CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
403,534 CVEs
1,739 on KEV
17,298 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-09
25,091 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2012-3414 EXP | Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as used in WordPress before 3.3.2, TinyMCE Image Manager 1… | Patch early | 4.3 medium | 9.1% | 2013-07-19 |
| CVE-2009-0813 EXP | Insecure method vulnerability in the ImeraIEPlugin ActiveX control (ImeraIEPlugin.dll 1.0.2.54) in Imera TeamLinks Client allows remote attackers to f… | Patch early | 9.3 high | 9.1% | 2009-03-05 |
| CVE-2002-0813 EXP | Heap-based buffer overflow in the TFTP server capability in Cisco IOS 11.1, 11.2, and 11.3 allows remote attackers to cause a denial of service (reset… | Patch early | 7.1 high | 9.1% | 2002-08-12 |
| CVE-1999-0219 EXP | Buffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service (crash) via a long (1) CWD or (2) LS (list) command. | Patch early | 7.8 high | 9.1% | 1997-07-01 |
| CVE-2009-4672 EXP | Directory traversal vulnerability in main.php in the WP-Lytebox plugin 1.3 for WordPress allows remote attackers to include and execute arbitrary loca… | Patch early | 7.5 high | 9.1% | 2010-03-05 |
| CVE-2007-6631 EXP | Multiple buffer overflows in LScube libnemesi 0.6.4-rc1 and earlier allow remote attackers to execute arbitrary code via (1) a reply that begins with… | Patch early | 7.5 high | 9.1% | 2008-01-04 |
| CVE-2007-1942 EXP | Integer overflow in FastStone Image Viewer 2.9 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via… | Patch early | 9.3 high | 9.1% | 2007-04-11 |
| CVE-2010-1982 EXP | Directory traversal vulnerability in the JA Voice (com_javoice) component 2.0 for Joomla! allows remote attackers to read arbitrary files via a .. (do… | Patch early | 5.0 medium | 9.1% | 2010-05-19 |
| CVE-2012-2210 EXP | The Sony Bravia TV KDL-32CX525 allows remote attackers to cause a denial of service (configuration outage or device crash) via a flood of TCP SYN pack… | Patch early | 7.8 high | 9.1% | 2012-04-11 |
| CVE-2021-40868 EXP | In Cloudron 6.2, the returnTo parameter on the login page is vulnerable to Reflected XSS. | Patch early | 6.1 medium | 9.1% | 2021-09-21 |
| CVE-2009-2419 EXP | Use-after-free vulnerability in the servePendingRequests function in WebCore in WebKit in Apple Safari 4.0 and 4.0.1 allows remote attackers to cause… | Patch early | 4.3 medium | 9.1% | 2009-07-09 |
| CVE-1999-0262 EXP | Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string. | Patch early | 7.5 high | 9.1% | 1998-08-04 |
| CVE-2018-12292 EXP | A use-after-free vulnerability exists in DOMProxyHandler::EnsureExpandoObject in Pale Moon before 27.9.3. | Patch early | 9.8 critical | 9.1% | 2018-06-13 |
| CVE-2018-10063 EXP | The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a… | Patch early | 7.8 high | 9.1% | 2018-04-12 |
| CVE-2023-33362 EXP | Piwigo 13.6.0 is vulnerable to SQL Injection via in the "profile" function. | Patch early | 9.8 critical | 9.1% | 2023-05-23 |
| CVE-2001-1502 EXP | webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the NEXTPAGE par… | Patch early | 7.5 high | 9.1% | 2001-12-31 |
| CVE-2003-0117 EXP | Buffer overflow in the HTTP receiver function (BizTalkHTTPReceive.dll ISAPI) of Microsoft BizTalk Server 2002 allows attackers to execute arbitrary co… | Patch early | 7.5 high | 9.1% | 2003-05-12 |
| CVE-2023-30256 EXP | Cross Site Scripting vulnerability found in Webkil QloApps v.1.5.2 allows a remote attacker to obtain sensitive information via the back and email_cre… | Patch early | 6.1 medium | 9.1% | 2023-05-11 |
| CVE-2019-12962 EXP | LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language HTTP header. | Patch early | 6.1 medium | 9.1% | 2019-06-25 |
| CVE-2018-15768 EXP | Dell OpenManage Network Manager versions prior to 6.5.0 enabled read/write access to the file system for MySQL users due to insecure default configura… | Patch early | 6.5 medium | 9.1% | 2018-11-30 |
| CVE-2009-0037 EXP | The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location values, which… | Patch early | 6.8 medium | 9.1% | 2009-03-05 |
| CVE-2008-0690 EXP | SQL injection vulnerability in index.php in the mosDirectory (com_directory) 2.3.2 component for Joomla! allows remote attackers to execute arbitrary… | Patch early | 7.5 high | 9% | 2008-02-12 |
| CVE-2011-4876 EXP | Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); t… | Patch early | 9.3 high | 9% | 2012-02-03 |
| CVE-2003-0511 EXP | The web server for Cisco Aironet AP1x00 Series Wireless devices running certain versions of IOS 12.2 allow remote attackers to cause a denial of servi… | Patch early | 5.0 medium | 9% | 2003-08-27 |
| CVE-2012-1011 EXP | actions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to bypass intended access restrictions to upload and execute arbitra… | Patch early | 7.5 high | 9% | 2012-02-07 |
| CVE-2007-2771 EXP | Stack-based buffer overflow in the LEAD Technologies LeadTools JPEG 2000 LEADJ2K.LEADJ2K.140 ActiveX control (LTJ2K14.ocx) 14.5.0.35 allows remote att… | Patch early | 9.3 high | 9% | 2007-05-21 |
| CVE-2014-9261 EXP | The sanitize function in Codoforum 2.5.1 does not properly implement filtering for directory traversal sequences, which allows remote attackers to rea… | Patch early | 5.0 medium | 9% | 2015-03-23 |
| CVE-2007-0676 EXP | SQL injection vulnerability in faq.php in ExoPHPDesk 1.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. | Patch early | 6.8 medium | 9% | 2007-02-03 |
| CVE-2006-2909 EXP | Stack-based buffer overflow in the info tip shell extension (zipinfo.dll) in PicoZip 4.01 allows remote attackers to execute arbitrary code via a long… | Patch early | 7.5 high | 9% | 2006-06-16 |
| CVE-2019-5526 EXP | VMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exp… | Patch early | 7.8 high | 9% | 2019-05-15 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt