CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
407,382 CVEs
1,741 on KEV
17,302 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-14
10,149 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2008-4362 EXP | The Virtual Token driver (vdlptokn.sys) 1.0.2.43 in DESlock+ 3.2.7 allows local users to cause a denial of service (system crash) via a crafted IOCTL… | Patch early | 4.9 medium | 0.8% | 2008-09-30 |
| CVE-2008-6905 EXP | Cross-site request forgery (CSRF) vulnerability in index.php in BabbleBoard 1.1.6 allows remote authenticated users to hijack the authentication of ad… | Patch early | 6.0 medium | 0.8% | 2009-08-06 |
| CVE-2009-2034 EXP | SQL injection vulnerability in writemessage.php in Yogurt 0.3, when register_globals is enabled, allows remote authenticated users to execute arbitrar… | Patch early | 6.0 medium | 0.8% | 2009-06-12 |
| CVE-2009-2573 EXP | Multiple SQL injection vulnerabilities in MiniTwitter 0.2 beta, when magic_quotes_gpc is disabled, allow remote authenticated users to execute arbitra… | Patch early | 6.0 medium | 0.8% | 2009-07-22 |
| CVE-2006-5726 EXP | alloccgblk in the UFS filesystem in Solaris 10 allows local users to cause a denial of service (memory corruption) by mounting crafted UFS filesystems… | Patch early | 4.9 medium | 0.8% | 2006-11-06 |
| CVE-2010-2963 EXP | drivers/media/video/v4l2-compat-ioctl32.c in the Video4Linux (V4L) implementation in the Linux kernel before 2.6.36 on 64-bit platforms does not valid… | Patch early | 6.2 medium | 0.8% | 2010-11-26 |
| CVE-2024-12955 EXP | A vulnerability has been found in PHPGurukul Blood Bank & Donor Management System 2.4 and classified as problematic. This vulnerability affects unknow… | Patch early | 4.3 medium | 0.8% | 2024-12-26 |
| CVE-2006-4516 EXP | Integer signedness error in FreeBSD 6.0-RELEASE allows local users to cause a denial of service (memory corruption and kernel panic) via a PT_LWPINFO… | Patch early | 4.9 medium | 0.8% | 2006-10-12 |
| CVE-2024-50861 EXP | The ip_mod_dns_key_form.cgi request in GestioIP v3.5.7 is vulnerable to Stored XSS. An attacker can inject malicious code into the "TSIG Key" field, w… | Patch early | 6.1 medium | 0.8% | 2025-01-14 |
| CVE-2001-1185 EXP | Some AIO operations in FreeBSD 4.4 may be delayed until after a call to execve, which could allow a local user to overwrite memory of the new process… | Patch early | 6.2 medium | 0.8% | 2001-12-10 |
| CVE-2009-3804 EXP | Multiple SQL injection vulnerabilities in modules/forum/post.php in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL commands via… | Patch early | 6.5 medium | 0.8% | 2009-10-27 |
| CVE-2004-1861 EXP | Invision NetSupport School Pro uses a weak encryption algorithm to encrypt passwords, which allows local users to obtain passwords. | Patch early | 4.6 medium | 0.8% | 2004-03-25 |
| CVE-2024-22513 EXP | djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after… | Patch early | 5.5 medium | 0.8% | 2024-03-16 |
| CVE-2003-0620 EXP | Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privileges via (1) MANDATORY_MANPATH, MANPATH_… | Patch early | 4.6 medium | 0.8% | 2003-08-27 |
| CVE-2005-1411 EXP | Cybration ICUII 7.0 stores passwords in plaintext in the world-readable icuii.ini file, which allows local users to gain privileges. | Patch early | 4.6 medium | 0.8% | 2005-05-03 |
| CVE-2011-1479 EXP | Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service (system crash) vi… | Patch early | 4.7 medium | 0.8% | 2012-06-21 |
| CVE-2009-3418 EXP | Multiple SQL injection vulnerabilities in Plume CMS 1.2.3 allow (1) remote authenticated users to execute arbitrary SQL commands via the m parameter t… | Patch early | 6.5 medium | 0.8% | 2009-09-25 |
| CVE-2006-0620 EXP | Race condition in phfont in QNX Neutrino RTOS 6.2.1 allows local users to execute arbitrary code via unspecified manipulations of the PHFONT and PHOTO… | Patch early | 6.2 medium | 0.8% | 2006-02-09 |
| CVE-2008-4651 EXP | Multiple SQL injection vulnerabilities in Jetbox CMS 2.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) orderby parame… | Patch early | 6.0 medium | 0.8% | 2008-10-22 |
| CVE-2001-0623 EXP | sendfiled, as included with Simple Asynchronous File Transfer (SAFT), on various Linux systems does not properly drop privileges when sending notifica… | Patch early | 4.6 medium | 0.8% | 2001-08-02 |
| CVE-2006-0331 EXP | Buffer overflow in Change passwd 3.1 (chpasswd) SquirrelMail plugin allows local users to execute arbitrary code via long command line arguments. | Patch early | 4.6 medium | 0.8% | 2006-01-21 |
| CVE-1999-1398 EXP | Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack. | Patch early | 6.2 medium | 0.8% | 1997-05-07 |
| CVE-1999-1410 EXP | addnetpr in IRIX 5.3 and 6.2 allows local users to overwrite arbitrary files and possibly gain root privileges via a symlink attack on the printers te… | Patch early | 6.2 medium | 0.8% | 1997-05-09 |
| CVE-2002-0143 EXP | Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary code via a long HOME environment variable. | Patch early | 4.6 medium | 0.8% | 2002-03-25 |
| CVE-2012-2095 EXP | The SetWiredProperty function in the D-Bus interface in WICD before 1.7.2 allows local users to write arbitrary configuration settings and gain privil… | Patch early | 6.9 medium | 0.8% | 2014-04-07 |
| CVE-2011-1083 EXP | The epoll implementation in the Linux kernel 2.6.37.2 and earlier does not properly traverse a tree of epoll file descriptors, which allows local user… | Patch early | 4.9 medium | 0.8% | 2011-04-04 |
| CVE-2002-0468 EXP | Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gain privileges via (1) a long command line… | Patch early | 4.6 medium | 0.8% | 2002-08-12 |
| CVE-2002-0265 EXP | Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows local users to gain privileges by… | Patch early | 4.6 medium | 0.8% | 2002-05-29 |
| CVE-1999-1022 EXP | serial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execute the ls program, which allows… | Patch early | 6.2 medium | 0.8% | 1994-10-02 |
| CVE-2002-1512 EXP | xbru in BRU Workstation 17.0 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the xbru_dscheck.dd temp… | Patch early | 6.2 medium | 0.8% | 2003-04-02 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt