Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Watchlist

The CVE Watchlist, Under Review.

Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.

Synced hourly · figures as of Oct 19, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
1,460 vulnerabilities · highest score first
  • CVE-2023-3824Critical 9.8
    In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE.
    php · php
    EPSS22%
    1 exploit
    Published Aug 11, 2023
  • CVE-2023-37629Critical 9.8
    Online Piggery Management System 1.0 is vulnerable to File Upload.
    simple online piggery management system project · simple online piggery management system
    EPSS23%
    3 exploits
    Published Jul 12, 2023
  • CVE-2023-36756High 8.0
    Microsoft Exchange Server Remote Code Execution Vulnerability
    microsoft · exchange server
    EPSS49%
    ·
    Published Sep 13, 2023
  • CVE-2022-29383Critical 9.8
    NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi.
    netgear · ssl312 firmware
    EPSS49%
    1 exploit
    Published May 13, 2022
  • CVE-2022-28079High 8.8
    College Management System v1.0 was discovered to contain a SQL injection vulnerability via the course_code parameter.
    college management system project · college management system
    EPSS29%
    3 exploits
    Published May 5, 2022
  • CVE-2022-27226High 8.8
    A CSRF issue in /api/crontab on iRZ Mobile Routers through 2022-03-16 allows a threat actor to create a crontab entry in the router administration panel.
    irz · rl01 firmware
    EPSS34%
    3 exploits
    Published Mar 19, 2022
  • CVE-2022-26965High 7.2
    In Pluck 4.7.16, an admin user can use the theme upload functionality at /admin.php?action=themeinstall to perform remote code execution.
    pluck-cms · pluck
    EPSS36%
    2 exploits
    Published Mar 18, 2022
  • CVE-2022-23046High 7.2
    PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php
    phpipam · phpipam
    EPSS25%
    2 exploits
    Published Jan 19, 2022
  • CVE-2022-1556Critical 9.8
    StaffList <= 3.1.2 - Authenticated SQL Injection
    era404 · stafflist
    EPSS20%
    1 exploit
    Published May 31, 2022
  • CVE-2021-28113Medium 6.7
    A command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access Gateway before 2020.9.3 allows attackers (with admin access to the Okta Access Gateway UI) to execute OS commands as a privileged system account.
    okta · access gateway
    EPSS22%
    1 exploit
    Published Apr 2, 2021
  • CVE-2020-24214Critical 9.8
    Attackers can send a crafted unauthenticated RTSP request to cause a buffer overflow and application crash.
    provideoinstruments · vecaster-4k-hevc firmware
    EPSS35%
    2 exploits
    Published Oct 6, 2020
  • CVE-2020-14008High 7.2
    Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in a specific location, which leads to remote code execution.
    zohocorp · manageengine applications manager
    EPSS40%
    2 exploits
    Published Sep 4, 2020
  • CVE-2020-12503High 7.2
    Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3…
    pepperl-fuchs · es7506 firmware
    EPSS23%
    2 exploits
    Published Oct 15, 2020
  • CVE-2019-7265Critical 9.8
    Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).
    nortekcontrol · linear emerge elite firmware
    EPSS23%
    2 exploits
    Published Jul 2, 2019
  • CVE-2019-6110Medium 6.8
    In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.
    openbsd · openssh
    EPSS25%
    3 exploits
    Published Jan 31, 2019
  • CVE-2019-5893Critical 9.8
    Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter.
    nelson-it · open source erp
    EPSS25%
    3 exploits
    Published Jan 10, 2019
  • CVE-2019-17124Critical 9.8
    Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.
    kramerav · viaware
    EPSS23%
    3 exploits
    Published Oct 9, 2019
  • CVE-2019-16119Critical 9.8
    SQL injection in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via the admin/controllers/Albumsgalleries.php album_id parameter.
    10web · photo gallery
    EPSS25%
    1 exploit
    Published Sep 8, 2019
  • CVE-2019-15813High 8.8
    Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arbitrary code via a webshell.
    sentrifugo · sentrifugo
    EPSS33%
    3 exploits
    Published Sep 4, 2019
  • CVE-2019-15715High 7.2
    MantisBT Remote Code Execution
    mantisbt · mantisbt
    EPSS30%
    2 exploits
    Published May 24, 2022
  • CVE-2019-14927High 7.5
    An issue was discovered on Mitsubishi Electric Europe B.V.
    inea · me-rtu firmware
    EPSS41%
    1 exploit
    Published Sep 10, 2021
  • CVE-2019-0186Medium 6.1
    Cross-site Scripting in Apache Pluto Chatroom demo
    apache · pluto
    EPSS21%
    3 exploits
    Published May 24, 2022
  • CVE-2018-7658High 7.5
    NTSServerSvc.exe in the server in Softros Network Time System 2.3.4 allows remote attackers to cause a denial of service (daemon crash) by sending exactly 11 bytes.
    softros · network time system
    EPSS39%
    3 exploits
    Published Mar 26, 2018
  • CVE-2018-7582High 7.5
    WebLog Expert Web Server Enterprise 9.4 allows Remote Denial Of Service (daemon crash) via a long HTTP Accept Header to TCP port 9991.
    weblogexpert · weblog expert
    EPSS36%
    3 exploits
    Published Mar 9, 2018
  • CVE-2018-7171High 7.5
    Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of arbitrary directories via a ..
    lynxtechnology · twonky server
    EPSS28%
    3 exploits
    Published Mar 30, 2018
  • CVE-2018-6317Critical 9.1
    The remote management interface in Claymore Dual Miner 10.5 and earlier is vulnerable to an unauthenticated format string vulnerability, allowing remote attackers to read memory or cause a denial of service.
    claymore dual miner project · claymore dual miner
    EPSS44%
    2 exploits
    Published Feb 2, 2018
  • CVE-2018-6008High 7.5
    Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla!
    joomlatag · jtag members directory
    EPSS37%
    3 exploits
    Published Jan 29, 2018
  • CVE-2018-5973Critical 9.8
    SQL Injection exists in Professional Local Directory Script 1.0 via the sellers_subcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter.
    eihitech · professional local directory script
    EPSS20%
    3 exploits
    Published Jan 25, 2018
  • CVE-2018-4416High 8.8
    Multiple memory corruption issues were addressed with improved memory handling.
    apple · icloud
    EPSS35%
    1 exploit
    Published Apr 3, 2019
  • CVE-2018-14364Critical 9.8
    GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write access and resultant remote code execution via the GitLab projects import component.
    gitlab · gitlab
    EPSS48%
    1 exploit
    Published Jul 18, 2018
  • CVE-2018-12980High 8.8
    An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02.
    wago · 762-3000 firmware
    EPSS30%
    2 exploits
    Published Jul 12, 2018
  • CVE-2018-12636High 7.2
    The iThemes Security (better-wp-security) plugin before 7.0.3 for WordPress allows SQL Injection (by attackers with Admin privileges) via the logs page.
    ithemes · security
    EPSS30%
    2 exploits
    Published Jun 22, 2018
  • CVE-2018-12584Critical 9.8
    The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cause a denial of service (buffer overflow) or possibly execute arbitrary code when TLS communication is enabled.
    resiprocate · resiprocate
    EPSS24%
    1 exploit
    Published Jul 16, 2018
  • CVE-2018-10718Critical 10.0
    Stack-based buffer overflow in Activision Infinity Ward Call of Duty Modern Warfare 2 before 2018-04-26 allows remote attackers to execute arbitrary code via crafted packets.
    activision · call of duty modern warfare 2
    EPSS31%
    2 exploits
    Published May 3, 2018
  • CVE-2018-0708High 8.8
    Command injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.
    qnap · q\'center
    EPSS26%
    3 exploits
    Published Jul 16, 2018
  • CVE-2017-7692High 8.8
    squirrelmail: Insufficient escaping of user-supplied data
    squirrelmail · squirrelmail
    EPSS32%
    1 exploit
    Published Apr 19, 2017
  • CVE-2017-6542Critical 9.8
    The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect to the Unix-domain socket representing the forwarded agent connection, which…
    putty · putty
    EPSS22%
    1 exploit
    Published Mar 27, 2017
  • CVE-2017-3077Critical 9.8
    flash-plugin: multiple code execution issues fixed in APSB17-17
    adobe · flash player
    EPSS22%
    1 exploit
    Published Jun 13, 2017
  • CVE-2017-3076Critical 9.8
    flash-plugin: multiple code execution issues fixed in APSB17-17
    adobe · flash player
    EPSS25%
    1 exploit
    Published Jun 13, 2017
  • CVE-2017-3061Critical 9.8
    flash-plugin: multiple code execution issues fixed in APSB17-10
    adobe · flash player
    EPSS25%
    1 exploit
    Published Apr 11, 2017
  • CVE-2017-2885Critical 9.8
    An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58.
    gnome · libsoup
    EPSS23%
    1 exploit
    Published Apr 24, 2018
  • CVE-2017-16885Critical 9.8
    Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices (intended for obtaining information about Internet Usage, Changing Passwords, etc.) allows remote attackers to look for the information without authenticating.
    fiberhome · lm53q1 firmware
    EPSS33%
    2 exploits
    Published Jan 12, 2018
  • CVE-2017-10366Critical 9.8
    Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools.
    oracle · peoplesoft enterprise peopletools
    EPSS43%
    1 exploit
    Published Oct 19, 2017
  • CVE-2016-9899Critical 9.8
    Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption.
    mozilla · firefox
    EPSS21%
    1 exploit
    Published Jun 11, 2018
  • CVE-2016-6896High 7.1
    Directory traversal vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress 4.5.3 allows remote authenticated users to cause a denial of service or read certain text files via a ..
    wordpress · wordpress
    EPSS38%
    1 exploit
    Published Jan 18, 2017
  • CVE-2016-6816High 7.1
    Improper Input Validation in Apache Tomcat
    apache · tomcat
    EPSS40%
    1 exploit
    Published May 13, 2022
  • CVE-2016-5108Critical 9.8
    Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted QuickTime IMA file.
    videolan · vlc media player
    EPSS25%
    1 exploit
    Published Jun 8, 2016
  • CVE-2016-4230High 8.8
    flash-plugin: multiple code execution issues fixed in APSB16-25
    adobe · flash player
    EPSS32%
    1 exploit
    Published Jul 12, 2016
  • CVE-2016-4229High 8.8
    flash-plugin: multiple code execution issues fixed in APSB16-25
    adobe · flash player
    EPSS32%
    1 exploit
    Published Jul 12, 2016
  • CVE-2016-4228High 8.8
    flash-plugin: multiple code execution issues fixed in APSB16-25
    adobe · flash player
    EPSS33%
    1 exploit
    Published Jul 12, 2016
Showing 401–450 of 1,460

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.

Figures as of Oct 19, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.