CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
401,061 CVEs
1,733 on KEV
17,286 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-03
25,091 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2017-1000112 EXP | Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE __ip_append_data() calls ip_uf… | Patch early | 7.0 high | 20.8% | 2017-10-05 |
| CVE-2006-3471 EXP | Microsoft Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) via a table with a frameset as a child, which… | Patch early | 5.0 medium | 20.8% | 2006-07-10 |
| CVE-2016-4201 EXP | Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous befor… | Patch early | 9.8 critical | 20.8% | 2016-07-13 |
| CVE-2010-3143 EXP | Untrusted search path vulnerability in Microsoft Windows Contacts allows local users, and possibly remote attackers, to execute arbitrary code and con… | Patch early | 9.3 high | 20.8% | 2010-08-27 |
| CVE-2011-0285 EXP | The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an i… | Patch early | 10.0 high | 20.8% | 2011-04-15 |
| CVE-2010-3227 EXP | Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Microsoft Foundation Class (MFC) Libr… | Patch early | 9.3 high | 20.8% | 2010-10-26 |
| CVE-2022-34046 EXP | An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/sys… | Patch early | 7.5 high | 20.8% | 2022-07-20 |
| CVE-2010-1305 EXP | Directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component 1.23.02 and possibly other versions before 1.26.03, a… | Patch early | 5.0 medium | 20.7% | 2010-04-08 |
| CVE-2006-4495 EXP | Microsoft Internet Explorer allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiat… | Patch early | 7.5 high | 20.7% | 2006-08-31 |
| CVE-2013-1311 EXP | Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers a… | Patch early | 9.3 high | 20.7% | 2013-05-15 |
| CVE-2018-13417 EXP | In Vuze Bittorrent Client 5.7.6.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack.… | Patch early | 9.8 critical | 20.7% | 2018-08-13 |
| CVE-2005-3204 EXP | Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script or HTML via the query string in… | Patch early | 4.3 medium | 20.7% | 2005-10-14 |
| CVE-2022-40032 EXP | SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execu… | Patch early | 9.8 critical | 20.7% | 2023-02-17 |
| CVE-2014-1780 EXP | Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… | Patch early | 9.3 high | 20.7% | 2014-06-11 |
| CVE-2014-1781 EXP | Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web sit… | Patch early | 9.3 high | 20.7% | 2014-06-11 |
| CVE-2014-1782 EXP | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web si… | Patch early | 9.3 high | 20.7% | 2014-06-11 |
| CVE-2014-1783 EXP | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf… | Patch early | 9.3 high | 20.7% | 2014-06-11 |
| CVE-2014-1784 EXP | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf… | Patch early | 9.3 high | 20.7% | 2014-06-11 |
| CVE-2014-1786 EXP | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf… | Patch early | 9.3 high | 20.7% | 2014-06-11 |
| CVE-2014-1790 EXP | Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web si… | Patch early | 9.3 high | 20.7% | 2014-06-11 |
| CVE-2014-1792 EXP | Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web sit… | Patch early | 9.3 high | 20.7% | 2014-06-11 |
| CVE-2014-1794 EXP | Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… | Patch early | 9.3 high | 20.7% | 2014-06-11 |
| CVE-2014-1796 EXP | Microsoft Internet Explorer 6 and 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… | Patch early | 9.3 high | 20.7% | 2014-06-11 |
| CVE-2000-0073 EXP | Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of service via a malformed control word. | Patch early | 5.0 medium | 20.7% | 1999-11-17 |
| CVE-2010-2321 EXP | Buffer overflow in Adobe InDesign CS3 10.0 allows user-assisted remote attackers to execute arbitrary code via a crafted .indd file. | Patch early | 9.3 high | 20.7% | 2010-06-18 |
| CVE-2006-2914 EXP | PHP remote file inclusion vulnerability in DeluxeBB 1.06 allows remote attackers to execute arbitrary code via a URL in the templatefolder parameter t… | Patch early | 5.1 medium | 20.7% | 2006-06-23 |
| CVE-2018-6481 EXP | A buffer overflow vulnerability in the control protocol of Disk Savvy Enterprise v10.4.18 allows remote attackers to execute arbitrary code by sending… | Patch early | 9.8 critical | 20.7% | 2018-02-27 |
| CVE-2000-0105 EXP | Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable that refe… | Patch early | 5.0 medium | 20.7% | 2000-02-01 |
| CVE-2019-0186 EXP | The input fields of the Apache Pluto "Chat Room" demo portlet 3.0.0 and 3.0.1 are vulnerable to Cross-Site Scripting (XSS) attacks. Mitigation: * Unin… | Patch early | 6.1 medium | 20.6% | 2019-04-26 |
| CVE-2006-3729 EXP | DataSourceControl in Internet Explorer 6 on Windows XP SP2 with Office installed allows remote attackers to cause a denial of service (crash) via a la… | Patch early | 2.6 low | 20.6% | 2006-07-21 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt