CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
424,330 CVEs
1,779 on KEV
17,541 EPSS ≥ 10%
25,094 with exploits
synced 2026-11-11
457 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2020-1938 KEV EXP | When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as h… | Patch first | 9.8 critical | 99.3% | 2020-02-24 |
| CVE-2017-0144 KEV EXP | The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Wind… | Patch first | 8.8 high | 99.2% | 2017-03-17 |
| CVE-2020-0646 KEV EXP | A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execu… | Patch first | 9.8 critical | 99.2% | 2020-01-14 |
| CVE-2024-27348 KEV EXP | RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & J… | Patch first | 9.8 critical | 99.2% | 2024-04-22 |
| CVE-2020-11978 KEV EXP | An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DA… | Patch first | 8.8 high | 99.2% | 2020-07-17 |
| CVE-2018-7602 KEV EXP | A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple a… | Patch first | 9.8 critical | 99.2% | 2018-07-19 |
| CVE-2021-44529 KEV EXP | A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited… | Patch first | 9.8 critical | 99.1% | 2021-12-08 |
| CVE-2020-10199 KEV EXP | Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2). | Patch first | 8.8 high | 99.1% | 2020-04-01 |
| CVE-2020-0618 KEV EXP | A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL… | Patch first | 8.8 high | 99% | 2020-02-11 |
| CVE-2019-16278 KEV EXP | Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTT… | Patch first | 9.8 critical | 99% | 2019-10-14 |
| CVE-2026-24061 KEV EXP | telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable. | Patch first | 9.8 critical | 99% | 2026-01-21 |
| CVE-2017-3881 KEV EXP | A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated,… | Patch first | 9.8 critical | 99% | 2017-03-17 |
| CVE-2020-7247 KEV EXP | smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as… | Patch first | 9.8 critical | 99% | 2020-01-29 |
| CVE-2022-36804 KEV EXP | Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, from vers… | Patch first | 8.8 high | 99% | 2022-08-25 |
| CVE-2019-3929 KEV EXP | The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W befor… | Patch first | 9.8 critical | 99% | 2019-04-30 |
| CVE-2017-9791 KEV EXP | The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the Acti… | Patch first | 9.8 critical | 98.9% | 2017-07-10 |
| CVE-2012-3152 KEV EXP | Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attacke… | Patch first | 9.1 critical | 98.8% | 2012-10-16 |
| CVE-2013-2465 KEV EXP | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0… | Patch first | 9.8 critical | 98.8% | 2013-06-18 |
| CVE-2008-4250 KEV EXP | The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remo… | Patch first | 9.8 critical | 98.8% | 2008-10-23 |
| CVE-2015-5119 KEV EXP | Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x… | Patch first | 9.8 critical | 98.6% | 2015-07-08 |
| CVE-2019-17558 KEV EXP | Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provid… | Patch first | 7.5 high | 98.6% | 2019-12-30 |
| CVE-2019-11539 KEV EXP | In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Po… | Patch first | 7.2 high | 98.5% | 2019-04-26 |
| CVE-2012-4681 KEV EXP | Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute ar… | Patch first | 9.8 critical | 98.5% | 2012-08-28 |
| CVE-2026-41940 KEV EXP | cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to g… | Patch first | 9.8 critical | 98.5% | 2026-04-29 |
| CVE-2024-20767 KEV EXP | ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system re… | Patch first | 7.4 high | 98.5% | 2024-03-18 |
| CVE-2019-5418 KEV EXP | There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers… | Patch first | 7.5 high | 98.5% | 2019-03-27 |
| CVE-2016-3088 KEV EXP | The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT foll… | Patch first | 9.8 critical | 98.4% | 2016-06-01 |
| CVE-2017-15944 KEV EXP | Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary… | Patch first | 9.8 critical | 98.3% | 2017-12-11 |
| CVE-2016-1555 KEV EXP | (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802T… | Patch first | 9.8 critical | 98.3% | 2017-04-21 |
| CVE-2022-22947 KEV EXP | In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoin… | Patch first | 10.0 critical | 98.3% | 2022-03-03 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt