CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,621 CVEs
1,739 on KEV
17,299 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-12
25,091 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2009-2044 EXP | Mozilla Firefox 3.0.10 and earlier on Linux allows remote attackers to cause a denial of service (application crash) via a URI for a large GIF image i… | Patch early | 4.3 medium | 5.9% | 2009-06-12 |
| CVE-2013-4095 EXP | plain/actionsets.html in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote authenticated users… | Patch early | 6.5 medium | 5.9% | 2013-06-28 |
| CVE-2007-6555 EXP | PHP remote file inclusion vulnerability in modules/mod_pxt_latest.php in the mosDirectory (com_directory) 2.3.2 component for Joomla! allows remote at… | Patch early | 9.3 high | 5.9% | 2007-12-28 |
| CVE-2018-6388 EXP | iBall iB-WRA150N 1.2.6 build 110401 Rel.47776n devices allow remote authenticated users to execute arbitrary OS commands via shell metacharacters in t… | Patch early | 8.8 high | 5.9% | 2018-01-29 |
| CVE-2010-2127 EXP | PHP remote file inclusion vulnerability in gallery.php in JV2 Folder Gallery 3.1 allows remote attackers to execute arbitrary PHP code via a URL in th… | Patch early | 7.5 high | 5.9% | 2010-06-01 |
| CVE-2010-2137 EXP | PHP remote file inclusion vulnerability in _center.php in ProMan 0.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in… | Patch early | 7.5 high | 5.9% | 2010-06-02 |
| CVE-2021-41318 EXP | In Progress WhatsUp Gold prior to version 21.1.0, an application endpoint failed to adequately sanitize malicious input. which could allow an unauthen… | Patch early | 6.1 medium | 5.9% | 2021-09-28 |
| CVE-2001-0214 EXP | Way-board CGI program allows remote attackers to read arbitrary files by specifying the filename in the db parameter and terminating the filename with… | Patch early | 5.0 medium | 5.9% | 2001-06-02 |
| CVE-2023-30330 EXP | SoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42300/generic/gn_defaultframe/2.… | Patch early | 9.8 critical | 5.9% | 2023-05-12 |
| CVE-2013-6246 EXP | The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sensitive information (user's full… | Patch early | 5.0 medium | 5.9% | 2013-10-24 |
| CVE-2006-6042 EXP | PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 and earlier, when register_globals is enabled, allows remote attacker… | Patch early | 6.8 medium | 5.9% | 2006-11-22 |
| CVE-2014-0358 EXP | Multiple directory traversal vulnerabilities in Xangati XSR before 11 and XNR before 7 allow remote attackers to read arbitrary files via a .. (dot do… | Patch early | 7.8 high | 5.9% | 2014-04-15 |
| CVE-2003-0314 EXP | Snowblind Web Server 1.0 allows remote attackers to cause a denial of service (crash) via a URL that ends in a "</" sequence. | Patch early | 6.4 medium | 5.9% | 2003-06-16 |
| CVE-2004-2375 EXP | Buffer overflow in the POP3 server in 1st Class Mail Server 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbi… | Patch early | 7.5 high | 5.9% | 2004-12-31 |
| CVE-2008-5755 EXP | Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows remote attackers to execute arbitrary code via a MAP file containing a long URL, pos… | Patch early | 9.3 high | 5.9% | 2008-12-30 |
| CVE-2005-0952 EXP | Cross-site scripting vulnerability in pafiledb.php in PaFileDB 3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter… | Patch early | 5.0 medium | 5.9% | 2005-05-02 |
| CVE-2020-8547 EXP | phpList 3.5.0 allows type juggling for admin login bypass because == is used instead of === for password hashes, which mishandles hashes that begin wi… | Patch early | 9.8 critical | 5.9% | 2020-02-03 |
| CVE-2006-3774 EXP | PHP remote file inclusion vulnerability in performs.php in the perForms component (com_performs) 1.0 and earlier for Joomla! allows remote attackers t… | Patch early | 6.8 medium | 5.9% | 2006-07-24 |
| CVE-2002-2379 EXP | Cisco AS5350 IOS 12.2(11)T with access control lists (ACLs) applied and possibly with ssh running allows remote attackers to cause a denial of service… | Patch early | 7.8 high | 5.9% | 2002-12-31 |
| CVE-2006-6055 EXP | Stack-based buffer overflow in A5AGU.SYS 1.0.1.41 for the D-Link DWL-G132 wireless adapter allows remote attackers to execute arbitrary code via a 802… | Patch early | 10.0 high | 5.9% | 2006-11-22 |
| CVE-2009-0349 EXP | Stack-based buffer overflow in FTPShell Server 4.3 allows user-assisted remote attackers to cause a denial of service (persistent daemon crash) and po… | Patch early | 9.3 high | 5.9% | 2009-01-29 |
| CVE-2009-0491 EXP | Stack-based buffer overflow in Elecard MPEG Player 5.5 build 15884.081218 allows remote attackers to execute arbitrary code via a M3U file containing… | Patch early | 9.3 high | 5.9% | 2009-02-10 |
| CVE-2009-1449 EXP | Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.1 allows remote attackers to execute arbitrary code vi… | Patch early | 9.3 high | 5.9% | 2009-04-27 |
| CVE-2009-2384 EXP | Buffer overflow in amp.exe in Brothersoft PEamp 1.02b allows user-assisted remote attackers to execute arbitrary code via a long string in a .m3u play… | Patch early | 9.3 high | 5.9% | 2009-07-08 |
| CVE-2009-3536 EXP | Multiple stack-based buffer overflows in EpicDJSoftware EpicVJ 1.2.8.0 and 1.3.1.2 allow remote attackers to cause a denial of service (application cr… | Patch early | 9.3 high | 5.9% | 2009-10-02 |
| CVE-2000-0437 EXP | Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause a denial of service or execute… | Patch early | 10.0 high | 5.9% | 2000-05-18 |
| CVE-2000-0584 EXP | Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name… | Patch early | 10.0 high | 5.9% | 2000-07-02 |
| CVE-2000-0706 EXP | Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands. | Patch early | 10.0 high | 5.9% | 2000-10-20 |
| CVE-2003-0509 EXP | SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication information and gain privileges via t… | Patch early | 10.0 high | 5.9% | 2003-08-07 |
| CVE-2006-1232 EXP | Multiple SQL injection vulnerabilities in DSDownload 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via… | Patch early | 7.5 high | 5.9% | 2006-03-14 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt