CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
400,921 CVEs
1,733 on KEV
17,286 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-02
25,091 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2013-6225 EXP | LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability | Patch early | 9.8 critical | 26.6% | 2020-01-13 |
| CVE-2007-3763 EXP | The IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appli… | Patch early | 5.0 medium | 26.6% | 2007-07-18 |
| CVE-2011-2003 EXP | Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Serv… | Patch early | 9.3 high | 26.6% | 2011-10-12 |
| CVE-2018-8733 EXP | Authentication bypass vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an unauthenticated attacker to ma… | Patch early | 9.8 critical | 26.6% | 2018-04-18 |
| CVE-2020-5515 EXP | Gila CMS 1.11.8 allows /admin/sql?query= SQL Injection. | Patch early | 7.2 high | 26.5% | 2020-01-06 |
| CVE-2015-3134 EXP | Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18… | Patch early | 10.0 high | 26.5% | 2015-07-09 |
| CVE-2006-6311 EXP | Microsoft Internet Explorer 6.0.2900.2180 allows remote attackers to cause a denial of service via a style attribute in an HTML table tag with a width… | Patch early | 5.0 medium | 26.5% | 2006-12-06 |
| CVE-2008-6938 EXP | Pi3Web 2.0.3 before PL2, when installed on Windows as a desktop application and without using the Pi3Web/Conf/Intenet.pi3, allows remote attackers to… | Patch early | 4.3 medium | 26.5% | 2009-08-11 |
| CVE-2010-4598 EXP | Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the… | Patch early | 5.0 medium | 26.5% | 2010-12-23 |
| CVE-1999-0918 EXP | Denial of service in various Windows systems via malformed, fragmented IGMP packets. | Patch early | 7.8 high | 26.4% | 1999-07-03 |
| CVE-2014-2994 EXP | Stack-based buffer overflow in Acunetix Web Vulnerability Scanner (WVS) 8 build 20120704 allows remote attackers to execute arbitrary code via an HTML… | Patch early | 10.0 high | 26.4% | 2014-04-27 |
| CVE-2022-24627 EXP | An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is an unauthenticated SQL injection in the p parameter of the… | Patch early | 9.8 critical | 26.4% | 2023-05-29 |
| CVE-2011-4518 EXP | Directory traversal vulnerability in the PmWebDir object in the web server in MICROSYS PROMOTIC before 8.1.5 allows remote attackers to read arbitrary… | Patch early | 5.0 medium | 26.4% | 2013-05-23 |
| CVE-2019-19576 EXP | class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar… | Patch early | 9.8 critical | 26.4% | 2019-12-04 |
| CVE-2021-24563 EXP | The Frontend Uploader WordPress plugin through 1.3.2 does not prevent HTML files from being uploaded via its form, allowing unauthenticated user to up… | Patch early | 6.1 medium | 26.4% | 2021-10-11 |
| CVE-2017-16642 EXP | In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back o… | Patch early | 7.5 high | 26.4% | 2017-11-07 |
| CVE-2000-0666 EXP | rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to… | Patch early | 10.0 high | 26.3% | 2000-07-16 |
| CVE-2006-3591 EXP | Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the URL property of a TriEditDocum… | Patch early | 5.0 medium | 26.2% | 2006-07-18 |
| CVE-2020-20277 EXP | There are multiple unauthenticated directory traversal vulnerabilities in different FTP commands in uftpd FTP server versions 2.7 to 2.10 due to impro… | Patch early | 9.8 critical | 26.2% | 2020-12-18 |
| CVE-2019-1150 EXP | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who succes… | Patch early | 8.8 high | 26.2% | 2019-08-14 |
| CVE-2004-0104 EXP | Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code. | Patch early | 7.5 high | 26.2% | 2004-03-03 |
| CVE-2001-0552 EXP | ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell… | Patch early | 10.0 high | 26.2% | 2001-09-20 |
| CVE-2015-2998 EXP | SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote attackers to obtain sensitive information, as demonstra… | Patch early | 5.0 medium | 26.2% | 2015-06-08 |
| CVE-2002-0823 EXP | Buffer overflow in Winhlp32.exe allows remote attackers to execute arbitrary code via an HTML document that calls the HTML Help ActiveX control (HHCtr… | Patch early | 7.5 high | 26.2% | 2002-08-12 |
| CVE-2002-0859 EXP | Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code. | Patch early | 7.5 high | 26.2% | 2002-09-05 |
| CVE-2018-17057 EXP | An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar:// wrapper. | Patch early | 9.8 critical | 26.2% | 2018-09-14 |
| CVE-2008-6132 EXP | Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute… | Patch early | 6.8 medium | 26.1% | 2009-02-13 |
| CVE-2003-0910 EXP | The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attacke… | Patch early | 7.2 high | 26.1% | 2004-06-01 |
| CVE-2015-8644 EXP | Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0… | Patch early | 8.8 high | 26.1% | 2015-12-28 |
| CVE-2015-6024 EXP | ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote authenticated users to execu… | Patch early | 9.8 critical | 26.1% | 2017-02-09 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt