Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Watchlist

The CVE Watchlist, Under Review.

Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.

Synced hourly · figures as of Oct 20, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
1,462 vulnerabilities · highest score first
  • CVE-2018-1189Medium 4.8
    Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the Antivirus Page within the OneFS web administration interface.
    dell · emc isilon
    EPSS28%
    2 exploits
    Published Mar 26, 2018
  • CVE-2017-11906Medium 5.3
    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the…
    microsoft · internet explorer
    EPSS25%
    2 exploits
    Published Dec 12, 2017
  • CVE-2017-1130Medium 6.5
    IBM Notes 8.5 and 9.0 is vulnerable to a denial of service.
    ibm · inotes
    EPSS29%
    2 exploits
    Published Sep 5, 2017
  • CVE-2016-7182Critical 9.8
    The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync…
    microsoft · live meeting
    EPSS30%
    1 exploit
    Published Oct 13, 2016
  • CVE-2016-6897Medium 6.5
    Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 allows remote attackers to hijack the authentication of subscribers for /dev/random read operations by leveraging a late call to…
    wordpress · wordpress
    EPSS29%
    1 exploit
    Published Jan 18, 2017
  • CVE-2016-4203Critical 9.8
    Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via…
    adobe · acrobat
    EPSS27%
    1 exploit
    Published Jul 12, 2016
  • CVE-2016-0121High 8.8
    The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted OpenType…
    microsoft · windows 10
    EPSS39%
    1 exploit
    Published Mar 9, 2016
  • CVE-2015-2790Medium 4.3
    Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted (1) Ubyte Size in a DataSubBlock structure or (2) LZWMinimumCodeSize in a GIF image.
    foxitsoftware · enterprise reader
    EPSS25%
    4 exploits
    Published Mar 30, 2015
  • CVE-2015-2523Critical 9.3
    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption…
    microsoft · excel
    EPSS30%
    1 exploit
    Published Sep 8, 2015
  • CVE-2015-2521Critical 9.3
    Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
    microsoft · excel
    EPSS28%
    1 exploit
    Published Sep 8, 2015
  • CVE-2015-2520Critical 9.3
    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
    microsoft · excel
    EPSS28%
    1 exploit
    Published Sep 8, 2015
  • CVE-2015-2431Critical 9.3
    Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lync Basic 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office Graphics Library (OGL) font, aka "Microsoft Office Graphics Component…
    microsoft · live meeting
    EPSS30%
    1 exploit
    Published Aug 14, 2015
  • CVE-2015-0065Critical 9.3
    Microsoft Word 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "OneTableDocumentStream Remote Code Execution Vulnerability."
    microsoft · word
    EPSS30%
    1 exploit
    Published Feb 11, 2015
  • CVE-2015-0064Critical 9.3
    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory…
    microsoft · office
    EPSS30%
    1 exploit
    Published Feb 11, 2015
  • CVE-2015-0040Critical 9.3
    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0018, CVE-2015-0037, and…
    microsoft · internet explorer
    EPSS30%
    1 exploit
    Published Feb 11, 2015
  • CVE-2014-7864High 7.5
    Multiple SQL injection vulnerabilities in the FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine OpManager 8 through 11.5 build 11400 and IT360 10.5 and earlier allow remote attackers and remote authenticated users to execute arbitrary SQL commands via the (1)…
    zohocorp · manageengine opmanager
    EPSS23%
    2 exploits
    Published Feb 4, 2015
  • CVE-2014-5111Medium 5.0
    Multiple directory traversal vulnerabilities in Fonality trixbox allow remote attackers to read arbitrary files via a ..
    netfortris · trixbox
    EPSS22%
    5 exploits
    Published Jul 28, 2014
  • CVE-2014-4141Critical 9.3
    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
    microsoft · internet explorer
    EPSS31%
    1 exploit
    Published Oct 15, 2014
  • CVE-2014-1789Critical 9.3
    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1790.
    microsoft · internet explorer
    EPSS29%
    1 exploit
    Published Jun 11, 2014
  • CVE-2014-1201Critical 10.0
    Buffer overflow in the INetViewX ActiveX control in the Lorex Edge LH310 and Edge+ LH320 series with firmware 7-35-28-1B26E, Edge2 LH330 series with firmware 11.17.38-33_1D97A, and Edge3 LH340 series with firmware 11.19.85_1FE3A allows remote attackers to cause a denial of…
    lorextechnology · edge2
    EPSS29%
    1 exploit
    Published Jan 15, 2014
  • CVE-2013-5912Critical 10.0
    VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows remote attackers to execute arbitrary code via a URL in the fileName parameter during an importFile action.
    thomsonreuters · velocity analytics vhayu analytic server
    EPSS30%
    1 exploit
    Published Nov 28, 2013
  • CVE-2013-4878High 7.5
    The default configuration of Parallels Plesk Panel 9.0.x and 9.2.x on UNIX, and Small Business Panel 10.x on UNIX, has an improper ScriptAlias directive for phppath, which makes it easier for remote attackers to execute arbitrary code via a crafted request, a different…
    parallels · parallels plesk panel
    EPSS31%
    1 exploit
    Published Jul 18, 2013
  • CVE-2013-3686Critical 10.0
    cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password via a list action.
    ovislink · airlive wl2600cam
    EPSS28%
    1 exploit
    Published Oct 11, 2013
  • CVE-2013-3151Critical 9.3
    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3144 and…
    microsoft · internet explorer
    EPSS23%
    1 exploit
    Published Jul 10, 2013
  • CVE-2013-3144Critical 9.3
    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3151 and…
    microsoft · internet explorer
    EPSS23%
    1 exploit
    Published Jul 10, 2013
  • CVE-2013-1606High 7.5
    Buffer overflow in the ubnt-streamer RTSP service on the Ubiquiti UBNT AirCam with airVision firmware before 1.1.6 allows remote attackers to execute arbitrary code via a long rtsp: URI in a DESCRIBE request.
    ui · aircam
    EPSS23%
    2 exploits
    Published Jul 18, 2013
  • CVE-2013-1311Critical 9.3
    Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability."
    microsoft · internet explorer
    EPSS21%
    1 exploit
    Published May 15, 2013
  • CVE-2013-0946Critical 9.3
    Buffer overflow in the Library Control Program (LCP) in EMC AlphaStor 4.0 before build 910 allows remote attackers to execute arbitrary code via crafted commands.
    emc · alphastor
    EPSS29%
    1 exploit
    Published May 10, 2013
  • CVE-2013-0090High 8.8
    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CCaret Use After Free Vulnerability."
    microsoft · internet explorer
    EPSS38%
    1 exploit
    Published Mar 12, 2013
  • CVE-2012-5469High 7.3
    Portable phpMyAdmin <= 1.3.0 - Authentication Bypass
    phpmyadmin · phpmyadmin
    EPSS24%
    1 exploit
    Published Jul 31, 2014
  • CVE-2012-3456High 7.5
    Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted…
    calligra · calligra
    EPSS20%
    1 exploit
    Published Aug 20, 2012
  • CVE-2012-1226High 7.5
    Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly execute arbitrary code via a ..
    dolibarr · dolibarr erp\/crm
    EPSS24%
    2 exploits
    Published Feb 21, 2012
  • CVE-2011-2003Critical 9.3
    Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .fon…
    microsoft · windows 7
    EPSS27%
    1 exploit
    Published Oct 11, 2011
  • CVE-2011-1276Critical 9.3
    Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute…
    microsoft · excel
    EPSS28%
    1 exploit
    Published Jun 16, 2011
  • CVE-2011-0041Critical 9.3
    Integer overflow in gdiplus.dll in GDI+ in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted EMF image, aka "GDI+ Integer…
    microsoft · office
    EPSS28%
    1 exploit
    Published Apr 13, 2011
  • CVE-2010-3329Critical 9.3
    mshtmled.dll in Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code via a crafted Microsoft Office document that causes the HtmlDlgHelper class destructor to access uninitialized memory, aka "Uninitialized Memory Corruption Vulnerability."
    microsoft · internet explorer
    EPSS28%
    1 exploit
    Published Oct 13, 2010
  • CVE-2010-2632High 7.8
    Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability.
    sun · sunos
    EPSS35%
    1 exploit
    Published Jan 19, 2011
  • CVE-2010-1225Critical 9.3
    The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server 2005 Gold and R2 SP1, and Windows Virtual PC does not properly restrict access from the guest OS to memory locations in the VMM…
    microsoft · virtual pc
    EPSS28%
    1 exploit
    Published Apr 1, 2010
  • CVE-2010-0269Critical 10.0
    The SMB client in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly allocate memory for SMB responses, which allows remote SMB servers and…
    microsoft · windows 2000
    EPSS28%
    1 exploit
    Published Apr 14, 2010
  • CVE-2010-0265Critical 9.3
    Buffer overflow in Microsoft Windows Movie Maker 2.1, 2.6, and 6.0, and Microsoft Producer 2003, allows remote attackers to execute arbitrary code via a crafted project (.MSWMM) file, aka "Movie Maker and Producer Buffer Overflow Vulnerability."
    microsoft · producer
    EPSS27%
    1 exploit
    Published Mar 10, 2010
  • CVE-2008-1609Medium 6.8
    Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) website parameter to (a) forum.php, (b) headlines.php, and (c) main.php in forum/, and (2) main_dir parameter…
    jaf cms · jaf cms
    EPSS44%
    2 exploits
    Published Apr 1, 2008
  • CVE-2008-1145Medium 5.0
    ruby: webrick directory traversal
    ruby-lang · webrick
    EPSS28%
    1 exploit
    Published Mar 3, 2008
  • CVE-2007-6401Critical 9.3
    Stack-based buffer overflow in mplayer2.exe in Microsoft Windows Media Player (WMP) 6.4, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6402.
    microsoft · windows media player
    EPSS30%
    1 exploit
    Published Dec 17, 2007
  • CVE-2007-6026Critical 9.3
    Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a…
    microsoft · jet
    EPSS28%
    1 exploit
    Published Nov 19, 2007
  • CVE-2007-5775Critical 9.8
    Unspecified vulnerability in BitDefender allows attackers to execute arbitrary code via unspecified vectors, aka EEYEB-20071024.
    bitdefender · antivirus
    EPSS29%
    1 exploit
    Published Nov 1, 2007
  • CVE-2006-6379High 7.5
    Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier, ARCserve Backup 9.01 up to 11.1, Enterprise Backup 10.5, and CA Server Protection Suite r2, allows remote attackers to execute arbitrary code via…
    broadcom · server protection suite
    EPSS21%
    1 exploit
    Published Dec 10, 2006
  • CVE-2006-3281Medium 5.1
    Microsoft Internet Explorer 6.0 does not properly handle Drag and Drop events, which allows remote user-assisted attackers to execute arbitrary code via a link to an SMB file share with a filename that contains encoded ..\ (%2e%2e%5c) sequences and whose extension contains the…
    microsoft · internet explorer
    EPSS48%
    1 exploit
    Published Jun 28, 2006
  • CVE-2006-3014Medium 5.1
    Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet.
    microsoft · excel
    EPSS30%
    1 exploit
    Published Jun 21, 2006
  • CVE-2006-2111Medium 4.3
    A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections with the mhtml: URI handler, as originally reported for Internet Explorer 6 and 7, aka "URL Redirect Cross Domain Information…
    microsoft · outlook express
    EPSS41%
    1 exploit
    Published May 1, 2006
  • CVE-2006-0143High 7.5
    Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of service (crash) via a WMF file containing (1) ExtCreateRegion or (2) ExtEscape function calls with arguments with inconsistent lengths.
    microsoft · windows 2000
    EPSS31%
    1 exploit
    Published Jan 9, 2006
Showing 1,151–1,200 of 1,462

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.

Figures as of Oct 20, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.