CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
401,033 CVEs
1,733 on KEV
17,286 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-03
25,091 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2017-0119 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 22.5% | 2017-03-17 |
| CVE-2017-0122 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 22.5% | 2017-03-17 |
| CVE-2017-0123 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 22.5% | 2017-03-17 |
| CVE-2017-0124 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 22.5% | 2017-03-17 |
| CVE-2017-0125 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 22.5% | 2017-03-17 |
| CVE-2017-0126 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 22.5% | 2017-03-17 |
| CVE-2017-0127 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 22.5% | 2017-03-17 |
| CVE-2017-0128 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 22.5% | 2017-03-17 |
| CVE-2020-11107 EXP | An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows. An unprivileged user can change a .exe config… | Patch early | 8.8 high | 22.5% | 2020-04-02 |
| CVE-2015-5116 EXP | Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18… | Patch early | 5.0 medium | 22.5% | 2015-07-09 |
| CVE-2017-8550 EXP | A remote code execution vulnerability exists in Skype for Business when the software fails to sanitize specially crafted content, aka "Skype for Busin… | Patch early | 5.4 medium | 22.4% | 2017-06-15 |
| CVE-2015-8770 EXP | Directory traversal vulnerability in the set_skin function in program/include/rcmail_output_html.php in Roundcube before 1.0.8 and 1.1.x before 1.1.4… | Patch early | 7.5 high | 22.4% | 2016-01-29 |
| CVE-2000-0581 EXP | Windows 2000 Telnet Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros, which causes the serve… | Patch early | 5.0 medium | 22.4% | 2000-06-30 |
| CVE-2020-12608 EXP | An issue was discovered in SolarWinds MSP PME (Patch Management Engine) Cache Service before 1.1.15 in the Advanced Monitoring Agent. There are insecu… | Patch early | 7.8 high | 22.4% | 2020-05-07 |
| CVE-2010-0824 EXP | Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel fi… | Patch early | 9.3 high | 22.4% | 2010-06-08 |
| CVE-2010-1247 EXP | Unspecified vulnerability in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD… | Patch early | 9.3 high | 22.4% | 2010-06-08 |
| CVE-2007-4058 EXP | Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll 2.2.5.42958 in EMC VMware 6.0.0 allows remote attackers to execute ar… | Patch early | 4.3 medium | 22.4% | 2007-07-30 |
| CVE-2018-12596 EXP | Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspx pages via… | Patch early | 9.8 critical | 22.4% | 2018-10-10 |
| CVE-2003-0681 EXP | A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-spec… | Patch early | 7.5 high | 22.4% | 2003-10-06 |
| CVE-2000-0942 EXP | The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via… | Patch early | 5.1 medium | 22.4% | 2000-12-19 |
| CVE-2010-1245 EXP | Unspecified vulnerability in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac all… | Patch early | 9.3 high | 22.4% | 2010-06-08 |
| CVE-2004-0835 EXP | MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead o… | Patch early | 7.5 high | 22.4% | 2004-11-03 |
| CVE-2017-3106 EXP | Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation co… | Patch early | 8.8 high | 22.3% | 2017-08-11 |
| CVE-2016-3987 EXP | The HTTP server in Trend Micro Password Manager allows remote web servers to execute arbitrary commands via the url parameter to (1) api/openUrlInDefa… | Patch early | 9.8 critical | 22.3% | 2016-04-12 |
| CVE-2014-2782 EXP | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf… | Patch early | 9.3 high | 22.3% | 2014-06-19 |
| CVE-2013-0662 EXP | Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute a… | Patch early | 9.3 high | 22.3% | 2014-04-01 |
| CVE-2014-2668 EXP | Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via the count parameter to /_uuids. | Patch early | 5.0 medium | 22.3% | 2014-03-28 |
| CVE-2010-1717 EXP | Directory traversal vulnerability in the iF surfALERT (com_if_surfalert) component 1.2 for Joomla! allows remote attackers to read arbitrary files and… | Patch early | 7.5 high | 22.3% | 2010-05-04 |
| CVE-2017-3077 EXP | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser. Successful exploitatio… | Patch early | 9.8 critical | 22.3% | 2017-06-20 |
| CVE-2001-1055 EXP | The Microsoft Windows network stack allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed ARP request packet… | Patch early | 5.0 medium | 22.3% | 2001-07-30 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt