSS45%
    1 exploit
    Published Aug 28, 2018
  • CVE-2018-15152Critical 9.1
    Authentication bypass vulnerability in portal/account/register.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker to access (1) portal/add_edit_event_user.php, (2) portal/find_appt_popup_user.php, (3) portal/get_allergies.php, (4) portal/get_amendments.php, (5)…
    open-emr · openemr
    EPSS26%
    3 exploits
    Published Aug 15, 2018
  • CVE-2018-1000811High 8.8
    bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can result in Remote Command Execution.
    bludit · bludit
    EPSS48%
    2 exploits
    Published Dec 20, 2018
  • CVE-2018-0866High 7.5
    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles…
    microsoft · internet explorer
    EPSS44%
    1 exploit
    Published Feb 14, 2018
  • CVE-2017-6517Critical 9.8
    Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system.
    microsoft · skype
    EPSS46%
    1 exploit
    Published Mar 23, 2017
  • CVE-2017-6359Critical 9.8
    QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and execute arbitrary commands via unspecified vectors.
    qnap · qts
    EPSS27%
    1 exploit
    Published Mar 23, 2017
  • CVE-2017-5972High 7.5
    The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows remote attackers to cause a denial of service (CPU consumption) by sending many TCP SYN packets, as demonstrated by an…
    linux · linux kernel
    EPSS24%
    2 exploits
    Published Feb 14, 2017
  • CVE-2017-5586Critical 9.8
    OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the BeanShell (bsh) and Apache Commons Collections (ACC) libraries.
    opentext · documentum d2
    EPSS25%
    3 exploits
    Published Feb 22, 2017
Showing 301–350 of 1,409

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.

Figures as of Oct 19, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.