CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
407,410 CVEs
1,741 on KEV
17,302 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-14
10,149 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2005-3808 EXP | Integer overflow in the invalidate_inode_pages2_range function in mm/truncate.c in Linux kernel 2.6.11 to 2.6.14 allows local users to cause a denial… | Patch early | 4.9 medium | 0.8% | 2005-11-25 |
| CVE-1999-0821 EXP | FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument. | Patch early | 4.6 medium | 0.8% | 1999-11-08 |
| CVE-2001-0548 EXP | Buffer overflow in dtmail in Solaris 2.6 and 7 allows local users to gain privileges via the MAIL environment variable. | Patch early | 4.6 medium | 0.8% | 2001-08-14 |
| CVE-2002-2162 EXP | Cerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords in .ini files in the Trillian directory, which allows… | Patch early | 4.6 medium | 0.8% | 2002-12-31 |
| CVE-2000-0427 EXP | The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without knowing the PI… | Patch early | 4.6 medium | 0.8% | 2000-05-04 |
| CVE-2024-34241 EXP | A cross-site scripting (XSS) vulnerability in Rocketsoft Rocket LMS 1.9 allows an administrator to store a JavaScript payload using the admin web inte… | Patch early | 4.8 medium | 0.8% | 2024-05-17 |
| CVE-2011-1682 EXP | Multiple cross-site request forgery (CSRF) vulnerabilities in phpList 2.10.13 and earlier allow remote attackers to hijack the authentication of admin… | Patch early | 4.3 medium | 0.8% | 2011-04-13 |
| CVE-2008-1343 EXP | Directory traversal vulnerability in (1) pkgadd and (2) pkgrm in SCO UnixWare 7.1.4 allows local users to gain privileges via unknown vectors. | Patch early | 4.9 medium | 0.8% | 2008-03-17 |
| CVE-2003-0611 EXP | Multiple buffer overflows in xtokkaetama 1.0 allow local users to gain privileges via a long (1) -display command line argument or (2) XTOKKAETAMADIR… | Patch early | 4.6 medium | 0.8% | 2003-08-27 |
| CVE-2007-4191 EXP | Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain L… | Patch early | 6.9 medium | 0.8% | 2007-08-08 |
| CVE-2010-4250 EXP | Memory leak in the inotify_init1 function in fs/notify/inotify/inotify_user.c in the Linux kernel before 2.6.37 allows local users to cause a denial o… | Patch early | 4.9 medium | 0.8% | 2012-06-21 |
| CVE-2005-1414 EXP | ExoticSoft FilePocket 1.2 stores sensitive proxy information, including proxy passwords, in plaintext in the registry, which allows local users to gai… | Patch early | 4.6 medium | 0.8% | 2005-05-03 |
| CVE-2005-1418 EXP | NetLeaf Limited NotJustBrowsing 1.0.3 stores the View Lock Password in plaintext in the notjustbrowsing.prf file, which allows local users to gain pri… | Patch early | 4.6 medium | 0.8% | 2005-05-03 |
| CVE-2009-0746 EXP | The make_indexed_dir function in fs/ext4/namei.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not validate a certain re… | Patch early | 4.9 medium | 0.8% | 2009-02-27 |
| CVE-1999-0720 EXP | The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users. | Patch early | 4.6 medium | 0.8% | 1999-08-23 |
| CVE-2009-3888 EXP | The do_mmap_pgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks a memory management unit, allows local users to cause… | Patch early | 4.9 medium | 0.7% | 2009-11-16 |
| CVE-2000-0721 EXP | The FSserial, FlagShip_c, and FlagShip_p programs in the FlagShip package are installed world-writeable, which allows local users to replace them with… | Patch early | 6.2 medium | 0.7% | 2000-10-20 |
| CVE-2009-1478 EXP | Multiple unspecified vulnerabilities in the DTrace ioctl handlers in Sun Solaris 10, and OpenSolaris before snv_114, allow local users to cause a deni… | Patch early | 4.9 medium | 0.7% | 2009-04-29 |
| CVE-2005-3807 EXP | Memory leak in the VFS file lease handling in locks.c in Linux kernels 2.6.10 to 2.6.15 allows local users to cause a denial of service (memory exhaus… | Patch early | 4.9 medium | 0.7% | 2005-11-25 |
| CVE-2005-1094 EXP | FTP Now 2.6.14 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gain privileges. | Patch early | 4.6 medium | 0.7% | 2005-04-08 |
| CVE-2008-5713 EXP | The __qdisc_run function in net/sched/sch_generic.c in the Linux kernel before 2.6.25 on SMP machines allows local users to cause a denial of service… | Patch early | 4.9 medium | 0.7% | 2008-12-24 |
| CVE-2007-0161 EXP | The PML Driver HPZ12 (HPZipm12.exe) in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICE_CHANGE_CONFIG DACL permission… | Patch early | 4.1 medium | 0.7% | 2007-01-10 |
| CVE-2001-0289 EXP | Joe text editor 2.8 searches the current working directory (CWD) for the .joerc configuration file, which could allow local users to gain privileges o… | Patch early | 4.6 medium | 0.7% | 2001-05-03 |
| CVE-2003-0645 EXP | man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the ~/.manpath file, even when running setuid, which could allow… | Patch early | 4.6 medium | 0.7% | 2003-08-27 |
| CVE-2012-1257 EXP | Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor. | Patch early | 5.5 medium | 0.7% | 2019-11-20 |
| CVE-2013-6799 EXP | Apple Mac OS X 10.9 allows local users to cause a denial of service (memory corruption or panic) by creating a hard link to a directory. NOTE: this vu… | Patch early | 4.7 medium | 0.7% | 2013-11-18 |
| CVE-2006-4541 EXP | RapDrv.sys in BlackICE PC Protection 3.6.cpn, cpj, cpiE, and possibly 3.6 and earlier, allows local users to cause a denial of service (crash) via a N… | Patch early | 4.6 medium | 0.7% | 2006-09-05 |
| CVE-2009-2781 EXP | SQL injection vulnerability in forum.php in Arab Portal 2.x, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary… | Patch early | 6.0 medium | 0.7% | 2009-08-17 |
| CVE-2024-6039 EXP | A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affected is an unknown function of the component Workspaces. The… | Patch early | 6.3 medium | 0.7% | 2024-06-16 |
| CVE-2023-44088 EXP | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows SQL Injection. Arbitra… | Patch early | 5.9 medium | 0.7% | 2023-12-29 |
← previous page 334 of 334
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt