CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
407,382 CVEs
1,741 on KEV
17,302 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-14
10,149 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2010-2282 EXP | Cross-site request forgery (CSRF) vulnerability in TomatoCMS 2.0.6 allows remote attackers to hijack the authentication of administrators for requests… | Patch early | 5.1 medium | 0.8% | 2010-06-15 |
| CVE-2008-1215 EXP | Stack-based buffer overflow in the command_Expand_Interpret function in command.c in ppp (aka user-ppp), as distributed in FreeBSD 6.3 and 7.0, OpenBS… | Patch early | 4.6 medium | 0.8% | 2008-03-09 |
| CVE-2010-3503 EXP | Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect confidentiality and integrity via unknown vectors related… | Patch early | 6.3 medium | 0.8% | 2010-10-14 |
| CVE-2006-4178 EXP | Integer signedness error in the i386_set_ldt call in FreeBSD 5.5, and possibly earlier versions down to 5.2, allows local users to cause a denial of s… | Patch early | 4.9 medium | 0.8% | 2006-09-26 |
| CVE-2008-5706 EXP | The cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earlier allows local users to overwr… | Patch early | 6.9 medium | 0.8% | 2008-12-22 |
| CVE-2007-1401 EXP | Buffer overflow in the crack extension (CrackLib), as bundled with PHP 4.4.6 and other versions before 5.0.0, might allow local users to gain privileg… | Patch early | 6.9 medium | 0.8% | 2007-03-10 |
| CVE-2011-0536 EXP | Multiple untrusted search path vulnerabilities in elf/dl-object.c in certain modified versions of the GNU C Library (aka glibc or libc6), including gl… | Patch early | 6.9 medium | 0.8% | 2011-04-08 |
| CVE-2012-1666 EXP | Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMware Fusion before 4.1.2, VMware… | Patch early | 6.9 medium | 0.8% | 2012-09-08 |
| CVE-2007-5918 EXP | Cross-site request forgery (CSRF) vulnerability in edit.php in the MS TopSites add-on for PHP-Nuke does not verify that the uname parameter matches th… | Patch early | 6.0 medium | 0.8% | 2007-11-10 |
| CVE-2016-5237 EXP | Valve Steam 3.42.16.13 uses weak permissions for the files in the Steam program directory, which allows local users to modify the files and possibly g… | Patch early | 4.8 medium | 0.8% | 2017-01-23 |
| CVE-2009-2649 EXP | The IATA (ata) driver in FreeBSD 6.0 and 8.0, when read access to /dev is available, allows local users to cause a denial of service (kernel panic) vi… | Patch early | 4.7 medium | 0.8% | 2009-07-30 |
| CVE-2007-6261 EXP | Integer overflow in the load_threadstack function in the Mach-O loader (mach_loader.c) in the xnu kernel in Apple Mac OS X 10.4 through 10.5.1 allows… | Patch early | 4.9 medium | 0.8% | 2007-12-06 |
| CVE-2009-1046 EXP | The console selection feature in the Linux kernel 2.6.28 before 2.6.28.4, 2.6.25, and possibly earlier versions, when the UTF-8 console is used, allow… | Patch early | 4.7 medium | 0.8% | 2009-03-23 |
| CVE-2007-1227 EXP | VShieldCheck in McAfee VirusScan for Mac (Virex) before 7.7 patch 1 allow local users to change permissions of arbitrary files via a symlink attack on… | Patch early | 6.6 medium | 0.8% | 2007-03-02 |
| CVE-2008-3832 EXP | A certain Fedora patch for the utrace subsystem in the Linux kernel before 2.6.26.5-28 on Fedora 8, and before 2.6.26.5-45 on Fedora 9, allows local u… | Patch early | 4.9 medium | 0.8% | 2008-10-03 |
| CVE-2008-7211 EXP | CreativeLabs es1371mp.sys 5.1.3612.0 WDM audio driver, as used in Ensoniq PCI 1371 sound cards and when running on Windows Vista, does not create a Fu… | Patch early | 6.9 medium | 0.8% | 2009-09-11 |
| CVE-2009-0876 EXP | Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attac… | Patch early | 6.9 medium | 0.8% | 2009-03-12 |
| CVE-2009-3523 EXP | aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs (1) 0xb2d6000c and (2) 0xb2d60034,… | Patch early | 6.9 medium | 0.8% | 2009-10-01 |
| CVE-2010-2973 EXP | Integer overflow in IOSurface in Apple iOS before 4.0.2 on the iPhone and iPod touch, and before 3.2.2 on the iPad, allows local users to gain privile… | Patch early | 6.9 medium | 0.8% | 2010-08-05 |
| CVE-2023-36266 EXP | An issue was discovered in Keeper Password Manager for Desktop version 16.10.2 (fixed in 17.2), and the KeeperFill Browser Extensions version 16.5.4 (… | Patch early | 5.5 medium | 0.8% | 2023-07-12 |
| CVE-2006-5852 EXP | Untrusted search path vulnerability in openexec in OpenBase SQL before 10.0.1 allows local users to gain privileges via a modified PATH that reference… | Patch early | 4.6 medium | 0.8% | 2006-11-10 |
| CVE-2011-1082 EXP | fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures without properly checking for (1) cl… | Patch early | 4.9 medium | 0.8% | 2011-04-04 |
| CVE-2001-1354 EXP | NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which… | Patch early | 4.6 medium | 0.8% | 2001-07-20 |
| CVE-2002-1513 EXP | The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line opti… | Patch early | 4.6 medium | 0.8% | 2003-04-02 |
| CVE-2001-0316 EXP | Linux kernel 2.4 and 2.2 allows local users to read kernel memory and possibly gain privileges via a negative argument to the sysctl call. | Patch early | 4.6 medium | 0.8% | 2001-05-03 |
| CVE-2006-0539 EXP | The convert-fcrontab program in fcron 3.0.0 might allow local users to gain privileges via a long command-line argument, which causes Linux glibc to r… | Patch early | 4.6 medium | 0.8% | 2006-02-04 |
| CVE-2015-7422 EXP | Buffer overflow in IBM i Access 7.1 on Windows allows local users to cause a denial of service (application crash) via unspecified vectors. | Patch early | 5.5 medium | 0.8% | 2016-01-02 |
| CVE-2007-2083 EXP | vsdatant.sys in Check Point Zone Labs ZoneAlarm Pro before 7.0.302.000 does not validate certain arguments before being passed to hooked SSDT function… | Patch early | 6.9 medium | 0.8% | 2007-04-18 |
| CVE-2007-1730 EXP | Integer signedness error in the DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.20 and later allows local user… | Patch early | 6.6 medium | 0.8% | 2007-03-28 |
| CVE-2002-0162 EXP | LogWatch before 2.5 allows local users to execute arbitrary code via a symlink attack on the logwatch temporary directory. | Patch early | 6.2 medium | 0.8% | 2002-03-27 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt