CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,553 CVEs
1,726 on KEV
17,267 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-27
25,086 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2015-2996 EXP | Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitrary files via a .. (dot dot) in… | Patch early | 8.5 high | 86.5% | 2015-06-08 |
| CVE-2018-1160 EXP | Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking on attacker controlled data.… | Patch early | 9.8 critical | 86.5% | 2018-12-20 |
| CVE-2018-10661 EXP | An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control. | Patch early | 9.8 critical | 86.5% | 2018-06-26 |
| CVE-2018-1999002 EXP | A arbitrary file read vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in the Stapler web framework's org/kohsuke/stapler/Staple… | Patch early | 7.5 high | 86.5% | 2018-07-23 |
| CVE-2006-5444 EXP | Integer overflow in the get_input function in the Skinny channel driver (chan_skinny.c) in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as us… | Patch early | 7.5 high | 86.5% | 2006-10-23 |
| CVE-2003-0085 EXP | Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remot… | Patch early | 10.0 high | 86.4% | 2003-03-31 |
| CVE-2011-2110 EXP | Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android, allows remote attackers to exe… | Patch early | 10.0 high | 86.4% | 2011-06-16 |
| CVE-2005-0773 EXP | Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allows remote a… | Patch early | 7.5 high | 86.4% | 2005-06-18 |
| CVE-2020-14295 EXP | A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution b… | Patch early | 7.2 high | 86.3% | 2020-06-17 |
| CVE-2013-7091 EXP | Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zimbra 7.2.2 and 8.0.2 allows rem… | Patch early | 5.0 medium | 86.3% | 2013-12-13 |
| CVE-2024-25641 EXP | Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, an arbitrary file write vulnerability, exploitable t… | Patch early | 9.1 critical | 86.3% | 2024-05-14 |
| CVE-2018-15379 EXP | A vulnerability in which the HTTP web server for Cisco Prime Infrastructure (PI) has unrestricted directory permissions could allow an unauthenticated… | Patch early | 9.8 critical | 86.2% | 2018-10-05 |
| CVE-2025-59528 EXP | Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vulnerable to remote code execut… | Patch early | 10.0 critical | 86.2% | 2025-09-22 |
| CVE-2017-5816 EXP | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. | Patch early | 9.8 critical | 86.2% | 2018-02-15 |
| CVE-2013-1493 EXP | The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and… | Patch early | 10.0 high | 86.2% | 2013-03-05 |
| CVE-2005-4560 EXP | The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a Windows Metafi… | Patch early | 7.5 high | 86.1% | 2005-12-28 |
| CVE-2020-2038 EXP | An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands wit… | Patch early | 7.2 high | 86.1% | 2020-09-09 |
| CVE-2019-1003001 EXP | A sandbox bypass vulnerability exists in Pipeline: Groovy Plugin 2.61 and earlier in src/main/java/org/jenkinsci/plugins/workflow/cps/CpsFlowDefinitio… | Patch early | 8.8 high | 86.1% | 2019-01-22 |
| CVE-2023-4634 EXP | The Media Library Assistant plugin for WordPress is vulnerable to Local File Inclusion and Remote Code Execution in versions up to, and including, 3.0… | Patch early | 9.8 critical | 85.9% | 2023-09-06 |
| CVE-2008-5353 EXP | The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and ea… | Patch early | 10.0 high | 85.8% | 2008-12-05 |
| CVE-2014-0226 EXP | Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffe… | Patch early | 6.8 medium | 85.7% | 2014-07-20 |
| CVE-2021-29447 EXP | Wordpress is an open source CMS. A user with the ability to upload files (like an Author) can exploit an XML parsing issue in the Media Library leadin… | Patch early | 7.1 high | 85.7% | 2021-04-15 |
| CVE-2001-0241 EXP | Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is… | Patch early | 10.0 high | 85.7% | 2001-06-27 |
| CVE-2003-0109 EXP | Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers… | Patch early | 7.5 high | 85.7% | 2003-03-31 |
| CVE-2001-0803 EXP | Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitr… | Patch early | 10.0 high | 85.6% | 2001-12-06 |
| CVE-2015-7858 EXP | SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different… | Patch early | 7.5 high | 85.6% | 2015-10-29 |
| CVE-2017-9769 EXP | A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a handle to… | Patch early | 9.8 critical | 85.5% | 2017-08-02 |
| CVE-2003-0533 EXP | Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in M… | Patch early | 7.5 high | 85.5% | 2004-06-01 |
| CVE-2004-0330 EXP | Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time zone argument to the MDTM com… | Patch early | 10.0 high | 85.5% | 2004-11-23 |
| CVE-2011-0063 EXP | The _list_file_get function in lib/Majordomo.pm in Majordomo 2 20110203 and earlier allows remote attackers to conduct directory traversal attacks and… | Patch early | 5.0 medium | 85.5% | 2011-03-15 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt