Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Watchlist

The CVE Watchlist, Under Review.

Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.

Synced hourly · figures as of Oct 19, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
520 vulnerabilities · highest score first
  • CVE-2016-5639High 7.5
    Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to read arbitrary files via a ..
    crestron · airmedia am-100 firmware
    EPSS21%
    1 exploit
    Published Aug 2, 2016
  • CVE-2016-3313High 7.8
    Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory Corruption Vulnerability."
    microsoft · office
    EPSS50%
    1 exploit
    Published Aug 9, 2016
  • CVE-2016-0170High 8.8
    GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted document, aka "Windows Graphics…
    microsoft · windows 10
    EPSS49%
    1 exploit
    Published May 10, 2016
  • CVE-2015-5468High 7.5
    WP eCommerce Shop Styling < 2.6 - Directory Traversal
    wpshopstyling · wp e-commerce shop styling
    EPSS24%
    1 exploit
    Published Jul 4, 2015
  • CVE-2015-3783High 7.5
    SceneKit in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.
    apple · mac os x
    EPSS36%
    1 exploit
    Published Aug 16, 2015
  • CVE-2015-2177High 7.5
    Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via crafted packets on (1) TCP port 102 or (2) Profibus.
    siemens · simatic s7-300 cpu
    EPSS34%
    1 exploit
    Published Mar 7, 2015
  • CVE-2013-2088High 7.1
    contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit permissions to execute arbitrary commands via shell metacharacters in a filename.
    apache · subversion
    EPSS31%
    1 exploit
    Published Jul 31, 2013
  • CVE-2007-2293High 7.6
    Multiple stack-based buffer overflows in the process_sdp function in chan_sip.c of the SIP channel T.38 SDP parser in Asterisk before 1.4.3 allow remote attackers to execute arbitrary code via a long (1) T38FaxRateManagement or (2) T38FaxUdpEC SDP parameter in an SIP message, as…
    asterisk · asterisk
    EPSS24%
    2 exploits
    Published Apr 26, 2007
  • CVE-2006-3124High 7.5
    Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted HTTP headers.
    streamripper · streamripper
    EPSS20%
    2 exploits
    Published Aug 26, 2006
  • CVE-2006-2842High 7.5
    PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the plugins array parameter.
    squirrelmail · squirrelmail
    EPSS47%
    1 exploit
    Published Jun 1, 2006
  • CVE-2006-2444High 7.8
    The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service (crash) via unspecified remote attack vectors that cause failures in snmp_trap_decode that trigger (1) frees of random memory or (2) frees…
    linux · linux kernel
    EPSS22%
    1 exploit
    Published May 20, 2006
  • CVE-2005-3792High 7.5
    Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 with patch 3.1, allows remote attackers to execute arbitrary SQL commands, as demonstrated via the query parameter in a stories type.
    francisco burzi · php-nuke
    EPSS44%
    1 exploit
    Published Nov 24, 2005
  • CVE-2005-2842High 7.5
    Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary code via the username.
    dameware development · mini remote control server
    EPSS21%
    2 exploits
    Published Sep 8, 2005
  • CVE-2005-0063High 7.5
    The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by modifying the CLSID stored in a file so that it is processed by HTML Application Host (MSHTA), as…
    microsoft · windows 2000
    EPSS48%
    1 exploit
    Published May 2, 2005
  • CVE-2003-0681High 7.5
    A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.
    sendmail · sendmail
    EPSS22%
    1 exploit
    Published Oct 6, 2003
  • CVE-2003-0666High 7.5
    Buffer overflow in Microsoft Wordperfect Converter allows remote attackers to execute arbitrary code via modified data offset and data size parameters in a Corel WordPerfect file.
    microsoft · wordperfect converter
    EPSS22%
    2 exploits
    Published Oct 20, 2003
  • CVE-2003-0309High 7.5
    Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary programs via a web document with a large number of duplicate file:// or other requests that point to the program and open multiple file download dialogs, which…
    microsoft · internet explorer
    EPSS50%
    1 exploit
    Published Jun 9, 2003
  • CVE-2002-1375High 7.5
    The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long response.
    oracle · mysql
    EPSS24%
    1 exploit
    Published Dec 12, 2002
  • CVE-2002-1374High 7.5
    The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-character password, which causes MySQL to only compare the provided password against the first character of the real…
    oracle · mysql
    EPSS20%
    1 exploit
    Published Dec 12, 2002
  • CVE-2002-1217High 7.5
    Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses…
    microsoft · internet explorer
    EPSS50%
    1 exploit
    Published Oct 28, 2002
  • CVE-2026-85884High 7.8
    Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.
    microsoft · windows 11 version 26h2 for arm64-based systems
    EPSS0.4%
    1 exploit
    Published Oct 13, 2026
  • CVE-2025-41450High 8.2
    Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2
    EPSS0.4%
    2 exploits
    Published May 8, 2025
  • CVE-2023-50564High 8.8
    An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file.
    pluck-cms · pluck
    EPSS29%
    1 exploit
    Published Dec 14, 2023
  • CVE-2023-36212High 8.8
    File Upload vulnerability in Total CMS v.1.7.4 allows a remote attacker to execute arbitrary code via a crafted PHP file to the edit page function.
    totalcms · total cms
    EPSS26%
    1 exploit
    Published Aug 2, 2023
  • CVE-2023-33782High 8.8
    D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability via the iperf3 diagnostics function.
    dlink · dir-842v2 firmware
    EPSS36%
    1 exploit
    Published Jun 6, 2023
  • CVE-2023-33781High 8.8
    An issue in D-Link DIR-842V2 v1.0.3 allows attackers to execute arbitrary commands via importing a crafted file.
    dlink · dir-842v2 firmware
    EPSS31%
    1 exploit
    Published Jun 6, 2023
  • CVE-2023-1162High 8.8
    UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5.
    draytek · vigor 2960 firmware
    EPSS26%
    1 exploit
    Published Mar 3, 2023
  • CVE-2022-28955High 7.5
    An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php and category_view.php.
    dlink · dir-816l firmware
    EPSS40%
    1 exploit
    Published May 18, 2022
  • CVE-2021-46441High 8.8
    In the "webupg" binary of D-Link DIR-825 G1, because of the lack of parameter verification, attackers can use "cmd" parameters to execute arbitrary system commands after obtaining authorization.
    dlink · dir-825 firmware
    EPSS33%
    1 exploit
    Published Apr 27, 2022
  • CVE-2021-27224High 7.5
    The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allow remote attackers to execute arbitrary code.
    irfanview · wpg
    EPSS38%
    1 exploit
    Published Feb 17, 2021
  • CVE-2021-20043High 8.8
    A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially execute code as the nobody user in the appliance.
    sonicwall · sma 200 firmware
    EPSS23%
    ·
    Published Jan 4, 2022
  • CVE-2020-35606High 8.8
    Arbitrary command execution can occur in Webmin through 1.962.
    webmin · webmin
    EPSS28%
    2 exploits
    Published Dec 21, 2020
  • CVE-2020-10931High 7.5
    Memcached 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted binary protocol header to try_read_command_binary in memcached.c.
    memcached · memcached
    EPSS28%
    1 exploit
    Published Mar 24, 2020
  • CVE-2019-3948High 7.5
    The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0.R, Dahua DH-IPC HX883X and DH-IPC-HX863X V2.622.0000000.7.R, Dahua DH-SD4XXXXX V2.623.0000000.7.R, Dahua DH-SD5XXXXX V2.623.0000000.1.R, Dahua DH-SD6XXXXX…
    dahua · dh-ipc-hx863x
    EPSS25%
    2 exploits
    Published Jul 29, 2019
  • CVE-2019-17418High 7.2
    There is SQL injection via the admin/?n=language&c=language_general&a=doSearchParameter appno parameter, a different issue than CVE-2019-16997.
    metinfo · metinfo
    EPSS49%
    1 exploit
    Published Oct 9, 2019
  • CVE-2019-16997High 7.2
    In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/language/admin/language_general.class.php via the admin/?n=language&c=language_general&a=doExportPack appno parameter.
    metinfo · metinfo
    EPSS49%
    1 exploit
    Published Sep 30, 2019
  • CVE-2018-7777High 8.8
    The vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider Electric U.motion Builder software versions prior to v1.3.4.
    schneider-electric · u.motion builder
    EPSS32%
    1 exploit
    Published Jul 3, 2018
  • CVE-2018-15517High 8.6
    The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but actually allows outbound TCP to any port on any IP address, leading to SSRF, as demonstrated by an…
    dlink · central wifimanager
    EPSS44%
    1 exploit
    Published Jan 31, 2019
  • CVE-2017-9355High 7.4
    XML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted XSPF playlist file.
    subsonic · subsonic
    EPSS27%
    2 exploits
    Published Jun 7, 2017
  • CVE-2017-0090High 8.8
    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…
    microsoft · windows 7
    EPSS43%
    1 exploit
    Published Mar 16, 2017
  • CVE-2017-0088High 8.8
    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Uniscribe Remote Code Execution Vulnerability."
    microsoft · windows 7
    EPSS42%
    1 exploit
    Published Mar 16, 2017
  • CVE-2017-0087High 8.8
    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…
    microsoft · windows 7
    EPSS43%
    1 exploit
    Published Mar 16, 2017
  • CVE-2017-0086High 8.8
    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…
    microsoft · windows 7
    EPSS43%
    1 exploit
    Published Mar 16, 2017
  • CVE-2017-0083High 8.8
    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…
    microsoft · windows 7
    EPSS43%
    1 exploit
    Published Mar 16, 2017
  • CVE-2017-0072High 8.8
    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…
    microsoft · windows 7
    EPSS43%
    1 exploit
    Published Mar 16, 2017
  • CVE-2016-7274High 8.8
    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web…
    microsoft · windows 10
    EPSS42%
    1 exploit
    Published Dec 20, 2016
  • CVE-2016-3316High 7.8
    Microsoft Word 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory Corruption Vulnerability."
    microsoft · word
    EPSS47%
    1 exploit
    Published Aug 9, 2016
  • CVE-2016-3301High 7.8
    The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync…
    microsoft · live meeting
    EPSS44%
    1 exploit
    Published Aug 9, 2016
  • CVE-2011-3315High 7.8
    Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.x before 8.0(3), and Cisco Unified Contact Center Express (aka Unified CCX or UCCX) and Cisco Unified IP Interactive Voice Response…
    cisco · unified communications manager
    EPSS26%
    1 exploit
    Published Oct 27, 2011
  • CVE-2010-1173High 7.1
    The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of service (system crash) via an SCTPChunkInit packet containing multiple invalid parameters that require a…
    linux · linux kernel
    EPSS21%
    1 exploit
    Published May 7, 2010
Showing 351–400 of 520

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.

Figures as of Oct 19, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.