CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
403,173 CVEs
1,734 on KEV
17,293 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-08
25,091 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2006-4844 EXP | PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other products,… | Patch early | 5.1 medium | 10.4% | 2006-09-19 |
| CVE-2008-5748 EXP | Directory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows remote attackers to read arbitrary files via the (1)… | Patch early | 8.1 high | 10.4% | 2008-12-29 |
| CVE-2007-1376 EXP | The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that their arguments correspond to a shmop resource, which… | Patch early | 7.5 high | 10.4% | 2007-03-10 |
| CVE-2004-0270 EXP | libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail message with an invalid line leng… | Patch early | 5.0 medium | 10.4% | 2004-11-23 |
| CVE-2009-0751 EXP | Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with a large number of headers. | Patch early | 5.0 medium | 10.4% | 2009-03-02 |
| CVE-2011-5009 EXP | The CmpWebServer.dll module in the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to cause a denial of service (NULL pointer de… | Patch early | 5.0 medium | 10.4% | 2011-12-25 |
| CVE-2018-12293 EXP | The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior… | Patch early | 8.8 high | 10.4% | 2018-06-19 |
| CVE-2007-2715 EXP | Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the (1) username, or the (2) password… | Patch early | 10.0 high | 10.4% | 2007-05-16 |
| CVE-2010-2777 EXP | Stack-based buffer overflow in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise 7.x before 7.0 post-SP4 FTF and 8.x be… | Patch early | 9.0 high | 10.4% | 2011-01-28 |
| CVE-2012-0781 EXP | The tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via… | Patch early | 5.0 medium | 10.4% | 2012-01-18 |
| CVE-2007-1825 EXP | Buffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5, allows remote attackers to execute arbitrary code via… | Patch early | 7.5 high | 10.4% | 2007-04-02 |
| CVE-2009-2958 EXP | The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service (NULL poi… | Patch early | 4.3 medium | 10.4% | 2009-09-02 |
| CVE-2001-0113 EXP | statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used as part of… | Patch early | 10.0 high | 10.4% | 2001-03-12 |
| CVE-2018-10123 EXP | p910nd on Inteno IOPSYS 2.0 through 4.2.0 allows remote attackers to read, or append data to, arbitrary files via requests on TCP port 9100. | Patch early | 8.8 high | 10.4% | 2018-05-16 |
| CVE-2011-1613 EXP | Unspecified vulnerability in Cisco Wireless LAN Controller (WLC) software 6.0 before 6.0.200.0, 7.0 before 7.0.98.216, and 7.0.1xx before 7.0.112.0 al… | Patch early | 7.8 high | 10.4% | 2011-05-03 |
| CVE-2018-4222 EXP | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affe… | Patch early | 8.8 high | 10.4% | 2018-06-08 |
| CVE-2025-4524 EXP | The Madara – Responsive and modern WordPress theme for manga sites theme for WordPress is vulnerable to Local File Inclusion in all versions up to, an… | Patch early | 9.8 critical | 10.4% | 2025-05-21 |
| CVE-2008-1110 EXP | Buffer overflow in demuxers/demux_asf.c (aka the ASF demuxer) in the xineplug_dmx_asf.so plugin in xine-lib before 1.1.10 allows remote attackers to e… | Patch early | 6.8 medium | 10.4% | 2008-02-29 |
| CVE-2003-0729 EXP | Buffer overflow in Tellurian TftpdNT 1.8 allows remote attackers to execute arbitrary code via a TFTP request with a long filename. | Patch early | 7.5 high | 10.4% | 2003-10-20 |
| CVE-2007-6483 EXP | Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.0.0 through 7.4.0 and possibly earlier versions, and Sentinel Keys Server 1.… | Patch early | 5.0 medium | 10.4% | 2007-12-20 |
| CVE-2005-0643 EXP | Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4357 allows remote attackers to execute arbitrary code via crafted LHA files. | Patch early | 7.5 high | 10.4% | 2005-05-02 |
| CVE-2021-24287 EXP | The settings page of the Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin before 1.3.2 did not properly sanitis… | Patch early | 6.1 medium | 10.4% | 2021-05-14 |
| CVE-2006-2224 EXP | RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify rout… | Patch early | 5.0 medium | 10.4% | 2006-05-05 |
| CVE-2004-1254 EXP | WinRAR 3.40, and possibly earlier versions, allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename, p… | Patch early | 10.0 high | 10.4% | 2005-01-10 |
| CVE-2008-0434 EXP | Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbitrary code via format string sp… | Patch early | 9.3 high | 10.4% | 2008-01-23 |
| CVE-2006-2906 EXP | The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw (GD) library (aka libgd) 2.0.33 allows remote attackers t… | Patch early | 5.4 medium | 10.4% | 2006-06-08 |
| CVE-2019-9833 EXP | The Screen Stream application through 3.0.15 for Android allows remote attackers to cause a denial of service via many simultaneous /start-stop reques… | Patch early | 7.5 high | 10.3% | 2019-03-15 |
| CVE-2021-24169 EXP | This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data. The tab parameter in the A… | Patch early | 6.1 medium | 10.3% | 2021-04-05 |
| CVE-2009-1671 EXP | Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update 13… | Patch early | 9.3 high | 10.3% | 2009-05-18 |
| CVE-2008-4910 EXP | The BasicService in Sun Java Web Start allows remote attackers to execute arbitrary programs on a client machine via a file:// URL argument to the sho… | Patch early | 10.0 high | 10.3% | 2008-11-04 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt