CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,514 CVEs
1,726 on KEV
17,265 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-27
12,661 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2004-1172 EXP | Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9.1.4691 Hotfix 40, allows remo… | Patch early | 10.0 high | 81.8% | 2005-01-10 |
| CVE-2012-2763 EXP | Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allows remote… | Patch early | 7.5 high | 81.7% | 2012-07-12 |
| CVE-2010-3971 EXP | Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in mshtml.dll, as used in Microsoft… | Patch early | 9.3 high | 81.7% | 2010-12-22 |
| CVE-2007-0774 EXP | Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connect… | Patch early | 7.5 high | 81.5% | 2007-03-04 |
| CVE-2017-17090 EXP | An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified Asterisk 13.… | Patch early | 7.5 high | 81.5% | 2017-12-02 |
| CVE-2016-2098 EXP | Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by… | Patch early | 7.3 high | 81.4% | 2016-04-07 |
| CVE-2017-0290 EXP | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows… | Patch early | 7.8 high | 81.4% | 2017-05-09 |
| CVE-2019-1003002 EXP | A sandbox bypass vulnerability exists in Pipeline: Declarative Plugin 1.3.3 and earlier in pipeline-model-definition/src/main/groovy/org/jenkinsci/plu… | Patch early | 8.8 high | 81.4% | 2019-01-22 |
| CVE-2003-0344 EXP | Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / (slash) characters in the Ty… | Patch early | 7.5 high | 81.3% | 2003-06-16 |
| CVE-2003-0822 EXP | Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to exe… | Patch early | 7.5 high | 81.3% | 2003-12-15 |
| CVE-2017-8779 EXP | rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size durin… | Patch early | 7.5 high | 81.2% | 2017-05-04 |
| CVE-2003-0719 EXP | Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.… | Patch early | 7.5 high | 81.2% | 2004-06-01 |
| CVE-2017-10974 EXP | Yaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Traversal with /%5C../ to port 8080. NOTE: this CVE is only about use of an… | Patch early | 7.5 high | 81.2% | 2017-07-07 |
| CVE-2016-8870 EXP | The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4, when registration has… | Patch early | 8.1 high | 81.1% | 2016-11-04 |
| CVE-2011-0923 EXP | The client in HP Data Protector does not properly validate EXEC_CMD arguments, which allows remote attackers to execute arbitrary Perl code via a craf… | Patch early | 10.0 high | 81.1% | 2011-02-09 |
| CVE-2003-0812 EXP | Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute arbitrary code via R… | Patch early | 7.5 high | 81% | 2003-12-15 |
| CVE-2005-2535 EXP | Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a la… | Patch early | 7.5 high | 80.9% | 2005-08-10 |
| CVE-2010-0094 EXP | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 allows remot… | Patch early | 7.5 high | 80.8% | 2010-04-01 |
| CVE-2018-0758 EXP | Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the… | Patch early | 7.5 high | 80.8% | 2018-01-04 |
| CVE-2017-16666 EXP | Xplico before 1.2.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the name of an uploaded PCAP file. NO… | Patch early | 8.8 high | 80.8% | 2018-01-05 |
| CVE-2010-3552 EXP | Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect conf… | Patch early | 10.0 high | 80.7% | 2010-10-19 |
| CVE-2016-6433 EXP | The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users to execute arbitrary commands… | Patch early | 8.8 high | 80.7% | 2016-10-06 |
| CVE-2019-10669 EXP | An issue was discovered in LibreNMS through 1.47. There is a command injection vulnerability in html/includes/graphs/device/collectd.inc.php where use… | Patch early | 7.2 high | 80.7% | 2019-09-09 |
| CVE-2014-9195 EXP | Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-complia… | Patch early | 10.0 high | 80.7% | 2015-01-17 |
| CVE-2015-7766 EXP | PGSQL:SubmitQuery.do in ZOHO ManageEngine OpManager 11.6, 11.5, and earlier allows remote administrators to bypass SQL query restrictions via a commen… | Patch early | 9.0 high | 80.6% | 2015-10-09 |
| CVE-2015-7808 EXP | The vB_Api_Hook::decodeArguments method in vBulletin 5 Connect 5.1.2 through 5.1.9 allows remote attackers to conduct PHP object injection attacks and… | Patch early | 7.5 high | 80.6% | 2015-11-24 |
| CVE-2011-5034 EXP | Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, whi… | Patch early | 7.8 high | 80.6% | 2011-12-30 |
| CVE-2010-0805 EXP | The Tabular Data Control (TDC) ActiveX control in Microsoft Internet Explorer 5.01 SP4, 6 on Windows XP SP2 and SP3, and 6 SP1 allows remote attackers… | Patch early | 9.3 high | 80.5% | 2010-03-31 |
| CVE-2008-4397 EXP | Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 a… | Patch early | 10.0 high | 80.5% | 2008-10-14 |
| CVE-2009-1185 EXP | udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NET… | Patch early | 7.2 high | 80.4% | 2009-04-17 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt