CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
403,173 CVEs
1,734 on KEV
17,293 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-08
25,091 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2008-4910 EXP | The BasicService in Sun Java Web Start allows remote attackers to execute arbitrary programs on a client machine via a file:// URL argument to the sho… | Patch early | 10.0 high | 10.3% | 2008-11-04 |
| CVE-2010-1042 EXP | Microsoft Windows Media Player 11 does not properly perform colorspace conversion, which allows remote attackers to cause a denial of service (memory… | Patch early | 4.3 medium | 10.3% | 2010-03-23 |
| CVE-2012-3814 EXP | Unrestricted file upload vulnerability in font-upload.php in the Font Uploader plugin 1.2.4 for WordPress allows remote attackers to execute arbitrary… | Patch early | 7.5 high | 10.3% | 2012-06-27 |
| CVE-2003-0130 EXP | The handle_image function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly escape HTML characters, which allo… | Patch early | 5.0 medium | 10.3% | 2003-03-24 |
| CVE-2015-2281 EXP | Stack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On (FSSO) before build 164 allows remote attackers to execute arbitrary code… | Patch early | 7.5 high | 10.3% | 2015-03-19 |
| CVE-2007-0900 EXP | Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals is enabled, allow remote attack… | Patch early | 7.5 high | 10.3% | 2007-02-13 |
| CVE-2009-1020 EXP | Unspecified vulnerability in the Network Foundation component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote au… | Patch early | 9.0 high | 10.3% | 2009-07-14 |
| CVE-2007-3334 EXP | Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe) components for Ingres Databas… | Patch early | 10.0 high | 10.3% | 2007-06-21 |
| CVE-2005-0129 EXP | The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing "%" variables, wh… | Patch early | 7.5 high | 10.3% | 2005-04-14 |
| CVE-2005-3404 EXP | Multiple PHP file inclusion vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to include arbitrary files via the section parame… | Patch early | 7.5 high | 10.3% | 2005-11-01 |
| CVE-2019-16692 EXP | phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used. | Patch early | 9.8 critical | 10.3% | 2019-09-22 |
| CVE-2015-2863 EXP | Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before… | Patch early | 4.3 medium | 10.3% | 2015-07-20 |
| CVE-2002-1560 EXP | index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges by setting the login parameter to true. | Patch early | 10.0 high | 10.3% | 2003-03-31 |
| CVE-2012-4032 EXP | Open redirect vulnerability in the login page in WebsitePanel before 1.2.2.1 allows remote attackers to redirect users to arbitrary web sites and cond… | Patch early | 5.8 medium | 10.3% | 2012-07-17 |
| CVE-2005-2250 EXP | Buffer overflow in Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary code via a long filename i… | Patch early | 7.5 high | 10.3% | 2005-07-13 |
| CVE-2009-1916 EXP | dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the ns parameter. | Patch early | 10.0 high | 10.3% | 2009-06-04 |
| CVE-2008-4138 EXP | PHP remote file inclusion vulnerability in skin_shop/standard/3_plugin_twindow/twindow_notice.php in TECHNOTE 7 allows remote attackers to execute arb… | Patch early | 10.0 high | 10.3% | 2008-09-24 |
| CVE-2001-0375 EXP | Cisco PIX Firewall 515 and 520 with 5.1.4 OS running aaa authentication to a TACACS+ server allows remote attackers to cause a denial of service via a… | Patch early | 5.0 medium | 10.3% | 2001-06-18 |
| CVE-2018-4314 EXP | A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 fo… | Patch early | 8.8 high | 10.3% | 2019-04-03 |
| CVE-2013-3612 EXP | Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for remote at… | Patch early | 10.0 high | 10.3% | 2013-09-17 |
| CVE-2010-1586 EXP | Open redirect vulnerability in red2301.html in HP System Management Homepage (SMH) 2.x.x.x allows remote attackers to redirect users to arbitrary web… | Patch early | 4.3 medium | 10.3% | 2010-04-28 |
| CVE-2017-8770 EXP | There is LFD (local file disclosure) on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesystem on the device via a crafte… | Patch early | 7.5 high | 10.3% | 2017-09-20 |
| CVE-2011-3495 EXP | Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to read, modify, or delet… | Patch early | 10.0 high | 10.3% | 2011-09-16 |
| CVE-2019-8661 EXP | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.6. A remote attacker may be able to ca… | Patch early | 9.8 critical | 10.3% | 2019-12-18 |
| CVE-2006-5518 EXP | Multiple PHP remote file inclusion vulnerabilities in Christopher Fowler (Rhode Island) RSSonate allow remote attackers to execute arbitrary PHP code… | Patch early | 7.5 high | 10.3% | 2006-10-26 |
| CVE-2002-0748 EXP | LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request that ends in two newline cha… | Patch early | 5.0 medium | 10.3% | 2002-08-12 |
| CVE-2013-6884 EXP | The write-blocker in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a has a default "ditto" username and password, which allows remote… | Patch early | 10.0 high | 10.3% | 2014-01-07 |
| CVE-2019-3978 EXP | RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291. The queries… | Patch early | 7.5 high | 10.3% | 2019-10-29 |
| CVE-2020-6519 EXP | Policy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML page. | Patch early | 6.5 medium | 10.3% | 2020-07-22 |
| CVE-2019-15993 EXP | A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information.… | Patch early | 5.3 medium | 10.3% | 2020-09-23 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt