CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,558 CVEs
1,726 on KEV
17,267 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-27
25,086 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2013-7285 EXP | Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary… | Patch early | 9.8 critical | 84.4% | 2019-05-15 |
| CVE-2017-14495 EXP | Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of… | Patch early | 7.5 high | 84.3% | 2017-10-03 |
| CVE-2014-0556 EXP | Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on… | Patch early | 10.0 high | 84.3% | 2014-09-10 |
| CVE-2010-3563 EXP | Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidenti… | Patch early | 10.0 high | 84.3% | 2010-10-19 |
| CVE-2019-12314 EXP | Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH_INFO, as demonstrated by a cgi-bin/Maco… | Patch early | 9.8 critical | 84.2% | 2019-05-24 |
| CVE-2014-6037 EXP | Directory traversal vulnerability in the agentUpload servlet in ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 allows remote at… | Patch early | 7.5 high | 84.2% | 2014-10-26 |
| CVE-2015-2857 EXP | Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metacharacters in the oauth_token pa… | Patch early | 9.8 critical | 84.2% | 2017-08-22 |
| CVE-2021-24155 EXP | The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the imported files are of the SGBP format and… | Patch early | 7.2 high | 84.1% | 2021-04-05 |
| CVE-2018-17552 EXP | SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigate-user cookie. | Patch early | 9.8 critical | 84.1% | 2018-10-03 |
| CVE-2018-17431 EXP | Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL. | Patch early | 9.8 critical | 83.9% | 2019-01-30 |
| CVE-2020-10879 EXP | rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nodeId parameter is passed direct… | Patch early | 9.8 critical | 83.9% | 2020-03-23 |
| CVE-2007-2175 EXP | Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows remote attackers to execute arbit… | Patch early | 7.6 high | 83.8% | 2007-04-24 |
| CVE-2019-1620 EXP | A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to u… | Patch early | 9.8 critical | 83.8% | 2019-06-27 |
| CVE-2009-2265 EXP | Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable files in arbitrary directories vi… | Patch early | 7.5 high | 83.7% | 2009-07-05 |
| CVE-2025-47916 EXP | Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php. The issue lies within the themeedi… | Patch early | 10.0 critical | 83.7% | 2025-05-16 |
| CVE-2008-6508 EXP | Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to bypass authen… | Patch early | 7.5 high | 83.7% | 2009-03-23 |
| CVE-2017-14493 EXP | Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafte… | Patch early | 9.8 critical | 83.6% | 2017-10-03 |
| CVE-2014-1511 EXP | Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the pop… | Patch early | 9.8 critical | 83.6% | 2014-03-19 |
| CVE-2012-4940 EXP | Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbit… | Patch early | 6.4 medium | 83.6% | 2012-10-31 |
| CVE-2005-3252 EXP | Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to execute arbitrary code via a craft… | Patch early | 7.5 high | 83.6% | 2005-10-18 |
| CVE-2016-10073 EXP | The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote attackers to spoof the email domain in sent messages and… | Patch early | 7.5 high | 83.6% | 2017-05-23 |
| CVE-2008-3257 EXP | Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote a… | Patch early | 10.0 high | 83.6% | 2008-07-22 |
| CVE-2007-4560 EXP | clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters tha… | Patch early | 7.6 high | 83.5% | 2007-08-28 |
| CVE-2010-2075 EXP | UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally introduced modification (Troja… | Patch early | 7.5 high | 83.5% | 2010-06-15 |
| CVE-2005-1790 EXP | Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to cause a denial of service (crash)… | Patch early | 2.6 low | 83.5% | 2005-06-01 |
| CVE-2009-2288 EXP | statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) Traceroute… | Patch early | 7.5 high | 83.5% | 2009-07-01 |
| CVE-2023-22232 EXP | Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Secu… | Patch early | 5.3 medium | 83.4% | 2023-02-17 |
| CVE-2001-1583 EXP | lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that… | Patch early | 10.0 high | 83.4% | 2001-12-31 |
| CVE-2014-7863 EXP | The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager before 11.9 build 11912, OpManager 8 through 11.5 build… | Patch early | 7.5 high | 83.4% | 2020-02-08 |
| CVE-2019-1935 EXP | A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allo… | Patch early | 9.8 critical | 83.4% | 2019-08-21 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt