Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Watchlist

The CVE Watchlist, Under Review.

Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.

Synced hourly · figures as of Oct 19, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
521 vulnerabilities · highest score first
  • CVE-2001-1021High 7.5
    Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDTM, (3) MLST, (4) MKD, (5) RMD, (6) RNFR, (7) RNTO, (8) SIZE, (9) STAT, (10) XMKD, or (11) XRMD.
    progress · ws ftp server
    EPSS42%
    2 exploits
    Published Jul 26, 2001
  • CVE-2024-5585High 8.8
    In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spaces.
    php · php
    EPSS29%
    1 exploit
    Published Jun 7, 2024
  • CVE-2023-26609High 7.2
    ABUS TVIP 20000-21150 devices allows remote attackers to execute arbitrary code via shell metacharacters in the /cgi-bin/mft/wireless_mft ap field.
    abus · tvip 20000-21150 firmware
    EPSS39%
    2 exploits
    Published Feb 26, 2023
  • CVE-2022-20964High 8.8
    A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating system.
    cisco · identity services engine
    EPSS31%
    ·
    Published Nov 29, 2022
  • CVE-2021-46367High 7.2
    RiteCMS version 3.1.0 and below suffers from a remote code execution vulnerability in the admin panel.
    ritecms · ritecms
    EPSS30%
    2 exploits
    Published Apr 8, 2022
  • CVE-2021-43405High 8.8
    The fax_extension may have risky characters (it is not constrained to be numeric).
    fusionpbx · fusionpbx
    EPSS36%
    2 exploits
    Published Nov 5, 2021
  • CVE-2021-40345High 7.2
    In the Manage Dashlets section of the Admin panel, an administrator can upload ZIP files.
    nagios · nagios xi
    EPSS23%
    1 exploit
    Published Oct 27, 2021
  • CVE-2021-35380High 7.5
    A Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download…
    solari · termtalk server
    EPSS37%
    1 exploit
    Published Feb 15, 2022
  • CVE-2021-25162High 8.1
    A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant…
    arubanetworks · instant
    EPSS26%
    2 exploits
    Published Mar 29, 2021
  • CVE-2020-9375High 7.5
    TP-Link Archer C50 V3 devices before Build 200318 Rel.
    tp-link · archer c50
    EPSS27%
    2 exploits
    Published Mar 25, 2020
  • CVE-2020-8947High 7.2
    functions_netflow.php in Artica Pandora FMS 7.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the index.php?operation/netflow/nf_live_view ip_dst, dst_port, or src_port parameter, a different vulnerability than CVE-2019-20224.
    artica · pandora fms
    EPSS22%
    3 exploits
    Published Feb 12, 2020
  • CVE-2020-35576High 8.8
    A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 (JP) with firmware versions prior to 201216 allows authenticated users to execute arbitrary code as root via shell metacharacters, a different vulnerability than CVE-2018-12577.
    tp-link · tl-wr841n firmware
    EPSS42%
    1 exploit
    Published Jan 26, 2021
  • CVE-2019-12992High 8.8
    Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 6 of 6).
    citrix · netscaler sd-wan
    EPSS49%
    ·
    Published Jul 16, 2019
  • CVE-2019-12593High 7.5
    IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail/calendar/minimizer/index.php?style=..%5c directory traversal.
    icewarp · mail server
    EPSS41%
    2 exploits
    Published Jun 3, 2019
  • CVE-2019-0572High 7.8
    An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.
    microsoft · windows 10
    EPSS25%
    2 exploits
    Published Jan 8, 2019
  • CVE-2018-8269High 7.5
    Denial of service in ASP.NET Core
    microsoft · microsoft.data.odata
    EPSS27%
    1 exploit
    Published Oct 16, 2018
  • CVE-2018-7583High 7.5
    Proxy.exe in DualDesk 20 allows Remote Denial Of Service (daemon crash) via a long string to TCP port 5500.
    advantig · dualdesk
    EPSS38%
    2 exploits
    Published Mar 3, 2018
  • CVE-2018-16288High 8.6
    LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs.
    lg · supersign cms
    EPSS36%
    2 exploits
    Published Sep 14, 2018
  • CVE-2016-3386High 7.5
    ChakraCore RCE Vulnerability
    microsoft · edge
    EPSS41%
    1 exploit
    Published May 14, 2022
  • CVE-2016-2209High 7.3
    Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP5; Symantec Endpoint…
    symantec · advanced threat protection
    EPSS21%
    1 exploit
    Published Jun 30, 2016
  • CVE-2016-0145High 8.8
    The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold and 1511; Office 2007 SP3 and 2010 SP2; Word Viewer; .NET Framework 3.0 SP2, 3.5, and 3.5.1; Skype…
    microsoft · live meeting
    EPSS43%
    1 exploit
    Published Apr 12, 2016
  • CVE-2016-0016High 7.8
    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted…
    microsoft · windows 10
    EPSS30%
    2 exploits
    Published Jan 13, 2016
  • CVE-2015-2562High 7.5
    Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla!
    web-dorado · ecommerce wd
    EPSS39%
    2 exploits
    Published Mar 20, 2015
  • CVE-2014-2962High 7.8
    Absolute path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware before 1.00.08 allows remote attackers to read arbitrary files via a full pathname in the getpage parameter.
    belkin · n150 f9k1009
    EPSS47%
    1 exploit
    Published Jun 19, 2014
  • CVE-2010-3714High 7.1
    TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism
    typo3 · typo3
    EPSS24%
    1 exploit
    Published May 17, 2022
  • CVE-2006-5379High 7.5
    The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be…
    nvidia · binary graphics driver
    EPSS27%
    1 exploit
    Published Oct 18, 2006
  • CVE-2006-0058High 7.6
    Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.
    sendmail · sendmail
    EPSS29%
    1 exploit
    Published Mar 22, 2006
  • CVE-2005-2340High 7.5
    Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a crafted (1) QuickTime Image File (QTIF), (2) PICT, or (3) JPEG format image with a long data field.
    apple · quicktime
    EPSS26%
    1 exploit
    Published Dec 31, 2005
  • CVE-2005-1344High 7.5
    Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument.
    apache · http server
    EPSS29%
    2 exploits
    Published May 2, 2005
  • CVE-2005-0416High 7.5
    The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow.
    microsoft · windows 2000
    EPSS41%
    2 exploits
    Published Apr 27, 2005
  • CVE-2002-0764High 7.5
    Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php that modifies the PHORUM[settings_dir] variable to point to a directory that contains a PHP file with the commands.
    phorum · phorum
    EPSS38%
    1 exploit
    Published Aug 12, 2002
  • CVE-2000-0305High 7.8
    Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability.
    microsoft · terminal server
    EPSS38%
    1 exploit
    Published May 19, 2000
  • CVE-2026-98180High 7.1
    drm/msm: RCU-free the scheduler-containing ring and VM objects
    linux · linux kernel
    EPSS0.1%
    1 exploit
    Published Oct 6, 2026
  • CVE-2025-58180High 7.5
    OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload
    octoprint · octoprint
    EPSS21%
    1 exploit
    Published Sep 9, 2025
  • CVE-2024-0265High 8.8
    It has been rated as critical.
    oretnom23 · clinic queuing system
    EPSS21%
    1 exploit
    Published Jan 7, 2024
  • CVE-2023-28310High 8.0
    Microsoft Exchange Server Remote Code Execution Vulnerability
    microsoft · exchange server
    EPSS25%
    ·
    Published Jun 15, 2023
  • CVE-2022-46770High 7.5
    qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of service (CPU consumption and loss of forwarding) via a crafted multicast UDP packet (IP address range of 224.0.0.0 through 239.255.255.255).
    linuxfoundation · mirage firewall
    EPSS22%
    1 exploit
    Published Dec 7, 2022
  • CVE-2022-23854High 7.5
    AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user with network access to read files on the system outside of the secure gateway web server.
    aveva · intouch access anywhere
    EPSS47%
    1 exploit
    Published Dec 23, 2022
  • CVE-2021-28143High 8.0
    /jsonrpc on D-Link DIR-841 3.03 and 3.04 devices allows authenticated command injection via ping, ping6, or traceroute (under System Tools).
    dlink · dir-841 firmware
    EPSS47%
    1 exploit
    Published Mar 11, 2021
  • CVE-2021-20040High 7.5
    A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload crafted web pages or files as a 'nobody' user.
    sonicwall · sma 200 firmware
    EPSS25%
    ·
    Published Jan 4, 2022
  • CVE-2020-24219High 7.5
    An issue was discovered on URayTech IPTV/H.264/H.265 video encoders through 1.97.
    szuray · iptv\/h.264 video encoder firmware
    EPSS24%
    2 exploits
    Published Oct 6, 2020
  • CVE-2020-11107High 8.8
    An unprivileged user can change a .exe configuration in xampp-contol.ini for all users (including admins) to enable arbitrary command execution.
    apachefriends · xampp
    EPSS22%
    2 exploits
    Published Apr 2, 2020
  • CVE-2019-9041High 7.2
    In the inc/zzz_template.php file, the parserIfLabel() function's filtering is not strict, resulting in PHP code execution, as demonstrated by the if:assert substring.
    zzzcms · zzzphp
    EPSS31%
    2 exploits
    Published Feb 23, 2019
  • CVE-2019-0573High 7.8
    An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.
    microsoft · windows 10
    EPSS20%
    2 exploits
    Published Jan 8, 2019
  • CVE-2017-9946High 7.5
    An attacker with network access to the integrated web server (80/tcp and 443/tcp) could bypass the authentication and download sensitive information from the device.
    siemens · apogee pxc firmware
    EPSS25%
    1 exploit
    Published Oct 23, 2017
  • CVE-2017-17058High 7.5
    The WooCommerce plugin through 3.x for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/woocommerce/templates/emails/plain/ URI, which accesses a parent directory.
    automattic · woocommerce
    EPSS24%
    1 exploit
    Published Nov 29, 2017
  • CVE-2017-0781High 8.8
    A remote code execution vulnerability in the Android system (bluetooth).
    google · android
    EPSS23%
    2 exploits
    Published Sep 14, 2017
  • CVE-2017-0283High 8.8
    Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016, Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office Word Viewer, Microsoft Lync 2013…
    microsoft · lync
    EPSS39%
    1 exploit
    Published Jun 14, 2017
  • CVE-2017-0202High 7.5
    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory.
    microsoft · internet explorer
    EPSS46%
    1 exploit
    Published Apr 12, 2017
  • CVE-2017-0084High 8.8
    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web…
    microsoft · windows 10
    EPSS37%
    1 exploit
    Published Mar 16, 2017
Showing 301–350 of 521

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.

Figures as of Oct 19, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.