Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Watchlist

The CVE Watchlist, Under Review.

Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.

Synced hourly · figures as of Oct 20, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
503 vulnerabilities · highest score first
  • CVE-2021-44595High 8.8
    Wondershare Dr.
    wondershare · dr.fone
    EPSS21%
    2 exploits
    Published Apr 29, 2022
  • CVE-2020-8958High 7.2
    Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the boaform/admin/formPing Dest IP Address field.
    gpononu · 1ge\+3fe\+wifi onu v2804rgw firmware
    EPSS46%
    1 exploit
    Published Jul 15, 2020
  • CVE-2020-23972High 7.5
    In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application and can also upload files which due to issues of unrestricted file uploads which can be bypassed by changing the content-type and name file…
    gmapfp · gmapfp
    EPSS31%
    1 exploit
    Published Aug 27, 2020
  • CVE-2016-0121High 8.8
    The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted OpenType…
    microsoft · windows 10
    EPSS39%
    1 exploit
    Published Mar 9, 2016
  • CVE-2014-7864High 7.5
    Multiple SQL injection vulnerabilities in the FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine OpManager 8 through 11.5 build 11400 and IT360 10.5 and earlier allow remote attackers and remote authenticated users to execute arbitrary SQL commands via the (1)…
    zohocorp · manageengine opmanager
    EPSS23%
    2 exploits
    Published Feb 4, 2015
  • CVE-2013-4878High 7.5
    The default configuration of Parallels Plesk Panel 9.0.x and 9.2.x on UNIX, and Small Business Panel 10.x on UNIX, has an improper ScriptAlias directive for phppath, which makes it easier for remote attackers to execute arbitrary code via a crafted request, a different…
    parallels · parallels plesk panel
    EPSS31%
    1 exploit
    Published Jul 18, 2013
  • CVE-2013-1606High 7.5
    Buffer overflow in the ubnt-streamer RTSP service on the Ubiquiti UBNT AirCam with airVision firmware before 1.1.6 allows remote attackers to execute arbitrary code via a long rtsp: URI in a DESCRIBE request.
    ui · aircam
    EPSS23%
    2 exploits
    Published Jul 18, 2013
  • CVE-2013-0090High 8.8
    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CCaret Use After Free Vulnerability."
    microsoft · internet explorer
    EPSS38%
    1 exploit
    Published Mar 12, 2013
  • CVE-2012-5469High 7.3
    Portable phpMyAdmin <= 1.3.0 - Authentication Bypass
    phpmyadmin · phpmyadmin
    EPSS24%
    1 exploit
    Published Jul 31, 2014
  • CVE-2012-3456High 7.5
    Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted…
    calligra · calligra
    EPSS20%
    1 exploit
    Published Aug 20, 2012
  • CVE-2012-1226High 7.5
    Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly execute arbitrary code via a ..
    dolibarr · dolibarr erp\/crm
    EPSS24%
    2 exploits
    Published Feb 21, 2012
  • CVE-2010-2632High 7.8
    Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability.
    sun · sunos
    EPSS35%
    1 exploit
    Published Jan 19, 2011
  • CVE-2006-6379High 7.5
    Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier, ARCserve Backup 9.01 up to 11.1, Enterprise Backup 10.5, and CA Server Protection Suite r2, allows remote attackers to execute arbitrary code via…
    broadcom · server protection suite
    EPSS21%
    1 exploit
    Published Dec 10, 2006
  • CVE-2006-0143High 7.5
    Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of service (crash) via a WMF file containing (1) ExtCreateRegion or (2) ExtEscape function calls with arguments with inconsistent lengths.
    microsoft · windows 2000
    EPSS31%
    1 exploit
    Published Jan 9, 2006
  • CVE-2005-3862High 7.5
    Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives.
    unalz · unalz
    EPSS20%
    1 exploit
    Published Nov 29, 2005
  • CVE-2005-2871High 7.5
    Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and earlier, and Netscape 8.0.3.3 and 7.2, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a hostname with all "soft" hyphens (character…
    mozilla · firefox
    EPSS21%
    1 exploit
    Published Sep 9, 2005
  • CVE-2005-1989High 7.5
    Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly execute code when browsing from a web site to a web folder view using WebDAV, aka "Web Folder Behaviors Cross-Domain Vulnerability".
    microsoft · internet explorer
    EPSS46%
    1 exploit
    Published Aug 10, 2005
  • CVE-2005-0058High 7.5
    Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to elevate privileges or execute arbitrary code via a crafted message.
    microsoft · windows 2000
    EPSS46%
    1 exploit
    Published Aug 10, 2005
  • CVE-2004-1104High 7.5
    Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page that contains a BASE element that points to the legitimate site, followed by an anchor (a) element with an empty "href" attribute,…
    microsoft · ie
    EPSS35%
    1 exploit
    Published Dec 31, 2004
  • CVE-2003-0469High 7.5
    Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via cut-and-paste operation, as demonstrated in Internet Explorer 5.0 using a long "align"…
    microsoft · windows 2000
    EPSS45%
    1 exploit
    Published Aug 7, 2003
  • CVE-2003-0228High 7.5
    Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary code via a skins file with a URL containing hex-encoded backslash characters (%5C) that causes an executable to be placed…
    microsoft · windows media player
    EPSS46%
    1 exploit
    Published May 27, 2003
  • CVE-2002-0693High 7.5
    Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink…
    microsoft · windows 2000
    EPSS31%
    1 exploit
    Published Oct 10, 2002
  • CVE-2001-0932High 7.5
    Buffer overflow in Cooolsoft PowerFTP Server 2.03 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long command.
    cooolsoft · powerftp
    EPSS23%
    2 exploits
    Published Nov 28, 2001
  • CVE-1999-0725High 7.1
    When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a.
    microsoft · internet information server
    EPSS25%
    1 exploit
    Published Aug 19, 1999
  • CVE-2026-96656High 8.6
    Plex Media Server arbitrary file write
    plex · media server
    EPSS0.4%
    1 exploit
    Published Sep 23, 2026
  • CVE-2026-80344High 8.2
    Server-Side Request Forgery (SSRF) vulnerability in Apache Camel AS2 component.
    Published Oct 19, 2026
  • CVE-2026-79983High 7.4
    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel FTP component.
    Published Oct 19, 2026
  • CVE-2025-67303High 7.5
    An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data.
    comfy · comfyui-manager
    EPSS1.4%
    1 exploit
    Published Jan 5, 2026
  • CVE-2023-46865High 7.2
    /api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an image/png IDAT chunk of a Company Logo image.
    craterapp · crater
    EPSS20%
    1 exploit
    Published Oct 29, 2023
  • CVE-2023-36144High 7.5
    An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, exposing critical information about the device configuration.
    intelbras · sg 2404 mr
    EPSS37%
    1 exploit
    Published Jun 30, 2023
  • CVE-2022-30079High 8.8
    Command injection vulnerability was discovered in Netgear R6200 v2 firmware through R6200v2-V1.0.3.12 via binary /sbin/acos_service that could allow remote authenticated attackers the ability to modify values in the vulnerable parameter.
    netgear · r6200
    EPSS25%
    1 exploit
    Published Sep 8, 2022
  • CVE-2022-28096High 7.2
    Skycaiji v2.4 was discovered to contain a remote code execution (RCE) vulnerability via /SkycaijiApp/admin/controller/Develop.php.
    skycaiji · skycaiji
    EPSS21%
    1 exploit
    Published May 4, 2022
  • CVE-2022-27474High 7.2
    SuiteCRM v7.11.23 was discovered to allow remote code execution via a crafted payload injected into the FirstName text field.
    salesagility · suitecrm
    EPSS23%
    1 exploit
    Published Apr 15, 2022
  • CVE-2021-34805High 7.5
    For each URL request, it accesses the corresponding .fau file on the operating system without preventing %2e%2e%5c directory traversal.
    land-software · faust iserver
    EPSS27%
    1 exploit
    Published Jan 31, 2022
  • CVE-2020-11579High 7.5
    installer/test-connection.php (part of the installation process) allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled.
    chadhaajay · phpkb
    EPSS27%
    1 exploit
    Published Sep 3, 2020
  • CVE-2019-9757High 7.5
    Sending an SVG containing an XXE payload to the endpoint visualization-exportImage.view or visualization-exportPDF.view allows local files to be read.
    labkey · labkey server
    EPSS37%
    1 exploit
    Published Oct 29, 2019
  • CVE-2019-16893High 7.5
    The Web Management of TP-Link TP-SG105E V4 1.0.0 Build 20181120 devices allows an unauthenticated attacker to reboot the device via a reboot.cgi request.
    tp-link · tp-sg105e firmware
    EPSS38%
    1 exploit
    Published Feb 3, 2020
  • CVE-2019-13063High 7.5
    Within Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim files on the system via the script parameter on the Script_view page.
    sahipro · sahi pro
    EPSS27%
    1 exploit
    Published Sep 23, 2019
  • CVE-2018-10822High 7.5
    Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices allows remote attackers…
    dlink · dir-140l firmware
    EPSS39%
    1 exploit
    Published Oct 17, 2018
  • CVE-2017-5869High 8.8
    Directory traversal vulnerability in the file import feature in Nuxeo Platform 6.0, 7.1, 7.2, and 7.3 allows remote authenticated users to upload and execute arbitrary JSP code via a ..
    nuxeo · nuxeo
    EPSS35%
    1 exploit
    Published Mar 24, 2017
  • CVE-2017-15647High 7.5
    On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value.
    fiberhome · routerfiberhome firmware
    EPSS27%
    1 exploit
    Published Oct 19, 2017
  • CVE-2016-9554High 7.2
    The Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface.
    sophos · web appliance
    EPSS25%
    1 exploit
    Published Jan 28, 2017
  • CVE-2016-2389High 7.5
    Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMII) component 15.0 for SAP NetWeaver 7.4 allows remote attackers to read arbitrary files via a ..
    sap · netweaver
    EPSS41%
    1 exploit
    Published Feb 16, 2016
  • CVE-2016-0122High 7.8
    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Word 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption…
    microsoft · excel
    EPSS41%
    1 exploit
    Published Apr 12, 2016
  • CVE-2016-0111High 7.5
    Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than…
    microsoft · edge
    EPSS39%
    1 exploit
    Published Mar 9, 2016
  • CVE-2016-0108High 7.5
    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0102, CVE-2016-0103,…
    microsoft · internet explorer
    EPSS39%
    1 exploit
    Published Mar 9, 2016
  • CVE-2010-4367High 7.5
    awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a (1) WebDAV server or (2) NFS server.
    awstats · awstats
    EPSS27%
    1 exploit
    Published Dec 2, 2010
  • CVE-2009-1558High 7.8
    Directory traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote attackers to read arbitrary files via a %2e.
    cisco · wvc54gca
    EPSS30%
    1 exploit
    Published May 6, 2009
  • CVE-2008-3263High 7.8
    The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote…
    asterisk · asterisk
    EPSS28%
    1 exploit
    Published Jul 22, 2008
  • CVE-2006-7066High 7.1
    Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creating an object inside an iframe, deleting the frame by setting its location.href to about:blank, then accessing a property of the object within the deleted frame,…
    microsoft · internet explorer
    EPSS22%
    1 exploit
    Published Mar 2, 2007
Showing 401–450 of 503

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.

Figures as of Oct 20, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.