CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,406 CVEs
1,739 on KEV
17,299 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-12
10,149 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2003-0281 EXP | Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to ex… | Patch early | 4.6 medium | 1% | 2003-06-16 |
| CVE-2014-8727 EXP | Multiple directory traversal vulnerabilities in F5 BIG-IP before 10.2.2 allow local users with the "Resource Administrator" or "Administrator" role to… | Patch early | 6.2 medium | 1% | 2014-11-17 |
| CVE-2026-42568 EXP | Yamcs is a mission control framework. Prior to versions 5.13.0 and 5.12.7, an LDAP injection vulnerability exists in `org.yamcs.security.LdapAuthModul… | Patch early | 4.3 medium | 1% | 2026-06-10 |
| CVE-2008-0920 EXP | SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management (OSSIM) 0.9.9 rc5 allows remote authenticated us… | Patch early | 6.5 medium | 1% | 2008-02-22 |
| CVE-1999-1014 EXP | Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument. | Patch early | 4.6 medium | 1% | 1999-09-13 |
| CVE-2002-1766 EXP | Buffer overflow in Composer in Netscape 4.77 allows local users to overwrite process memory and execute arbitrary code via a font tag with a long face… | Patch early | 4.6 medium | 1% | 2002-12-31 |
| CVE-2008-0310 EXP | Directory traversal vulnerability in pkgadd in SCO UnixWare 7.1.4 before p534589 allows local users to create or append to arbitrary files via ".." se… | Patch early | 6.9 medium | 1% | 2008-04-07 |
| CVE-2002-1826 EXP | grsecurity 1.9.4 for Linux kernel 2.4.18 allows local users to bypass read-only permissions by using mmap to directly map /dev/mem or /dev/kmem to ker… | Patch early | 4.6 medium | 1% | 2002-12-31 |
| CVE-2008-6979 EXP | Cross-site scripting (XSS) vulnerability in as_archives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to inject arbitrary web scrip… | Patch early | 4.3 medium | 1% | 2009-08-19 |
| CVE-2007-4684 EXP | Integer overflow in the kernel in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a large num_sels argument to th… | Patch early | 6.9 medium | 1% | 2007-11-15 |
| CVE-2007-2749 EXP | SQL injection vulnerability in question.php in FAQEngine 4.16.03 and earlier allows remote attackers to execute arbitrary SQL commands via the questio… | Patch early | 5.0 medium | 1% | 2007-05-17 |
| CVE-2006-4072 EXP | Multiple SQL injection vulnerabilities in Club-Nuke [XP] 2.0 LCID 2048 allow remote attackers to execute arbitrary SQL commands via the (1) haber_id p… | Patch early | 6.5 medium | 1% | 2006-08-11 |
| CVE-2013-4679 EXP | Symantec Workspace Virtualization before 6.x before 6.4.1953.0, when a virtual application layer is configured, allows local users to gain privileges… | Patch early | 6.6 medium | 1% | 2013-08-05 |
| CVE-2001-1177 EXP | ml85p in Samsung ML-85G GDI printer driver before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files. | Patch early | 6.2 medium | 1% | 2001-07-17 |
| CVE-2009-4120 EXP | Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.Cart 3.4 allow remote attackers to hijack the authentication of the administrator… | Patch early | 6.8 medium | 1% | 2009-12-01 |
| CVE-2005-1372 EXP | nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges vi… | Patch early | 4.6 medium | 1% | 2005-05-03 |
| CVE-2004-2093 EXP | Buffer overflow in the open_socket_out function in socket.c for rsync 2.5.7 and earlier allows local users to cause a denial of service (crash) and po… | Patch early | 4.6 medium | 1% | 2004-02-09 |
| CVE-2008-1554 EXP | SQL injection vulnerability in account/index.php in TopperMod 2.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL… | Patch early | 6.8 medium | 1% | 2008-03-31 |
| CVE-2008-2029 EXP | Multiple SQL injection vulnerabilities in (1) setup_mysql.php and (2) setup_options.php in miniBB 2.2 and possibly earlier, when register_globals is e… | Patch early | 6.8 medium | 1% | 2008-04-30 |
| CVE-2008-3761 EXP | hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x before 1.0.9… | Patch early | 4.9 medium | 1% | 2008-08-21 |
| CVE-2003-0396 EXP | Buffer overflow in les for ATM on Linux (linux-atm) before 2.4.1, if used setuid, allows local users to gain privileges via a long -f command line arg… | Patch early | 4.6 medium | 1% | 2003-07-02 |
| CVE-2006-2359 EXP | Cross-site scripting (XSS) vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to inject arbitrary web script or HTML via t… | Patch early | 4.3 medium | 1% | 2006-05-15 |
| CVE-2007-1254 EXP | SQL injection vulnerability in part.userprofile.php in Connectix Boards 0.7 and earlier allows remote authenticated users to execute arbitrary SQL com… | Patch early | 6.5 medium | 1% | 2007-03-03 |
| CVE-2006-5550 EXP | The kernel in FreeBSD 6.1 and OpenBSD 4.0 allows local users to cause a denial of service via unspecified vectors involving certain ioctl requests to… | Patch early | 4.9 medium | 1% | 2006-10-26 |
| CVE-2008-5565 EXP | Cross-site request forgery (CSRF) vulnerability in admin/settings.php in DL PayCart 1.34 and earlier allows remote attackers to change the admin passw… | Patch early | 6.8 medium | 1% | 2008-12-15 |
| CVE-2008-5567 EXP | Cross-site request forgery (CSRF) vulnerability in admin/ad_settings.php in Bonza Cart 1.10 and earlier allows remote attackers to change the admin pa… | Patch early | 6.8 medium | 1% | 2008-12-15 |
| CVE-2012-5380 EXP | Untrusted search path vulnerability in the installation functionality in Ruby 1.9.3-p194, when installed in the top-level C:\ directory, might allow l… | Patch early | 6.7 medium | 1% | 2012-10-11 |
| CVE-2006-1853 EXP | Multiple SQL injection vulnerabilities in ModernBill 4.3.2 and earlier allow remote attackers or administrators to execute arbitrary SQL commands via… | Patch early | 6.5 medium | 1% | 2006-04-19 |
| CVE-2008-2936 EXP | Postfix before 2.3.15, 2.4 before 2.4.8, 2.5 before 2.5.4, and 2.6 before 2.6-20080814, when the operating system supports hard links to symlinks, all… | Patch early | 6.2 medium | 1% | 2008-08-18 |
| CVE-2004-0074 EXP | Multiple buffer overflows in xsok 1.02 allows local users to gain privileges via (1) a long LANG environment variable, or (2) a long -xsokdir command… | Patch early | 4.6 medium | 1% | 2004-02-17 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt