CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,502 CVEs
1,726 on KEV
17,265 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-27
12,661 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2017-7615 EXP | MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value to verify.php. | Patch early | 8.8 high | 91.1% | 2017-04-16 |
| CVE-2015-7547 EXP | Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6)… | Patch early | 8.1 high | 91% | 2016-02-18 |
| CVE-2009-3023 EXP | Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbit… | Patch early | 9.0 high | 90.9% | 2009-08-31 |
| CVE-2010-0219 EXP | Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of ax… | Patch early | 10.0 high | 90.9% | 2010-10-18 |
| CVE-2001-0333 EXP | Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and "\" charac… | Patch early | 7.5 high | 90.8% | 2001-06-27 |
| CVE-2019-20501 EXP | D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in the Web in… | Patch early | 7.8 high | 90.5% | 2020-03-05 |
| CVE-2009-0545 EXP | cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type paramet… | Patch early | 10.0 high | 90.4% | 2009-02-12 |
| CVE-2006-2372 EXP | Buffer overflow in the DHCP Client service for Microsoft Windows 2000 SP4, Windows XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers t… | Patch early | 10.0 high | 90.2% | 2006-07-11 |
| CVE-2015-3105 EXP | Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18… | Patch early | 10.0 high | 90.1% | 2015-06-10 |
| CVE-2013-4983 EXP | The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute a… | Patch early | 10.0 high | 90.1% | 2013-09-10 |
| CVE-2017-3599 EXP | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.6.35 an… | Patch early | 7.5 high | 89.9% | 2017-04-24 |
| CVE-2002-0656 EXP | Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client m… | Patch early | 7.5 high | 89.8% | 2002-08-12 |
| CVE-2013-2333 EXP | Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vector… | Patch early | 10.0 high | 89.8% | 2013-06-06 |
| CVE-2017-12636 EXP | CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include paths for operating system-level… | Patch early | 7.2 high | 89.7% | 2017-11-14 |
| CVE-2023-27253 EXP | A command injection vulnerability in the function restore_rrddata() of Netgate pfSense v2.7.0 allows authenticated attackers to execute arbitrary comm… | Patch early | 8.8 high | 89.5% | 2023-03-17 |
| CVE-2016-2776 EXP | buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which all… | Patch early | 7.5 high | 89.5% | 2016-09-28 |
| CVE-2014-2623 EXP | Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors. | Patch early | 10.0 high | 89.4% | 2014-07-18 |
| CVE-2022-24716 EXP | Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of… | Patch early | 7.5 high | 89.4% | 2022-03-08 |
| CVE-2015-2342 EXP | The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans… | Patch early | 10.0 high | 89% | 2015-10-12 |
| CVE-2011-1865 EXP | Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute ar… | Patch early | 10.0 high | 88.9% | 2011-07-01 |
| CVE-2003-0722 EXP | The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSui… | Patch early | 10.0 high | 88.8% | 2003-09-22 |
| CVE-2011-1653 EXP | Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote attackers to e… | Patch early | 10.0 high | 88.7% | 2011-04-18 |
| CVE-2004-2687 EXP | distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary c… | Patch early | 9.3 high | 88.2% | 2004-12-31 |
| CVE-2018-1000115 EXP | Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UDP support o… | Patch early | 7.5 high | 88.1% | 2018-03-05 |
| CVE-2015-0240 EXP | The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5… | Patch early | 10.0 high | 88% | 2015-02-24 |
| CVE-2022-30781 EXP | Gitea before 1.16.7 does not escape git fetch remote. | Patch early | 7.5 high | 87.9% | 2022-05-16 |
| CVE-2009-0658 EXP | Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF docu… | Patch early | 7.8 high | 87.8% | 2009-02-20 |
| CVE-2020-8605 EXP | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute arbitrary code on affected installat… | Patch early | 8.8 high | 87.8% | 2020-05-27 |
| CVE-2009-1429 EXP | The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Se… | Patch early | 10.0 high | 87.7% | 2009-04-29 |
| CVE-2024-43425 EXP | A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requir… | Patch early | 8.1 high | 87.5% | 2024-11-07 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt