CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
424,684 CVEs
1,779 on KEV
17,541 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-12
25,095 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2001-0414 EXP | Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possibly execute… | Patch early | 10.0 high | 91.9% | 2001-06-18 |
| CVE-2019-0227 EXP | A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits… | Patch early | 7.5 high | 91.9% | 2019-05-01 |
| CVE-2022-31814 EXP | pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the HTTP Host header… | Patch early | 9.8 critical | 91.9% | 2022-09-05 |
| CVE-2015-8103 EXP | The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary code via a crafted serialized Ja… | Patch early | 9.8 critical | 91.9% | 2015-11-25 |
| CVE-2014-8739 EXP | Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Creative Solu… | Patch early | 9.8 critical | 91.9% | 2020-02-08 |
| CVE-2018-10933 EXP | A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without firs… | Patch early | 9.1 critical | 91.8% | 2018-10-17 |
| CVE-2019-9193 EXP | In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_server_program' group to execute ar… | Patch early | 7.2 high | 91.7% | 2019-04-01 |
| CVE-2008-0226 EXP | Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code v… | Patch early | 7.5 high | 91.6% | 2008-01-10 |
| CVE-2020-8654 EXP | An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitra… | Patch early | 8.8 high | 91.3% | 2020-02-07 |
| CVE-2018-3810 EXP | Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to inser… | Patch early | 9.8 critical | 91.3% | 2018-01-01 |
| CVE-2010-4221 EXP | Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to execute arbit… | Patch early | 10.0 high | 91.3% | 2010-11-09 |
| CVE-2014-0569 EXP | Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Ado… | Patch early | 9.3 high | 91.3% | 2014-10-15 |
| CVE-2017-7615 EXP | MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value to verify.php. | Patch early | 8.8 high | 91.2% | 2017-04-16 |
| CVE-2007-0450 EXP | Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_prox… | Patch early | 5.0 medium | 91.2% | 2007-03-16 |
| CVE-2024-25600 EXP | Improper Control of Generation of Code ('Code Injection') vulnerability in Codeer Limited Bricks Builder allows Code Injection.This issue affects Bric… | Patch early | 10.0 critical | 91.1% | 2024-06-04 |
| CVE-2009-3023 EXP | Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbit… | Patch early | 9.0 high | 90.9% | 2009-08-31 |
| CVE-2017-16806 EXP | The Process function in RemoteTaskServer/WebServer/HttpServer.cs in Ulterius before 1.9.5.0 allows HTTP server directory traversal. | Patch early | 7.5 high | 90.9% | 2017-11-13 |
| CVE-2010-0219 EXP | Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of ax… | Patch early | 10.0 high | 90.9% | 2010-10-18 |
| CVE-2016-6600 EXP | Directory traversal vulnerability in the file upload functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to upload and exec… | Patch early | 9.8 critical | 90.8% | 2017-01-23 |
| CVE-2001-0333 EXP | Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and "\" charac… | Patch early | 7.5 high | 90.8% | 2001-06-27 |
| CVE-2014-2623 EXP | Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors. | Patch early | 10.0 high | 90.7% | 2014-07-18 |
| CVE-2011-3368 EXP | The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with us… | Patch early | 5.0 medium | 90.7% | 2011-10-05 |
| CVE-2000-0402 EXP | The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is… | Patch early | 2.1 low | 90.6% | 2000-05-30 |
| CVE-2017-12636 EXP | CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include paths for operating system-level… | Patch early | 7.2 high | 90.6% | 2017-11-14 |
| CVE-2009-0545 EXP | cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type paramet… | Patch early | 10.0 high | 90.4% | 2009-02-12 |
| CVE-2006-2372 EXP | Buffer overflow in the DHCP Client service for Microsoft Windows 2000 SP4, Windows XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers t… | Patch early | 10.0 high | 90.2% | 2006-07-11 |
| CVE-2015-3105 EXP | Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18… | Patch early | 10.0 high | 90.1% | 2015-06-10 |
| CVE-2013-4983 EXP | The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute a… | Patch early | 10.0 high | 90.1% | 2013-09-10 |
| CVE-2018-1207 EXP | Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code. A remote unauthe… | Patch early | 9.8 critical | 90.1% | 2018-03-23 |
| CVE-2017-3599 EXP | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.6.35 an… | Patch early | 7.5 high | 90% | 2017-04-24 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt