Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Watchlist

The CVE Watchlist, Under Review.

Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.

Synced hourly · figures as of Oct 19, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
1,462 vulnerabilities · highest score first
  • CVE-2002-2007Medium 5.0
    The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web root path, via erroneous HTTP requests for Java Server Pages (JSP) in the (1) test/jsp, (2) samples/jsp and (3)…
    apache · tomcat
    EPSS41%
    3 exploits
    Published Dec 31, 2002
  • CVE-2002-1375High 7.5
    The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long response.
    oracle · mysql
    EPSS24%
    1 exploit
    Published Dec 12, 2002
  • CVE-2002-1374High 7.5
    The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-character password, which causes MySQL to only compare the provided password against the first character of the real…
    oracle · mysql
    EPSS20%
    1 exploit
    Published Dec 12, 2002
  • CVE-2002-1217High 7.5
    Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses…
    microsoft · internet explorer
    EPSS50%
    1 exploit
    Published Oct 28, 2002
  • CVE-2002-0659Medium 5.0
    The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.
    openssl · openssl
    EPSS36%
    1 exploit
    Published Aug 12, 2002
  • CVE-2026-89754High 7.8
    Linux kernel: mm/pagewalk: fix stale walk->action escaping walk_pmd_range()
    linux · linux kernel
    EPSS0.2%
    1 exploit
    Published Sep 11, 2026
  • CVE-2026-85884High 7.8
    Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.
    microsoft · windows 11 version 26h2 for arm64-based systems
    EPSS0.4%
    1 exploit
    Published Oct 13, 2026
  • CVE-2026-50229Medium 6.1
    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in the number guess example for Apache Tomcat.
    apache · tomcat
    EPSS4.1%
    2 exploits
    Published Jun 29, 2026
  • CVE-2025-41450High 8.2
    Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2
    EPSS0.4%
    2 exploits
    Published May 8, 2025
  • CVE-2025-34035Critical 10.0
    An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier.
    engeniustech · epg5000 firmware
    EPSS23%
    1 exploit
    Published Jun 23, 2025
  • CVE-2025-28137Critical 9.8
    The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.
    totolink · a810r firmware
    EPSS34%
    1 exploit
    Published Apr 15, 2025
  • CVE-2025-23200Medium 5.4
    LibreNMS Misc Section Stored Cross-site Scripting vulnerability
    librenms · librenms
    EPSS31%
    1 exploit
    Published Jan 16, 2025
  • CVE-2024-6235Critical 9.4
    Sensitive information disclosure in NetScaler Console
    citrix · netscaler console
    EPSS21%
    ·
    Published Jul 16, 2024
  • CVE-2024-50330Critical 9.8
    SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker to achieve remote code execution.
    ivanti · endpoint manager
    EPSS40%
    ·
    Published Nov 12, 2024
  • CVE-2023-50564High 8.8
    An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file.
    pluck-cms · pluck
    EPSS29%
    1 exploit
    Published Dec 14, 2023
  • CVE-2023-36212High 8.8
    File Upload vulnerability in Total CMS v.1.7.4 allows a remote attacker to execute arbitrary code via a crafted PHP file to the edit page function.
    totalcms · total cms
    EPSS26%
    1 exploit
    Published Aug 2, 2023
  • CVE-2023-36210Critical 9.8
    MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the keyword parameter.
    motocms · motocms
    EPSS31%
    1 exploit
    Published Aug 1, 2023
  • CVE-2023-33782High 8.8
    D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability via the iperf3 diagnostics function.
    dlink · dir-842v2 firmware
    EPSS36%
    1 exploit
    Published Jun 6, 2023
  • CVE-2023-33781High 8.8
    An issue in D-Link DIR-842V2 v1.0.3 allows attackers to execute arbitrary commands via importing a crafted file.
    dlink · dir-842v2 firmware
    EPSS31%
    1 exploit
    Published Jun 6, 2023
  • CVE-2023-25279Critical 9.8
    OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload.
    dlink · dir-820l firmware
    EPSS31%
    1 exploit
    Published Mar 13, 2023
  • CVE-2023-1162High 8.8
    UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5.
    draytek · vigor 2960 firmware
    EPSS26%
    1 exploit
    Published Mar 3, 2023
  • CVE-2022-37134Critical 9.8
    D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi.
    dlink · dir-816 firmware
    EPSS22%
    1 exploit
    Published Aug 22, 2022
  • CVE-2022-37128Critical 9.8
    In D-Link DIR-816 A2_v1.10CNB04.img the network can be initialized without authentication via /goform/wizard_end.
    dlink · dir-816 firmware
    EPSS22%
    1 exploit
    Published Aug 31, 2022
  • CVE-2022-34974Critical 9.8
    D-Link DIR810LA1_FW102B22 was discovered to contain a command injection vulnerability via the Ping_addr function.
    dlink · dir-810l firmware
    EPSS23%
    1 exploit
    Published Aug 3, 2022
  • CVE-2022-32417Critical 9.8
    PbootCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the function parserIfLabel at function.php.
    pbootcms · pbootcms
    EPSS35%
    1 exploit
    Published Jul 14, 2022
  • CVE-2022-31446Critical 9.8
    Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac.
    tendacn · ac18 firmware
    EPSS35%
    1 exploit
    Published Jun 14, 2022
  • CVE-2022-28956Critical 9.8
    An issue in the getcfg.php component of D-Link DIR816L_FW206b01 allows attackers to access the device via a crafted payload.
    dlink · dir-816l firmware
    EPSS23%
    1 exploit
    Published May 18, 2022
  • CVE-2022-28955High 7.5
    An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php and category_view.php.
    dlink · dir-816l firmware
    EPSS40%
    1 exploit
    Published May 18, 2022
  • CVE-2021-46441High 8.8
    In the "webupg" binary of D-Link DIR-825 G1, because of the lack of parameter verification, attackers can use "cmd" parameters to execute arbitrary system commands after obtaining authorization.
    dlink · dir-825 firmware
    EPSS33%
    1 exploit
    Published Apr 27, 2022
  • CVE-2021-43118Critical 9.8
    A Remote Command Injection vulnerability exists in DrayTek Vigor 2960 1.5.1.3, DrayTek Vigor 3900 1.5.1.3, and DrayTek Vigor 300B 1.5.1.3 via a crafted HTTP message containing malformed QUERY STRING in mainfunction.cgi, which could let a remote malicious user execute arbitrary…
    draytek · vigor2960 firmware
    EPSS35%
    1 exploit
    Published Mar 29, 2022
  • CVE-2021-39378Critical 9.8
    A SQL Injection vulnerability exists in openSIS 8.0 when MySQL (MariaDB) is being used as the application database.
    os4ed · opensis
    EPSS23%
    1 exploit
    Published Sep 1, 2021
  • CVE-2021-3064Critical 9.8
    A memory corruption vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to disrupt system processes and potentially execute arbitrary code with root privileges.
    paloaltonetworks · pan-os
    EPSS20%
    ·
    Published Nov 11, 2021
  • CVE-2021-27224High 7.5
    The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allow remote attackers to execute arbitrary code.
    irfanview · wpg
    EPSS38%
    1 exploit
    Published Feb 17, 2021
  • CVE-2021-27114Critical 9.8
    Within the handler function of the /goform/addassignment route, a very long text entry for the"'s_ip" and "s_mac" fields could lead to a Stack-Based Buffer Overflow and overwrite the return address.
    dlink · dir-816 firmware
    EPSS25%
    1 exploit
    Published Apr 14, 2021
  • CVE-2021-20043High 8.8
    A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially execute code as the nobody user in the appliance.
    sonicwall · sma 200 firmware
    EPSS23%
    ·
    Published Jan 4, 2022
  • CVE-2020-35606High 8.8
    Arbitrary command execution can occur in Webmin through 1.962.
    webmin · webmin
    EPSS28%
    2 exploits
    Published Dec 21, 2020
  • CVE-2020-10931High 7.5
    Memcached 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted binary protocol header to try_read_command_binary in memcached.c.
    memcached · memcached
    EPSS28%
    1 exploit
    Published Mar 24, 2020
  • CVE-2020-10549Critical 9.8
    rConfig 3.9.4 and previous versions has unauthenticated snippets.inc.php SQL injection.
    rconfig · rconfig
    EPSS32%
    1 exploit
    Published Jun 4, 2020
  • CVE-2019-9203Critical 9.8
    Authorization bypass in Nagios IM (component of Nagios XI) before 2.2.7 allows closing incidents in IM via the API.
    nagios · incident manager
    EPSS20%
    1 exploit
    Published Mar 28, 2019
  • CVE-2019-8196Critical 9.8
    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an untrusted pointer dereference vulnerability.
    adobe · acrobat dc
    EPSS23%
    1 exploit
    Published Oct 17, 2019
  • CVE-2019-8195Critical 9.8
    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an untrusted pointer dereference vulnerability.
    adobe · acrobat dc
    EPSS23%
    1 exploit
    Published Oct 17, 2019
  • CVE-2019-8048Critical 9.8
    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a buffer error vulnerability.
    adobe · acrobat dc
    EPSS35%
    1 exploit
    Published Aug 20, 2019
  • CVE-2019-3948High 7.5
    The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0.R, Dahua DH-IPC HX883X and DH-IPC-HX863X V2.622.0000000.7.R, Dahua DH-SD4XXXXX V2.623.0000000.7.R, Dahua DH-SD5XXXXX V2.623.0000000.1.R, Dahua DH-SD6XXXXX…
    dahua · dh-ipc-hx863x
    EPSS25%
    2 exploits
    Published Jul 29, 2019
  • CVE-2019-17418High 7.2
    There is SQL injection via the admin/?n=language&c=language_general&a=doSearchParameter appno parameter, a different issue than CVE-2019-16997.
    metinfo · metinfo
    EPSS49%
    1 exploit
    Published Oct 9, 2019
  • CVE-2019-16997High 7.2
    In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/language/admin/language_general.class.php via the admin/?n=language&c=language_general&a=doExportPack appno parameter.
    metinfo · metinfo
    EPSS49%
    1 exploit
    Published Sep 30, 2019
  • CVE-2019-13086Critical 9.8
    core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrf_csz parameter.
    cszcms · csz cms
    EPSS32%
    1 exploit
    Published Jun 30, 2019
  • CVE-2019-12990Critical 9.8
    Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal.
    citrix · netscaler sd-wan
    EPSS39%
    ·
    Published Jul 16, 2019
  • CVE-2018-8302Critical 9.8
    A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server.
    microsoft · exchange server
    EPSS26%
    ·
    Published Aug 15, 2018
  • CVE-2018-7777High 8.8
    The vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider Electric U.motion Builder software versions prior to v1.3.4.
    schneider-electric · u.motion builder
    EPSS32%
    1 exploit
    Published Jul 3, 2018
  • CVE-2018-19864Critical 9.8
    NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow), resulting in ability to read camera feeds or reconfigure the device.
    nuuo · nvrmini2 firmware
    EPSS25%
    1 exploit
    Published Dec 5, 2018
Showing 1,001–1,050 of 1,462

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.

Figures as of Oct 19, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.