CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,514 CVEs
1,726 on KEV
17,265 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-27
10,151 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2004-1043 EXP | Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help ActiveX Co… | Patch early | 5.0 medium | 45% | 2004-12-31 |
| CVE-2001-0136 EXP | Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the… | Patch early | 5.0 medium | 44.9% | 2001-03-12 |
| CVE-1999-0736 EXP | The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. | Patch early | 5.0 medium | 44.8% | 1999-05-07 |
| CVE-2015-3224 EXP | request.rb in Web Console before 2.1.3, as used with Ruby on Rails 3.x and 4.x, does not properly restrict the use of X-Forwarded-For headers in deter… | Patch early | 4.3 medium | 44.7% | 2015-07-26 |
| CVE-2008-6082 EXP | Titan FTP Server 6.26 build 630 allows remote attackers to cause a denial of service (CPU consumption) via the SITE WHO command. | Patch early | 5.0 medium | 44.6% | 2009-02-06 |
| CVE-2013-1892 EXP | MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMonkey, which allows remote auth… | Patch early | 6.0 medium | 44.5% | 2013-10-01 |
| CVE-2012-2626 EXP | cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not require token authentication, which… | Patch early | 5.0 medium | 44.5% | 2012-07-31 |
| CVE-2007-3101 EXP | Multiple cross-site scripting (XSS) vulnerabilities in certain JSF applications in Apache MyFaces Tomahawk before 1.1.6 allow remote attackers to inje… | Patch early | 4.3 medium | 44.5% | 2007-06-18 |
| CVE-2008-1609 EXP | Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to execute arbitrary PHP code vi… | Patch early | 6.8 medium | 44.3% | 2008-04-01 |
| CVE-2000-0951 EXP | A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web root via a W… | Patch early | 5.0 medium | 44.1% | 2000-12-19 |
| CVE-2005-4145 EXP | The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space ("lyris"… | Patch early | 6.5 medium | 43.9% | 2005-12-10 |
| CVE-2000-0413 EXP | The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP,… | Patch early | 5.0 medium | 43.9% | 2000-05-06 |
| CVE-2006-4704 EXP | Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual… | Patch early | 6.8 medium | 43.9% | 2006-11-01 |
| CVE-2006-3637 EXP | Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle various HTML layout component combinations, which allows user-assisted remote atta… | Patch early | 5.1 medium | 43.8% | 2006-08-08 |
| CVE-2021-31642 EXP | A denial of service condition exists after an integer overflow in several IoT devices from CHIYU Technology, including BIOSENSE, Webpass, and BF-630,… | Patch early | 6.5 medium | 43.7% | 2021-06-01 |
| CVE-2007-3314 EXP | Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 (English Trial), and 2.0 with Portabl… | Patch early | 6.8 medium | 43.4% | 2007-06-21 |
| CVE-2010-0467 EXP | Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files v… | Patch early | 5.8 medium | 43.3% | 2010-02-02 |
| CVE-2016-0169 EXP | GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, a… | Patch early | 6.5 medium | 43.2% | 2016-05-11 |
| CVE-2016-0168 EXP | GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, a… | Patch early | 6.5 medium | 43.2% | 2016-05-11 |
| CVE-2003-0226 EXP | Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request with a (1) PR… | Patch early | 5.0 medium | 43.2% | 2003-06-09 |
| CVE-2017-0061 EXP | The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SP1 allows r… | Patch early | 5.3 medium | 43.1% | 2017-03-17 |
| CVE-2011-1574 EXP | Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary code via a… | Patch early | 6.8 medium | 42.9% | 2011-05-09 |
| CVE-2014-1610 EXP | MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF file upload support is enabled, allows remote attack… | Patch early | 6.0 medium | 42.8% | 2014-01-30 |
| CVE-2023-2796 EXP | The EventON WordPress plugin before 2.1.2 lacks authentication and authorization in its eventon_ics_download ajax action, allowing unauthenticated vis… | Patch early | 5.3 medium | 42.7% | 2023-07-10 |
| CVE-2009-3028 EXP | The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.… | Patch early | 6.8 medium | 42.6% | 2011-03-07 |
| CVE-1999-0891 EXP | The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect. | Patch early | 5.0 medium | 42.6% | 1999-09-01 |
| CVE-2013-3630 EXP | Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a… | Patch early | 4.6 medium | 42.6% | 2013-11-01 |
| CVE-2015-3082 EXP | Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17… | Patch early | 6.4 medium | 42.5% | 2015-05-13 |
| CVE-2007-2340 EXP | Multiple PHP remote file inclusion vulnerabilities in inc/include_all.inc.php in phporacleview allow remote attackers to execute arbitrary PHP code vi… | Patch early | 6.8 medium | 42.4% | 2007-04-27 |
| CVE-2007-5185 EXP | Multiple PHP remote file inclusion vulnerabilities in phpWCMS XT 0.0.7 BETA and earlier allow remote attackers to execute arbitrary PHP code via a URL… | Patch early | 6.8 medium | 42.3% | 2007-10-03 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt