CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,519 CVEs
1,726 on KEV
17,265 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-27
10,151 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2018-0833 EXP | The Microsoft Server Message Block 2.0 and 3.0 (SMBv2/SMBv3) client in Windows 8.1 and RT 8.1 and Windows Server 2012 R2 allows a denial of service vu… | Patch early | 5.3 medium | 39.9% | 2018-02-15 |
| CVE-2015-0252 EXP | internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service (segmentation fault and crash) via crafted… | Patch early | 5.0 medium | 39.7% | 2015-03-24 |
| CVE-2021-25156 EXP | A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x:… | Patch early | 4.9 medium | 39.7% | 2021-03-30 |
| CVE-2006-0030 EXP | Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to… | Patch early | 5.1 medium | 39.6% | 2006-03-14 |
| CVE-2015-2067 EXP | Directory traversal vulnerability in web/ajax_pluginconf.php in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allows remote attacker… | Patch early | 5.0 medium | 39.4% | 2015-02-24 |
| CVE-2007-5631 EXP | Multiple PHP remote file inclusion vulnerabilities in PeopleAggregator 1.2pre6, when register_globals is enabled, allow remote attackers to execute ar… | Patch early | 6.8 medium | 39.4% | 2007-10-23 |
| CVE-2007-4815 EXP | Multiple PHP remote file inclusion vulnerabilities in WebED in Markus Iser ED Engine 0.8999 alpha allow remote attackers to execute arbitrary PHP code… | Patch early | 6.8 medium | 39.4% | 2007-09-11 |
| CVE-2011-2757 EXP | Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12 and earlier allows remote attackers to read arbitrary… | Patch early | 5.0 medium | 39.4% | 2011-07-17 |
| CVE-2018-16133 EXP | Cybrotech CyBroHttpServer 1.0.3 allows Directory Traversal via a ../ in the URI. | Patch early | 5.3 medium | 39.3% | 2018-08-29 |
| CVE-2017-14537 EXP | trixbox 2.8.0.4 has path traversal via the xajaxargs array parameter to /maint/index.php?packages or the lang parameter to /maint/modules/home/index.p… | Patch early | 6.5 medium | 39.3% | 2018-02-16 |
| CVE-2014-2383 EXP | dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitra… | Patch early | 6.8 medium | 39.2% | 2014-04-28 |
| CVE-2006-4301 EXP | Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attribute in multiple DirectX Media… | Patch early | 5.0 medium | 39.1% | 2006-08-23 |
| CVE-2009-3641 EXP | Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packe… | Patch early | 4.3 medium | 38.8% | 2009-10-28 |
| CVE-2018-8716 EXP | WSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged attackers. | Patch early | 5.4 medium | 38.7% | 2018-04-25 |
| CVE-2013-5093 EXP | The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows… | Patch early | 6.8 medium | 38.7% | 2013-09-27 |
| CVE-2015-7309 EXP | The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, which allows remote authenticated users to execute arbitr… | Patch early | 6.5 medium | 38.6% | 2015-09-22 |
| CVE-2007-5102 EXP | PHP remote file inclusion vulnerability in config.inc.php in Wordsmith 1.0 RC1, when register_globals is enabled, allows remote attackers to execute a… | Patch early | 6.8 medium | 38.6% | 2007-09-26 |
| CVE-2007-5315 EXP | PHP remote file inclusion vulnerability in common.php in LiveAlbum 0.9.0, when register_globals is enabled, allows remote attackers to execute arbitra… | Patch early | 6.8 medium | 38.6% | 2007-10-09 |
| CVE-2007-5781 EXP | PHP remote file inclusion vulnerability in inc/sige_init.php in Sige 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the SYS_PA… | Patch early | 6.8 medium | 38.6% | 2007-11-01 |
| CVE-2007-5015 EXP | Multiple PHP remote file inclusion vulnerabilities in Streamline PHP Media Server 1.0-beta4 allow remote attackers to execute arbitrary PHP code via a… | Patch early | 6.8 medium | 38.6% | 2007-09-20 |
| CVE-2014-8598 EXP | The XML Import/Export plugin in MantisBT 1.2.x does not restrict access, which allows remote attackers to (1) upload arbitrary XML files via the impor… | Patch early | 6.4 medium | 38.5% | 2014-11-18 |
| CVE-2012-6636 EXP | The Android API before 17 does not properly restrict the WebView.addJavascriptInterface method, which allows remote attackers to execute arbitrary met… | Patch early | 6.8 medium | 38.5% | 2014-03-03 |
| CVE-2001-1501 EXP | The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of service (CPU and memory consumption)… | Patch early | 5.0 medium | 38.4% | 2001-12-31 |
| CVE-2007-5388 EXP | Multiple PHP remote file inclusion vulnerabilities in WebDesktop 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) app par… | Patch early | 6.8 medium | 38.4% | 2007-10-12 |
| CVE-2007-4906 EXP | PHP remote file inclusion vulnerability in tasks/send_queued_emails.php in NuclearBB Alpha 2, when register_globals is enabled, allows remote attacker… | Patch early | 6.8 medium | 38.4% | 2007-09-17 |
| CVE-2006-1518 EXP | Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to execute arbitrary code via craft… | Patch early | 6.5 medium | 38.4% | 2006-05-05 |
| CVE-2018-7286 EXP | An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2. res_pjs… | Patch early | 6.5 medium | 38.3% | 2018-02-22 |
| CVE-2002-0419 EXP | Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easily conduct brute force attacks v… | Patch early | 5.0 medium | 38.2% | 2002-08-12 |
| CVE-2007-6514 EXP | Apache HTTP Server, when running on Linux with a document root on a Windows share mounted using smbfs, allows remote attackers to obtain unprocessed c… | Patch early | 4.3 medium | 38% | 2007-12-21 |
| CVE-2002-0325 EXP | Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the URL. | Patch early | 5.0 medium | 37.8% | 2002-06-25 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt