Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 19, 2026
751 vulnerabilities · highest score first
- CVE-2017-11282Critical 9.8flash-plugin: multiple code execution issues fixed in APSB17-28adobe · flash playerEPSS34%2 exploitsPublished Sep 12, 2017
- CVE-2017-11281Critical 9.8flash-plugin: multiple code execution issues fixed in APSB17-28adobe · flash playerEPSS34%2 exploitsPublished Sep 12, 2017
- CVE-2016-3987Critical 9.8The HTTP server in Trend Micro Password Manager allows remote web servers to execute arbitrary commands via the url parameter to (1) api/openUrlInDefaultBrowser or (2) api/showSB.trendmicro · password managerEPSS22%3 exploitsPublished Apr 11, 2016
- CVE-2015-6018Critical 9.8The diagnostic-ping implementation on ZyXEL PMG5318-B20A devices with firmware before 1.00(AANC.2)C0 allows remote attackers to execute arbitrary commands via the PingIPAddr parameter.zyxel · pmg5318-b20a firmwareEPSS21%1 exploitPublished Dec 31, 2015
- CVE-2015-3093Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-09adobe · airEPSS48%1 exploitPublished May 12, 2015
- CVE-2015-3089Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-09adobe · airEPSS48%1 exploitPublished May 12, 2015
- CVE-2013-2568Critical 9.8A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 via the ap parameter to /cgi-bin/mft/wireless_mft.cgi, which could let a remote malicious user execute arbitrary code.zavio · f3105 firmwareEPSS49%1 exploitPublished Jan 29, 2020
- CVE-2011-4106Critical 9.8TimThumb <= 1.33 - Remote File Downloadbinarymoon · timthumbEPSS23%4 exploitsPublished Jul 31, 2011
- CVE-2001-0010Critical 10.0Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.isc · bindEPSS32%4 exploitsPublished Jan 29, 2001
- CVE-2026-89079Critical 9.8Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data FilterEPSS0.3%1 exploitPublished Oct 16, 2026
- CVE-2019-7269Critical 9.8Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution.nortekcontrol · linear emerge 5000p firmwareEPSS40%2 exploitsPublished Jul 2, 2019
- CVE-2019-10945Critical 9.8before 3.9.5.joomla · joomla\!EPSS40%3 exploitsPublished Apr 10, 2019
- CVE-2018-17057Critical 9.8TCPDF vulnerable to attackers triggering deserialization of arbitrary datatecnick · tcpdfEPSS26%2 exploitsPublished Oct 6, 2022
- CVE-2017-16943Critical 9.8The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via vectors involving BDAT commands.exim · eximEPSS47%1 exploitPublished May 5, 2021
- CVE-2016-4138Critical 9.8flash-plugin: multiple code execution issues fixed in APSB16-18adobe · flash playerEPSS25%2 exploitsPublished Jun 14, 2016
- CVE-2016-2148Critical 9.8Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspecified impact via vectors involving OPTION_6RD parsing.busybox · busyboxEPSS27%2 exploitsPublished Feb 9, 2017
- CVE-2015-8434Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-32adobe · airEPSS43%1 exploitPublished Dec 8, 2015
- CVE-2015-8431Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-32adobe · airEPSS43%1 exploitPublished Dec 8, 2015
- CVE-2015-8430Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-32adobe · airEPSS43%1 exploitPublished Dec 8, 2015
- CVE-2015-8429Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-32adobe · airEPSS43%1 exploitPublished Dec 8, 2015
- CVE-2015-8428Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-32adobe · airEPSS43%1 exploitPublished Dec 8, 2015
- CVE-2015-8427Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-32adobe · airEPSS43%1 exploitPublished Dec 8, 2015
- CVE-2015-8426Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-32adobe · airEPSS43%1 exploitPublished Dec 8, 2015
- CVE-2015-8425Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-32adobe · airEPSS43%1 exploitPublished Dec 8, 2015
- CVE-2015-8424Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-32adobe · airEPSS43%1 exploitPublished Dec 8, 2015
- CVE-2015-8423Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-32adobe · airEPSS43%1 exploitPublished Dec 8, 2015
- CVE-2015-8422Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-32adobe · airEPSS43%1 exploitPublished Dec 8, 2015
- CVE-2015-8421Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-32adobe · airEPSS43%1 exploitPublished Dec 8, 2015
- CVE-2015-8420Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-32adobe · airEPSS43%1 exploitPublished Dec 8, 2015
- CVE-2015-5574Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-23adobe · airEPSS46%1 exploitPublished Sep 21, 2015
- CVE-2015-5563Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS46%1 exploitPublished Aug 12, 2015
- CVE-2015-5562Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS44%1 exploitPublished Aug 12, 2015
- CVE-2015-5561Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS45%1 exploitPublished Aug 12, 2015
- CVE-2015-5558Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS43%1 exploitPublished Aug 12, 2015
- CVE-2015-5557Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS45%1 exploitPublished Aug 12, 2015
- CVE-2015-5556Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS45%1 exploitPublished Aug 12, 2015
- CVE-2015-5555Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS43%1 exploitPublished Aug 12, 2015
- CVE-2015-5554Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS43%1 exploitPublished Aug 12, 2015
- CVE-2015-5551Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS45%1 exploitPublished Aug 12, 2015
- CVE-2015-5550Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS45%1 exploitPublished Aug 12, 2015
- CVE-2015-5540Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS46%1 exploitPublished Aug 12, 2015
- CVE-2015-5539Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS46%1 exploitPublished Aug 12, 2015
- CVE-2015-3106Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-11adobe · airEPSS43%1 exploitPublished Jun 9, 2015
- CVE-2015-1158Critical 10.0The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted (1)…cups · cupsEPSS30%2 exploitsPublished Jun 26, 2015
- CVE-2014-5007Critical 9.8Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90055 allows remote attackers to write to and execute arbitrary files as SYSTEM via a ..zohocorp · manageengine desktop centralEPSS37%3 exploitsPublished Jan 17, 2020
- CVE-2013-1599Critical 9.8A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in D-Link IP Cameras DCS-3411/3430 firmware 1.02, DCS-5605/5635 1.01, DCS-1100L/1130L 1.04, DCS-1100/1130 1.03, DCS-1100/1130 1.04_US, DCS-2102/2121 1.05_RU, DCS-3410 1.02, DCS-5230 1.02, DCS-5230L…dlink · dcs-1100 firmwareEPSS40%2 exploitsPublished Jan 28, 2020
- CVE-2013-1595Critical 9.8A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the Authorization header field sent to the RTSP service, which could let a remote malicious user execute arbitrary code or cause a Denial of Service.vivotek · pt7135 firmwareEPSS42%2 exploitsPublished Jan 24, 2020
- CVE-2012-3363Critical 9.1Zend Framework XXE Vulnerabilityzend · zend frameworkEPSS49%1 exploitPublished May 17, 2022
- CVE-2007-3456Critical 9.3flash-plugin input validation flawadobe · flash playerEPSS48%1 exploitPublished Jul 10, 2007
- CVE-2007-2223Critical 9.3Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substringData method on a (1) TextNode or (2) XMLDOM object, which causes an integer overflow that leads to a buffer overflow.microsoft · xml core servicesEPSS49%1 exploitPublished Aug 14, 2007
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-11282 | flash-plugin: multiple code execution issues fixed in APSB17-28 adobe · flash player | Critical 9.8 | 34% | 2 exploits | |
| CVE-2017-11281 | flash-plugin: multiple code execution issues fixed in APSB17-28 adobe · flash player | Critical 9.8 | 34% | 2 exploits | |
| CVE-2016-3987 | The HTTP server in Trend Micro Password Manager allows remote web servers to execute arbitrary commands via the url parameter to (1) api/openUrlInDefaultBrowser or (2) api/showSB. trendmicro · password manager | Critical 9.8 | 22% | 3 exploits | |
| CVE-2015-6018 | The diagnostic-ping implementation on ZyXEL PMG5318-B20A devices with firmware before 1.00(AANC.2)C0 allows remote attackers to execute arbitrary commands via the PingIPAddr parameter. zyxel · pmg5318-b20a firmware | Critical 9.8 | 21% | 1 exploit | |
| CVE-2015-3093 | flash-plugin: multiple code execution issues fixed in APSB15-09 adobe · air | Critical 10.0 | 48% | 1 exploit | |
| CVE-2015-3089 | flash-plugin: multiple code execution issues fixed in APSB15-09 adobe · air | Critical 10.0 | 48% | 1 exploit | |
| CVE-2013-2568 | A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 via the ap parameter to /cgi-bin/mft/wireless_mft.cgi, which could let a remote malicious user execute arbitrary code. zavio · f3105 firmware | Critical 9.8 | 49% | 1 exploit | |
| CVE-2011-4106 | TimThumb <= 1.33 - Remote File Download binarymoon · timthumb | Critical 9.8 | 23% | 4 exploits | |
| CVE-2001-0010 | Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges. isc · bind | Critical 10.0 | 32% | 4 exploits | |
| CVE-2026-89079 | Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter | Critical 9.8 | 0.3% | 1 exploit | |
| CVE-2019-7269 | Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution. nortekcontrol · linear emerge 5000p firmware | Critical 9.8 | 40% | 2 exploits | |
| CVE-2019-10945 | before 3.9.5. joomla · joomla\! | Critical 9.8 | 40% | 3 exploits | |
| CVE-2018-17057 | TCPDF vulnerable to attackers triggering deserialization of arbitrary data tecnick · tcpdf | Critical 9.8 | 26% | 2 exploits | |
| CVE-2017-16943 | The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via vectors involving BDAT commands. exim · exim | Critical 9.8 | 47% | 1 exploit | |
| CVE-2016-4138 | flash-plugin: multiple code execution issues fixed in APSB16-18 adobe · flash player | Critical 9.8 | 25% | 2 exploits | |
| CVE-2016-2148 | Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspecified impact via vectors involving OPTION_6RD parsing. busybox · busybox | Critical 9.8 | 27% | 2 exploits | |
| CVE-2015-8434 | flash-plugin: multiple code execution issues fixed in APSB15-32 adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-8431 | flash-plugin: multiple code execution issues fixed in APSB15-32 adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-8430 | flash-plugin: multiple code execution issues fixed in APSB15-32 adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-8429 | flash-plugin: multiple code execution issues fixed in APSB15-32 adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-8428 | flash-plugin: multiple code execution issues fixed in APSB15-32 adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-8427 | flash-plugin: multiple code execution issues fixed in APSB15-32 adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-8426 | flash-plugin: multiple code execution issues fixed in APSB15-32 adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-8425 | flash-plugin: multiple code execution issues fixed in APSB15-32 adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-8424 | flash-plugin: multiple code execution issues fixed in APSB15-32 adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-8423 | flash-plugin: multiple code execution issues fixed in APSB15-32 adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-8422 | flash-plugin: multiple code execution issues fixed in APSB15-32 adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-8421 | flash-plugin: multiple code execution issues fixed in APSB15-32 adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-8420 | flash-plugin: multiple code execution issues fixed in APSB15-32 adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-5574 | flash-plugin: multiple code execution issues fixed in APSB15-23 adobe · air | Critical 10.0 | 46% | 1 exploit | |
| CVE-2015-5563 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 46% | 1 exploit | |
| CVE-2015-5562 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 44% | 1 exploit | |
| CVE-2015-5561 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 45% | 1 exploit | |
| CVE-2015-5558 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-5557 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 45% | 1 exploit | |
| CVE-2015-5556 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 45% | 1 exploit | |
| CVE-2015-5555 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-5554 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-5551 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 45% | 1 exploit | |
| CVE-2015-5550 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 45% | 1 exploit | |
| CVE-2015-5540 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 46% | 1 exploit | |
| CVE-2015-5539 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 46% | 1 exploit | |
| CVE-2015-3106 | flash-plugin: multiple code execution issues fixed in APSB15-11 adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-1158 | The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted (1)… cups · cups | Critical 10.0 | 30% | 2 exploits | |
| CVE-2014-5007 | Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90055 allows remote attackers to write to and execute arbitrary files as SYSTEM via a .. zohocorp · manageengine desktop central | Critical 9.8 | 37% | 3 exploits | |
| CVE-2013-1599 | A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in D-Link IP Cameras DCS-3411/3430 firmware 1.02, DCS-5605/5635 1.01, DCS-1100L/1130L 1.04, DCS-1100/1130 1.03, DCS-1100/1130 1.04_US, DCS-2102/2121 1.05_RU, DCS-3410 1.02, DCS-5230 1.02, DCS-5230L… dlink · dcs-1100 firmware | Critical 9.8 | 40% | 2 exploits | |
| CVE-2013-1595 | A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the Authorization header field sent to the RTSP service, which could let a remote malicious user execute arbitrary code or cause a Denial of Service. vivotek · pt7135 firmware | Critical 9.8 | 42% | 2 exploits | |
| CVE-2012-3363 | Zend Framework XXE Vulnerability zend · zend framework | Critical 9.1 | 49% | 1 exploit | |
| CVE-2007-3456 | flash-plugin input validation flaw adobe · flash player | Critical 9.3 | 48% | 1 exploit | |
| CVE-2007-2223 | Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substringData method on a (1) TextNode or (2) XMLDOM object, which causes an integer overflow that leads to a buffer overflow. microsoft · xml core services | Critical 9.3 | 49% | 1 exploit |
Showing 51–100 of 751
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.