CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
424,700 CVEs
1,779 on KEV
17,541 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-12
25,095 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2019-12725 EXP | Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web application mishandles a few HTT… | Patch early | 9.8 critical | 90% | 2019-07-19 |
| CVE-2022-44268 EXP | ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded t… | Patch early | 6.5 medium | 89.9% | 2023-02-06 |
| CVE-2002-0656 EXP | Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client m… | Patch early | 7.5 high | 89.8% | 2002-08-12 |
| CVE-2013-2333 EXP | Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vector… | Patch early | 10.0 high | 89.8% | 2013-06-06 |
| CVE-2019-20501 EXP | D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in the Web in… | Patch early | 7.8 high | 89.8% | 2020-03-05 |
| CVE-2018-7358 EXP | ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper change control vulnerability, whi… | Patch early | 6.5 medium | 89.6% | 2018-11-14 |
| CVE-2023-27253 EXP | A command injection vulnerability in the function restore_rrddata() of Netgate pfSense v2.7.0 allows authenticated attackers to execute arbitrary comm… | Patch early | 8.8 high | 89.5% | 2023-03-17 |
| CVE-2011-3923 EXP | Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands. | Patch early | 9.8 critical | 89.5% | 2019-11-01 |
| CVE-2016-2776 EXP | buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which all… | Patch early | 7.5 high | 89.5% | 2016-09-28 |
| CVE-2018-15708 EXP | Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request. | Patch early | 9.8 critical | 89.5% | 2018-11-14 |
| CVE-2018-14417 EXP | A command injection vulnerability was found in the web administration console in SoftNAS Cloud before 4.0.3. In particular, the snserv script did not… | Patch early | 9.8 critical | 89.4% | 2018-08-04 |
| CVE-2013-1359 EXP | An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Ma… | Patch early | 9.8 critical | 89.4% | 2020-02-11 |
| CVE-2022-24716 EXP | Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of… | Patch early | 7.5 high | 89.4% | 2022-03-08 |
| CVE-2019-5420 EXP | A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess the automatically generated deve… | Patch early | 9.8 critical | 89.3% | 2019-03-27 |
| CVE-2006-0026 EXP | Buffer overflow in Microsoft Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows local and possibly remote attackers to execute arbitrary cod… | Patch early | 6.5 medium | 89.3% | 2006-07-11 |
| CVE-2016-2107 EXP | The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which a… | Patch early | 5.9 medium | 89.1% | 2016-05-05 |
| CVE-2015-2342 EXP | The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans… | Patch early | 10.0 high | 89% | 2015-10-12 |
| CVE-2011-1865 EXP | Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute ar… | Patch early | 10.0 high | 88.9% | 2011-07-01 |
| CVE-2016-6210 EXP | sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username doe… | Patch early | 5.9 medium | 88.9% | 2017-02-13 |
| CVE-2020-8794 EXP | OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies. Although this… | Patch early | 9.8 critical | 88.9% | 2020-02-25 |
| CVE-2018-1000006 EXP | GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically El… | Patch early | 8.8 high | 88.8% | 2018-01-24 |
| CVE-2019-2729 EXP | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected a… | Patch early | 9.8 critical | 88.8% | 2019-06-19 |
| CVE-2003-0722 EXP | The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSui… | Patch early | 10.0 high | 88.8% | 2003-09-22 |
| CVE-2011-1653 EXP | Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote attackers to e… | Patch early | 10.0 high | 88.7% | 2011-04-18 |
| CVE-2004-1520 EXP | Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE command. | Patch early | 4.6 medium | 88.5% | 2004-12-31 |
| CVE-2015-0240 EXP | The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5… | Patch early | 10.0 high | 88.2% | 2015-02-24 |
| CVE-2021-20837 EXP | Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.5002 and… | Patch early | 9.8 critical | 88.1% | 2021-10-26 |
| CVE-2020-35729 EXP | KLog Server 2.4.1 allows OS command injection via shell metacharacters in the actions/authenticate.php user parameter. | Patch early | 9.8 critical | 88.1% | 2020-12-27 |
| CVE-2021-24145 EXP | Arbitrary file upload in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly check the imported file, allowing… | Patch early | 7.2 high | 88% | 2021-03-18 |
| CVE-2018-1000115 EXP | Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UDP support o… | Patch early | 7.5 high | 88% | 2018-03-05 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt