Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Watchlist

The CVE Watchlist, Under Review.

Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.

Synced hourly · figures as of Oct 20, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
525 vulnerabilities · highest score first
  • CVE-2003-0686High 7.5
    Buffer overflow in PAM SMB module (pam_smb) 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute arbitrary code.
    dave airlie · pam smb
    EPSS27%
    1 exploit
    Published Aug 26, 2003
  • CVE-2002-1131High 7.5
    Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1) addressbook.php, (2) options.php, (3) search.php, or (4) help.php.
    squirrelmail · squirrelmail
    EPSS26%
    1 exploit
    Published Sep 16, 2002
  • CVE-2002-0866High 7.5
    Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL…
    microsoft · virtual machine
    EPSS41%
    1 exploit
    Published Oct 11, 2002
  • CVE-2002-0724High 7.5
    Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows attackers to cause a denial of service (crash) via a SMB_COM_TRANSACTION packet with a request for the (1) NetShareEnum, (2) NetServerEnum2, or (3) NetServerEnum3,…
    microsoft · windows 2000
    EPSS26%
    2 exploits
    Published Sep 24, 2002
  • CVE-2001-0875High 7.5
    Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in a way that could fool users into thinking that the file type is safe to download.
    microsoft · internet explorer
    EPSS28%
    2 exploits
    Published Nov 26, 2001
  • CVE-2001-0341High 7.5
    Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a long registration request (URL) to fp30reg.dll.
    microsoft · frontpage server extensions
    EPSS30%
    2 exploits
    Published Jul 21, 2001
  • CVE-2000-0967High 10.0
    PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs.
    php · php
    EPSS21%
    2 exploits
    Published Oct 12, 2000
  • CVE-2026-27606High 8.8
    Rollup 4 has Arbitrary File Write via Path Traversal
    rollupjs · rollup
    EPSS1.6%
    1 exploit
    Published Feb 25, 2026
  • CVE-2024-49357High 7.5
    In version 1.2.4 and all prior versions, the API endpoints in ZimaOS, such as http:///v1/users/image?path=/var/lib/casaos/1/app_order.json and http:///v1/users/image?path=/var/lib/casaos/1/system.json, expose sensitive data like installed applications and system information…
    zimaspace · zimaos
    EPSS24%
    1 exploit
    Published Oct 24, 2024
  • CVE-2023-26255High 7.5
    An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira.
    stagil · stagil navigation
    EPSS47%
    1 exploit
    Published Feb 28, 2023
  • CVE-2022-30860High 7.2
    FUDforum 3.1.2 is vulnerable to Remote Code Execution through Upload File feature of File Administration System in Admin Control Panel.
    fudforum · fudforum
    EPSS25%
    1 exploit
    Published Jun 6, 2022
  • CVE-2022-30023High 8.8
    Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.
    tenda · hg9 firmware
    EPSS39%
    1 exploit
    Published Jun 16, 2022
  • CVE-2022-28590High 7.2
    A Remote Code Execution (RCE) vulnerability exists in Pixelimity 1.0 via admin/admin-ajax.php?action=install_theme.
    pixelimity · pixelimity
    EPSS24%
    1 exploit
    Published May 3, 2022
  • CVE-2021-46418High 7.5
    An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts.
    telesquare · tlr-2855ks6 firmware
    EPSS24%
    2 exploits
    Published Apr 7, 2022
  • CVE-2021-44595High 8.8
    Wondershare Dr.
    wondershare · dr.fone
    EPSS21%
    2 exploits
    Published Apr 29, 2022
  • CVE-2021-20041High 7.5
    An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to SMA100 /fileshare/sonicfiles/sonicfiles resulting in a loop with unreachable exit condition.
    sonicwall · sma 200 firmware
    EPSS21%
    ·
    Published Jan 4, 2022
  • CVE-2020-8958High 7.2
    Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the boaform/admin/formPing Dest IP Address field.
    gpononu · 1ge\+3fe\+wifi onu v2804rgw firmware
    EPSS46%
    1 exploit
    Published Jul 15, 2020
  • CVE-2020-23972High 7.5
    In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application and can also upload files which due to issues of unrestricted file uploads which can be bypassed by changing the content-type and name file…
    gmapfp · gmapfp
    EPSS31%
    1 exploit
    Published Aug 27, 2020
  • CVE-2016-0121High 8.8
    The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted OpenType…
    microsoft · windows 10
    EPSS39%
    1 exploit
    Published Mar 9, 2016
  • CVE-2014-7864High 7.5
    Multiple SQL injection vulnerabilities in the FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine OpManager 8 through 11.5 build 11400 and IT360 10.5 and earlier allow remote attackers and remote authenticated users to execute arbitrary SQL commands via the (1)…
    zohocorp · manageengine opmanager
    EPSS23%
    2 exploits
    Published Feb 4, 2015
  • CVE-2013-4878High 7.5
    The default configuration of Parallels Plesk Panel 9.0.x and 9.2.x on UNIX, and Small Business Panel 10.x on UNIX, has an improper ScriptAlias directive for phppath, which makes it easier for remote attackers to execute arbitrary code via a crafted request, a different…
    parallels · parallels plesk panel
    EPSS31%
    1 exploit
    Published Jul 18, 2013
  • CVE-2013-1606High 7.5
    Buffer overflow in the ubnt-streamer RTSP service on the Ubiquiti UBNT AirCam with airVision firmware before 1.1.6 allows remote attackers to execute arbitrary code via a long rtsp: URI in a DESCRIBE request.
    ui · aircam
    EPSS23%
    2 exploits
    Published Jul 18, 2013
  • CVE-2013-0090High 8.8
    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CCaret Use After Free Vulnerability."
    microsoft · internet explorer
    EPSS38%
    1 exploit
    Published Mar 12, 2013
  • CVE-2012-5469High 7.3
    Portable phpMyAdmin <= 1.3.0 - Authentication Bypass
    phpmyadmin · phpmyadmin
    EPSS24%
    1 exploit
    Published Jul 31, 2014
  • CVE-2012-3456High 7.5
    Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted…
    calligra · calligra
    EPSS20%
    1 exploit
    Published Aug 20, 2012
  • CVE-2012-1226High 7.5
    Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly execute arbitrary code via a ..
    dolibarr · dolibarr erp\/crm
    EPSS24%
    2 exploits
    Published Feb 21, 2012
  • CVE-2010-2632High 7.8
    Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability.
    sun · sunos
    EPSS35%
    1 exploit
    Published Jan 19, 2011
  • CVE-2006-6379High 7.5
    Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier, ARCserve Backup 9.01 up to 11.1, Enterprise Backup 10.5, and CA Server Protection Suite r2, allows remote attackers to execute arbitrary code via…
    broadcom · server protection suite
    EPSS21%
    1 exploit
    Published Dec 10, 2006
  • CVE-2006-0143High 7.5
    Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of service (crash) via a WMF file containing (1) ExtCreateRegion or (2) ExtEscape function calls with arguments with inconsistent lengths.
    microsoft · windows 2000
    EPSS31%
    1 exploit
    Published Jan 9, 2006
  • CVE-2005-3862High 7.5
    Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives.
    unalz · unalz
    EPSS20%
    1 exploit
    Published Nov 29, 2005
  • CVE-2005-2871High 7.5
    Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and earlier, and Netscape 8.0.3.3 and 7.2, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a hostname with all "soft" hyphens (character…
    mozilla · firefox
    EPSS21%
    1 exploit
    Published Sep 9, 2005
  • CVE-2005-1989High 7.5
    Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly execute code when browsing from a web site to a web folder view using WebDAV, aka "Web Folder Behaviors Cross-Domain Vulnerability".
    microsoft · internet explorer
    EPSS46%
    1 exploit
    Published Aug 10, 2005
  • CVE-2005-0058High 7.5
    Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to elevate privileges or execute arbitrary code via a crafted message.
    microsoft · windows 2000
    EPSS46%
    1 exploit
    Published Aug 10, 2005
  • CVE-2004-1104High 7.5
    Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page that contains a BASE element that points to the legitimate site, followed by an anchor (a) element with an empty "href" attribute,…
    microsoft · ie
    EPSS35%
    1 exploit
    Published Dec 31, 2004
  • CVE-2003-0469High 7.5
    Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via cut-and-paste operation, as demonstrated in Internet Explorer 5.0 using a long "align"…
    microsoft · windows 2000
    EPSS45%
    1 exploit
    Published Aug 7, 2003
  • CVE-2003-0228High 7.5
    Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary code via a skins file with a URL containing hex-encoded backslash characters (%5C) that causes an executable to be placed…
    microsoft · windows media player
    EPSS46%
    1 exploit
    Published May 27, 2003
  • CVE-2002-20001High 7.5
    The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack.
    f5 · big-ip access policy manager
    EPSS25%
    ·
    Published Nov 11, 2021
  • CVE-2002-0693High 7.5
    Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink…
    microsoft · windows 2000
    EPSS31%
    1 exploit
    Published Oct 10, 2002
  • CVE-2001-0932High 7.5
    Buffer overflow in Cooolsoft PowerFTP Server 2.03 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long command.
    cooolsoft · powerftp
    EPSS23%
    2 exploits
    Published Nov 28, 2001
  • CVE-1999-0725High 7.1
    When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a.
    microsoft · internet information server
    EPSS25%
    1 exploit
    Published Aug 19, 1999
  • CVE-2026-96656High 8.6
    Plex Media Server arbitrary file write
    plex · media server
    EPSS0.4%
    1 exploit
    Published Sep 23, 2026
  • CVE-2026-80344High 8.2
    Server-Side Request Forgery (SSRF) vulnerability in Apache Camel AS2 component.
    Published Oct 19, 2026
  • CVE-2026-79983High 7.4
    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel FTP component.
    Published Oct 19, 2026
  • CVE-2025-67303High 7.5
    An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data.
    comfy · comfyui-manager
    EPSS1.4%
    1 exploit
    Published Jan 5, 2026
  • CVE-2024-34783High 7.2
    An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution.
    ivanti · endpoint manager
    EPSS43%
    ·
    Published Sep 12, 2024
  • CVE-2024-32848High 7.2
    An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution.
    ivanti · endpoint manager
    EPSS43%
    ·
    Published Sep 12, 2024
  • CVE-2023-5372High 7.2
    The post-authentication command injection vulnerability in Zyxel NAS326 firmware versions through V5.21(AAZF.15)C0 and NAS542 firmware versions through V5.21(ABAG.12)C0 could allow an authenticated attacker with administrator privileges to execute some operating system (OS)…
    zyxel · nas326 firmware
    EPSS28%
    ·
    Published Jan 30, 2024
  • CVE-2023-46865High 7.2
    /api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an image/png IDAT chunk of a Company Logo image.
    craterapp · crater
    EPSS20%
    1 exploit
    Published Oct 29, 2023
  • CVE-2023-36144High 7.5
    An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, exposing critical information about the device configuration.
    intelbras · sg 2404 mr
    EPSS37%
    1 exploit
    Published Jun 30, 2023
  • CVE-2022-30079High 8.8
    Command injection vulnerability was discovered in Netgear R6200 v2 firmware through R6200v2-V1.0.3.12 via binary /sbin/acos_service that could allow remote authenticated attackers the ability to modify values in the vulnerable parameter.
    netgear · r6200
    EPSS25%
    1 exploit
    Published Sep 8, 2022
Showing 401–450 of 525

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.

Figures as of Oct 20, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.