Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Watchlist

The CVE Watchlist, Under Review.

Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.

Synced hourly · figures as of Oct 19, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
498 vulnerabilities · highest score first
  • CVE-2020-35576High 8.8
    A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 (JP) with firmware versions prior to 201216 allows authenticated users to execute arbitrary code as root via shell metacharacters, a different vulnerability than CVE-2018-12577.
    tp-link · tl-wr841n firmware
    EPSS42%
    1 exploit
    Published Jan 26, 2021
  • CVE-2019-12593High 7.5
    IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail/calendar/minimizer/index.php?style=..%5c directory traversal.
    icewarp · mail server
    EPSS41%
    2 exploits
    Published Jun 3, 2019
  • CVE-2019-0572High 7.8
    An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.
    microsoft · windows 10
    EPSS25%
    2 exploits
    Published Jan 8, 2019
  • CVE-2018-8269High 7.5
    Denial of service in ASP.NET Core
    microsoft · microsoft.data.odata
    EPSS27%
    1 exploit
    Published Oct 16, 2018
  • CVE-2018-7583High 7.5
    Proxy.exe in DualDesk 20 allows Remote Denial Of Service (daemon crash) via a long string to TCP port 5500.
    advantig · dualdesk
    EPSS38%
    2 exploits
    Published Mar 3, 2018
  • CVE-2018-16288High 8.6
    LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs.
    lg · supersign cms
    EPSS36%
    2 exploits
    Published Sep 14, 2018
  • CVE-2016-3386High 7.5
    ChakraCore RCE Vulnerability
    microsoft · edge
    EPSS41%
    1 exploit
    Published May 14, 2022
  • CVE-2016-2209High 7.3
    Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP5; Symantec Endpoint…
    symantec · advanced threat protection
    EPSS21%
    1 exploit
    Published Jun 30, 2016
  • CVE-2016-0145High 8.8
    The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold and 1511; Office 2007 SP3 and 2010 SP2; Word Viewer; .NET Framework 3.0 SP2, 3.5, and 3.5.1; Skype…
    microsoft · live meeting
    EPSS43%
    1 exploit
    Published Apr 12, 2016
  • CVE-2016-0016High 7.8
    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted…
    microsoft · windows 10
    EPSS30%
    2 exploits
    Published Jan 13, 2016
  • CVE-2015-2562High 7.5
    Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla!
    web-dorado · ecommerce wd
    EPSS39%
    2 exploits
    Published Mar 20, 2015
  • CVE-2014-2962High 7.8
    Absolute path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware before 1.00.08 allows remote attackers to read arbitrary files via a full pathname in the getpage parameter.
    belkin · n150 f9k1009
    EPSS47%
    1 exploit
    Published Jun 19, 2014
  • CVE-2010-3714High 7.1
    TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism
    typo3 · typo3
    EPSS24%
    1 exploit
    Published May 17, 2022
  • CVE-2006-5379High 7.5
    The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be…
    nvidia · binary graphics driver
    EPSS27%
    1 exploit
    Published Oct 18, 2006
  • CVE-2006-0058High 7.6
    Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.
    sendmail · sendmail
    EPSS29%
    1 exploit
    Published Mar 22, 2006
  • CVE-2005-2340High 7.5
    Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a crafted (1) QuickTime Image File (QTIF), (2) PICT, or (3) JPEG format image with a long data field.
    apple · quicktime
    EPSS26%
    1 exploit
    Published Dec 31, 2005
  • CVE-2005-1344High 7.5
    Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument.
    apache · http server
    EPSS29%
    2 exploits
    Published May 2, 2005
  • CVE-2005-0416High 7.5
    The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow.
    microsoft · windows 2000
    EPSS41%
    2 exploits
    Published Apr 27, 2005
  • CVE-2002-0764High 7.5
    Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php that modifies the PHORUM[settings_dir] variable to point to a directory that contains a PHP file with the commands.
    phorum · phorum
    EPSS38%
    1 exploit
    Published Aug 12, 2002
  • CVE-2000-0305High 7.8
    Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability.
    microsoft · terminal server
    EPSS38%
    1 exploit
    Published May 19, 2000
  • CVE-2026-98180High 7.1
    drm/msm: RCU-free the scheduler-containing ring and VM objects
    linux · linux kernel
    EPSS0.1%
    1 exploit
    Published Oct 6, 2026
  • CVE-2025-58180High 7.5
    OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload
    octoprint · octoprint
    EPSS21%
    1 exploit
    Published Sep 9, 2025
  • CVE-2024-0265High 8.8
    It has been rated as critical.
    oretnom23 · clinic queuing system
    EPSS21%
    1 exploit
    Published Jan 7, 2024
  • CVE-2022-46770High 7.5
    qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of service (CPU consumption and loss of forwarding) via a crafted multicast UDP packet (IP address range of 224.0.0.0 through 239.255.255.255).
    linuxfoundation · mirage firewall
    EPSS22%
    1 exploit
    Published Dec 7, 2022
  • CVE-2022-23854High 7.5
    AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user with network access to read files on the system outside of the secure gateway web server.
    aveva · intouch access anywhere
    EPSS47%
    1 exploit
    Published Dec 23, 2022
  • CVE-2021-28143High 8.0
    /jsonrpc on D-Link DIR-841 3.03 and 3.04 devices allows authenticated command injection via ping, ping6, or traceroute (under System Tools).
    dlink · dir-841 firmware
    EPSS47%
    1 exploit
    Published Mar 11, 2021
  • CVE-2020-24219High 7.5
    An issue was discovered on URayTech IPTV/H.264/H.265 video encoders through 1.97.
    szuray · iptv\/h.264 video encoder firmware
    EPSS24%
    2 exploits
    Published Oct 6, 2020
  • CVE-2020-11107High 8.8
    An unprivileged user can change a .exe configuration in xampp-contol.ini for all users (including admins) to enable arbitrary command execution.
    apachefriends · xampp
    EPSS22%
    2 exploits
    Published Apr 2, 2020
  • CVE-2019-9041High 7.2
    In the inc/zzz_template.php file, the parserIfLabel() function's filtering is not strict, resulting in PHP code execution, as demonstrated by the if:assert substring.
    zzzcms · zzzphp
    EPSS31%
    2 exploits
    Published Feb 23, 2019
  • CVE-2019-0573High 7.8
    An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.
    microsoft · windows 10
    EPSS20%
    2 exploits
    Published Jan 8, 2019
  • CVE-2017-9946High 7.5
    An attacker with network access to the integrated web server (80/tcp and 443/tcp) could bypass the authentication and download sensitive information from the device.
    siemens · apogee pxc firmware
    EPSS25%
    1 exploit
    Published Oct 23, 2017
  • CVE-2017-17058High 7.5
    The WooCommerce plugin through 3.x for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/woocommerce/templates/emails/plain/ URI, which accesses a parent directory.
    automattic · woocommerce
    EPSS24%
    1 exploit
    Published Nov 29, 2017
  • CVE-2017-0781High 8.8
    A remote code execution vulnerability in the Android system (bluetooth).
    google · android
    EPSS23%
    2 exploits
    Published Sep 14, 2017
  • CVE-2017-0283High 8.8
    Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016, Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office Word Viewer, Microsoft Lync 2013…
    microsoft · lync
    EPSS39%
    1 exploit
    Published Jun 14, 2017
  • CVE-2017-0202High 7.5
    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory.
    microsoft · internet explorer
    EPSS46%
    1 exploit
    Published Apr 12, 2017
  • CVE-2017-0084High 8.8
    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web…
    microsoft · windows 10
    EPSS37%
    1 exploit
    Published Mar 16, 2017
  • CVE-2016-7054High 7.5
    In OpenSSL 1.1.0 before 1.1.0c, TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack by corrupting larger payloads.
    openssl · openssl
    EPSS32%
    1 exploit
    Published May 4, 2017
  • CVE-2016-5639High 7.5
    Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to read arbitrary files via a ..
    crestron · airmedia am-100 firmware
    EPSS21%
    1 exploit
    Published Aug 2, 2016
  • CVE-2016-3313High 7.8
    Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory Corruption Vulnerability."
    microsoft · office
    EPSS50%
    1 exploit
    Published Aug 9, 2016
  • CVE-2016-0170High 8.8
    GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted document, aka "Windows Graphics…
    microsoft · windows 10
    EPSS49%
    1 exploit
    Published May 10, 2016
  • CVE-2015-5468High 7.5
    WP eCommerce Shop Styling < 2.6 - Directory Traversal
    wpshopstyling · wp e-commerce shop styling
    EPSS24%
    1 exploit
    Published Jul 4, 2015
  • CVE-2015-3783High 7.5
    SceneKit in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.
    apple · mac os x
    EPSS36%
    1 exploit
    Published Aug 16, 2015
  • CVE-2015-2177High 7.5
    Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via crafted packets on (1) TCP port 102 or (2) Profibus.
    siemens · simatic s7-300 cpu
    EPSS34%
    1 exploit
    Published Mar 7, 2015
  • CVE-2013-2088High 7.1
    contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit permissions to execute arbitrary commands via shell metacharacters in a filename.
    apache · subversion
    EPSS31%
    1 exploit
    Published Jul 31, 2013
  • CVE-2007-2293High 7.6
    Multiple stack-based buffer overflows in the process_sdp function in chan_sip.c of the SIP channel T.38 SDP parser in Asterisk before 1.4.3 allow remote attackers to execute arbitrary code via a long (1) T38FaxRateManagement or (2) T38FaxUdpEC SDP parameter in an SIP message, as…
    asterisk · asterisk
    EPSS24%
    2 exploits
    Published Apr 26, 2007
  • CVE-2006-3124High 7.5
    Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted HTTP headers.
    streamripper · streamripper
    EPSS20%
    2 exploits
    Published Aug 26, 2006
  • CVE-2006-2842High 7.5
    PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the plugins array parameter.
    squirrelmail · squirrelmail
    EPSS47%
    1 exploit
    Published Jun 1, 2006
  • CVE-2006-2444High 7.8
    The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service (crash) via unspecified remote attack vectors that cause failures in snmp_trap_decode that trigger (1) frees of random memory or (2) frees…
    linux · linux kernel
    EPSS22%
    1 exploit
    Published May 20, 2006
  • CVE-2005-3792High 7.5
    Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 with patch 3.1, allows remote attackers to execute arbitrary SQL commands, as demonstrated via the query parameter in a stories type.
    francisco burzi · php-nuke
    EPSS44%
    1 exploit
    Published Nov 24, 2005
  • CVE-2005-2842High 7.5
    Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary code via the username.
    dameware development · mini remote control server
    EPSS21%
    2 exploits
    Published Sep 8, 2005
Showing 301–350 of 498

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.

Figures as of Oct 19, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.