Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Watchlist

The CVE Watchlist, Under Review.

Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.

Synced hourly · figures as of Oct 19, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
1,462 vulnerabilities · highest score first
  • CVE-2009-3244Critical 9.3
    Heap-based buffer overflow in the SwDir.dll ActiveX control in Adobe Shockwave Player 11.5.1.601 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PlayerVersion property value.
    adobe · shockwave player
    EPSS20%
    2 exploits
    Published Sep 18, 2009
  • CVE-2009-2754Critical 10.0
    Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix Dynamic Server (IDS) 10.x before 10.00.TC9 and 11.x before 11.10.TC3 and EMC Legato NetWorker, allows…
    emc · legato networker
    EPSS40%
    1 exploit
    Published Mar 5, 2010
  • CVE-2009-2514Critical 9.3
    win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not correctly parse font code during construction of a directory-entry table, which allows remote attackers to execute arbitrary code via a crafted Embedded OpenType (EOT) font, aka…
    microsoft · windows 2000
    EPSS47%
    1 exploit
    Published Nov 11, 2009
  • CVE-2009-1547High 8.8
    Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream header that triggers memory corruption, aka "Data Stream Header Corruption Vulnerability."
    microsoft · internet explorer
    EPSS37%
    2 exploits
    Published Oct 14, 2009
  • CVE-2009-1523Medium 5.3
    Directory traversal in Mort Bay Jetty
    mortbay · jetty
    EPSS26%
    2 exploits
    Published May 2, 2022
  • CVE-2009-0932Medium 6.4
    horde: XSS vulnerability and directory traversal vulnerability
    debian · horde
    EPSS46%
    1 exploit
    Published Jan 27, 2009
  • CVE-2009-0815Medium 6.9
    TYPO3 leaks a hash secret in an error message
    typo3 · typo3
    EPSS42%
    1 exploit
    Published May 2, 2022
  • CVE-2009-0520Critical 9.3
    flash-plugin: Buffer overflow (arbitrary code execution) via crafted SWF file.
    adobe · flash player
    EPSS28%
    1 exploit
    Published Feb 24, 2009
  • CVE-2008-1721High 7.5
    python: integer signedness error in the zlib extension module
    python · python
    EPSS23%
    1 exploit
    Published Apr 9, 2008
  • CVE-2007-1306High 7.8
    Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending a Session Initiation Protocol (SIP) packet without a URI and SIP-version header, which results in a NULL pointer dereference.
    digium · asterisk
    EPSS21%
    1 exploit
    Published Mar 7, 2007
  • CVE-2007-0221High 7.8
    Integer overflow in the IMAP (IMAP4) support in Microsoft Exchange Server 2000 SP3 allows remote attackers to cause a denial of service (service hang) via crafted literals in an IMAP command, aka the "IMAP Literal Processing Vulnerability."
    microsoft · exchange server
    EPSS37%
    ·
    Published May 8, 2007
  • CVE-2006-5085High 7.5
    Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the nom_blog parameter, which is injected into include/variables.php.
    pixel motion · pixel motion blog
    EPSS47%
    1 exploit
    Published Sep 28, 2006
  • CVE-2006-2389High 9.3
    Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with a malformed property that triggers memory corruption related to record lengths,…
    microsoft · office
    EPSS39%
    1 exploit
    Published Jul 11, 2006
  • CVE-2006-0287Critical 10.0
    Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 10.1.0.5 and Application Server 10.1.2.0.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# OHS02.
    oracle · application server
    EPSS29%
    1 exploit
    Published Jan 18, 2006
  • CVE-2006-0254Medium 4.3
    Apache Geronimo console 1.0 vulnerable to cross-site scripting
    apache · geronimo
    EPSS32%
    2 exploits
    Published May 1, 2022
  • CVE-2005-3388Medium 4.3
    Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a "stacked array assignment."
    php · php
    EPSS49%
    1 exploit
    Published Oct 31, 2005
  • CVE-2004-0990Critical 10.0
    Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the…
    gd graphics library · gdlib
    EPSS28%
    1 exploit
    Published Mar 1, 2005
  • CVE-2004-0835High 7.5
    MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.
    mysql · mysql
    EPSS22%
    1 exploit
    Published Mar 23, 2004
  • CVE-2004-0600Critical 10.0
    Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication.
    samba · samba
    EPSS29%
    1 exploit
    Published Jul 27, 2004
  • CVE-2004-0595Medium 6.8
    The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore…
    php · php
    EPSS45%
    1 exploit
    Published Jul 14, 2004
  • CVE-2004-0110High 7.5
    Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL.
    xmlsoft · libxml
    EPSS24%
    1 exploit
    Published Mar 15, 2004
  • CVE-2003-1026Critical 9.3
    Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back (back) function is called, as demonstrated by…
    microsoft · internet explorer
    EPSS39%
    1 exploit
    Published Jan 20, 2004
  • CVE-2003-0659High 7.2
    Buffer overflow in a function in User32.dll on Windows NT through Server 2003 allows local users to execute arbitrary code via long (1) LB_DIR messages to ListBox or (2) CB_DIR messages to ComboBox controls in a privileged application.
    microsoft · windows nt
    EPSS43%
    2 exploits
    Published Nov 17, 2003
  • CVE-2003-0209Critical 10.0
    Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow.
    sourcefire · snort
    EPSS39%
    1 exploit
    Published May 5, 2003
  • CVE-2003-0015High 7.5
    Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.
    cvs · cvs
    EPSS24%
    1 exploit
    Published Feb 7, 2003
  • CVE-2002-0721Critical 10.0
    Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, which could allow unprivileged users, and possibly remote attackers, to run stored procedures with administrator privileges via (1)…
    microsoft · sql server
    EPSS46%
    1 exploit
    Published Sep 5, 2002
  • CVE-2001-1021High 7.5
    Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDTM, (3) MLST, (4) MKD, (5) RMD, (6) RNFR, (7) RNTO, (8) SIZE, (9) STAT, (10) XMKD, or (11) XRMD.
    progress · ws ftp server
    EPSS42%
    2 exploits
    Published Jul 26, 2001
  • CVE-2000-0854Critical 10.0
    When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could allow an attacker to execute arbitrary commands by inserting a Trojan Horse DLL into the same directory as the document.
    microsoft · office
    EPSS37%
    1 exploit
    Published Nov 14, 2000
  • CVE-1999-0009Critical 10.0
    Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
    isc · bind
    EPSS29%
    2 exploits
    Published Apr 8, 1998
  • CVE-2026-104745High 8.1
    Customer Email Verification for WooCommerce <= 3.3.0 - Unauthenticated Privilege Escalation to 'alg_wc_ev_verify_email' Parameter
    EPSS0.5%
    1 exploit
    Published Oct 16, 2026
  • CVE-2025-58443Critical 9.9
    Versions 1.5.10.1673 and below contain an authentication bypass vulnerability.
    fogproject · fogproject
    EPSS21%
    1 exploit
    Published Sep 6, 2025
  • CVE-2025-34036Critical 10.0
    An OS command injection vulnerability exists in white-labeled DVRs manufactured by TVT, affecting a custom HTTP service called "Cross Web Server" that listens on TCP ports 81 and 82.
    tvt · td-2004ts-cl-c firmware
    EPSS31%
    1 exploit
    Published Jun 23, 2025
  • CVE-2025-20282Critical 10.0
    A vulnerability in an internal API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device and then execute those files on the underlying operating system as root.
    cisco · identity services engine
    EPSS39%
    ·
    Published Jun 26, 2025
  • CVE-2024-57045Critical 9.8
    A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits unauthorized individuals to bypass the authentication.
    dlink · dir-859 a3 firmware
    EPSS32%
    1 exploit
    Published Feb 18, 2025
  • CVE-2024-57004Medium 6.1
    Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail 1.6.9 allows remote authenticated users to upload a malicious file as an email attachment, leading to the triggering of the XSS by visiting the SENT session.
    roundcube · webmail
    EPSS40%
    1 exploit
    Published Feb 3, 2025
  • CVE-2024-5585High 8.8
    In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spaces.
    php · php
    EPSS29%
    1 exploit
    Published Jun 7, 2024
  • CVE-2024-53457Medium 5.4
    LibreNMS stored cross-site scripting (XSS) vulnerability in the Device Settings section
    librenms · librenms
    EPSS46%
    1 exploit
    Published Dec 6, 2024
  • CVE-2024-39914Critical 9.8
    Prior to 1.5.10.34, packages/web/lib/fog/reportmaker.class.php in FOG was affected by a command injection via the filename parameter to /fog/management/export.php.
    fogproject · fogproject
    EPSS23%
    1 exploit
    Published Jul 12, 2024
  • CVE-2024-27747Critical 9.8
    File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email Image parameter in the profile.php component.
    mayurik · petrol pump management
    EPSS24%
    2 exploits
    Published Mar 1, 2024
  • CVE-2023-6579Critical 9.8
    A vulnerability, which was classified as critical, has been found in osCommerce 4.
    oscommerce · oscommerce
    EPSS24%
    1 exploit
    Published Dec 7, 2023
  • CVE-2023-4873Critical 9.8
    A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230906.
    byzoro · smart s45f firmware
    EPSS22%
    1 exploit
    Published Sep 10, 2023
  • CVE-2023-44974Critical 9.8
    An arbitrary file upload vulnerability in the component /admin/plugin.php of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.
    emlog · emlog
    EPSS20%
    1 exploit
    Published Oct 3, 2023
  • CVE-2023-4474Critical 9.8
    The improper neutralization of special elements in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a crafted URL…
    zyxel · nas326 firmware
    EPSS30%
    ·
    Published Dec 1, 2023
  • CVE-2023-34747Critical 9.8
    File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload.
    ujcms · ujcms
    EPSS20%
    1 exploit
    Published Jun 14, 2023
  • CVE-2023-34600Critical 9.8
    Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection.
    adiscon · loganalyzer
    EPSS24%
    1 exploit
    Published Jun 20, 2023
  • CVE-2023-33735Critical 9.8
    D-Link DIR-846 v1.00A52 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in the /HNAP1 interface.
    dlink · dir-846 firmware
    EPSS32%
    1 exploit
    Published May 31, 2023
  • CVE-2023-3306Critical 9.8
    It has been declared as critical.
    ruijie · rg-ew1200g firmware
    EPSS23%
    1 exploit
    Published Jun 18, 2023
  • CVE-2023-31689Critical 9.8
    In Wcms 0.3.2, an attacker can send a crafted request from a vulnerable web application backend server /wcms/wex/html.php via the finish parameter and the textAreaCode parameter.
    wcms · wcms
    EPSS20%
    1 exploit
    Published May 22, 2023
  • CVE-2023-2924Critical 9.8
    A vulnerability, which was classified as critical, has been found in Supcon SimField up to 1.80.00.00.
    supcontech · simfield firmware
    EPSS24%
    1 exploit
    Published May 27, 2023
  • CVE-2023-26613Critical 9.8
    An OS command injection vulnerability in D-Link DIR-823G firmware version 1.02B05 allows unauthorized attackers to execute arbitrary operating system commands via a crafted GET request to EXCU_SHELL.
    dlink · dir-823g firmware
    EPSS31%
    1 exploit
    Published Jun 29, 2023
Showing 751–800 of 1,462

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.

Figures as of Oct 19, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.