CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,514 CVEs
1,726 on KEV
17,265 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-27
10,151 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2009-0815 EXP | The jumpUrl mechanism in class.tslib_fe.php in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 leaks… | Patch early | 5.0 medium | 42.2% | 2009-03-05 |
| CVE-2013-2492 EXP | Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windows allows remote attackers to… | Patch early | 6.8 medium | 42.2% | 2013-03-15 |
| CVE-2013-4490 EXP | The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote a… | Patch early | 6.5 medium | 42.1% | 2014-05-13 |
| CVE-2012-0840 EXP | tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash coll… | Patch early | 5.0 medium | 42.1% | 2012-02-10 |
| CVE-2017-0121 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT… | Patch early | 4.3 medium | 42.1% | 2017-03-17 |
| CVE-2010-4172 EXP | Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow re… | Patch early | 4.3 medium | 42% | 2010-11-26 |
| CVE-2008-3983 EXP | Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote aut… | Patch early | 5.5 medium | 41.8% | 2008-10-14 |
| CVE-2008-3984 EXP | Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote aut… | Patch early | 5.5 medium | 41.8% | 2008-10-14 |
| CVE-2007-4923 EXP | PHP remote file inclusion vulnerability in admin.joomlaradiov5.php in the Joomla Radio 5 (com_joomlaradiov5) component for Joomla! allows remote attac… | Patch early | 6.8 medium | 41.6% | 2007-09-17 |
| CVE-2002-2007 EXP | The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings a… | Patch early | 5.0 medium | 41.4% | 2002-12-31 |
| CVE-2011-0966 EXP | Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows re… | Patch early | 6.8 medium | 41.3% | 2011-05-20 |
| CVE-2004-0430 EXP | Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a LoginExt packet… | Patch early | 5.1 medium | 41.3% | 2004-07-07 |
| CVE-2022-29548 EXP | A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, an… | Patch early | 4.6 medium | 41.1% | 2022-04-21 |
| CVE-2015-3083 EXP | Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17… | Patch early | 6.4 medium | 41.1% | 2015-05-13 |
| CVE-2007-5654 EXP | LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary MIME type for a file via a "%00." sequence followed by a new… | Patch early | 5.0 medium | 41.1% | 2007-10-23 |
| CVE-2018-14493 EXP | Cross-site scripting (XSS) vulnerability in the Groups Page in Open-Audit Community 2.2.6 allows remote attackers to inject arbitrary web script or HT… | Patch early | 6.1 medium | 40.9% | 2018-07-25 |
| CVE-2014-8676 EXP | Directory traversal vulnerability in the file_get_contents function in SOPlanning 1.32 and earlier allows remote attackers to determine the existence… | Patch early | 5.3 medium | 40.8% | 2017-08-31 |
| CVE-2007-1286 EXP | Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize fun… | Patch early | 6.8 medium | 40.4% | 2007-03-06 |
| CVE-2006-3493 EXP | Buffer overflow in LsCreateLine function (mso_203) in mso.dll and mso9.dll, as used by Microsoft Word and possibly other products in Microsoft Office… | Patch early | 5.1 medium | 40.4% | 2006-07-10 |
| CVE-2006-2111 EXP | A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections wit… | Patch early | 4.3 medium | 40.3% | 2006-05-01 |
| CVE-2005-2852 EXP | Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a denial of service (ABEND) via an… | Patch early | 5.0 medium | 40.3% | 2005-09-08 |
| CVE-2007-5641 EXP | Multiple PHP remote file inclusion vulnerabilities in PHP Project Management 0.8.10 and earlier allow remote attackers to execute arbitrary PHP code v… | Patch early | 6.8 medium | 40.3% | 2007-10-23 |
| CVE-2007-5407 EXP | Multiple PHP remote file inclusion vulnerabilities in the JContentSubscription (com_jcs) 1.5.8 component for Joomla! allow remote attackers to execute… | Patch early | 6.8 medium | 40.2% | 2007-10-12 |
| CVE-2022-23513 EXP | Pi-Hole is a network-wide ad blocking via your own Linux hardware, AdminLTE is a Pi-hole Dashboard for stats and more. In case of an attack, the threa… | Patch early | 5.3 medium | 40.2% | 2022-12-23 |
| CVE-2007-2481 EXP | PHP remote file inclusion vulnerability in wordtube-button.php in the wordTube 1.43 and earlier plugin for WordPress, when register_globals is enabled… | Patch early | 6.8 medium | 40.1% | 2007-05-03 |
| CVE-2009-1968 EXP | Unspecified vulnerability in the Secure Enterprise Search component in Oracle Database 10.1.8.3 allows remote attackers to affect integrity via unknow… | Patch early | 4.3 medium | 40.1% | 2009-07-14 |
| CVE-2016-3371 EXP | The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Window… | Patch early | 5.5 medium | 40.1% | 2016-09-14 |
| CVE-1999-0154 EXP | IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL. | Patch early | 5.0 medium | 40% | 1999-12-31 |
| CVE-2010-4051 EXP | The regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to… | Patch early | 5.0 medium | 40% | 2011-01-13 |
| CVE-2006-4110 EXP | Apache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI programs via a request that contains uppercase (or alternate… | Patch early | 4.3 medium | 40% | 2006-08-14 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt