CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,612 CVEs
1,728 on KEV
17,267 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-28
25,086 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2015-6522 EXP | SQL injection vulnerability in the WP Symposium plugin before 15.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the siz… | Patch early | 7.5 high | 74.1% | 2015-08-19 |
| CVE-2012-0002 EXP | The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008… | Patch early | 9.3 high | 74.1% | 2012-03-13 |
| CVE-2010-0304 EXP | Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial o… | Patch early | 7.5 high | 74.1% | 2010-02-03 |
| CVE-2009-3844 EXP | Stack-based buffer overflow in the OmniInet process in HP OpenView Data Protector Application Recovery Manager 5.50 and 6.0 allows remote attackers to… | Patch early | 10.0 high | 74.1% | 2009-12-08 |
| CVE-2017-5715 EXP | Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an att… | Patch early | 5.6 medium | 74% | 2018-01-04 |
| CVE-2009-4178 EXP | Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbit… | Patch early | 10.0 high | 74% | 2009-12-10 |
| CVE-2006-5156 EXP | Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attackers to execute arbitrary code… | Patch early | 10.0 high | 74% | 2006-10-05 |
| CVE-2016-9244 EXP | A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninit… | Patch early | 7.5 high | 74% | 2017-02-09 |
| CVE-2015-9266 EXP | The web management interface of Ubiquiti airMAX, airFiber, airGateway and EdgeSwitch XP (formerly TOUGHSwitch) allows an unauthenticated attacker to u… | Patch early | 9.8 critical | 74% | 2018-09-05 |
| CVE-2019-10098 EXP | In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newl… | Patch early | 6.1 medium | 74% | 2019-09-25 |
| CVE-2005-1213 EXP | Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP servers to… | Patch early | 7.5 high | 74% | 2005-06-14 |
| CVE-2007-3401 EXP | PHP remote file inclusion vulnerability in footer.inc.php in B1G b1gBB 2.24 allows remote attackers to execute arbitrary PHP code via a URL in the tfo… | Patch early | 7.5 high | 74% | 2007-06-26 |
| CVE-2020-8813 EXP | graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has t… | Patch early | 8.8 high | 74% | 2020-02-22 |
| CVE-2012-0261 EXP | license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shel… | Patch early | 10.0 high | 73.9% | 2013-12-31 |
| CVE-2011-0762 EXP | The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption… | Patch early | 4.0 medium | 73.9% | 2011-03-02 |
| CVE-2012-0013 EXP | Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista S… | Patch early | 9.3 high | 73.9% | 2012-01-10 |
| CVE-2013-2010 EXP | WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability | Patch early | 9.8 critical | 73.9% | 2020-02-12 |
| CVE-2011-0065 EXP | Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute… | Patch early | 10.0 high | 73.8% | 2011-05-07 |
| CVE-2017-17405 EXP | Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and puttextfile use Kernel#open to… | Patch early | 8.8 high | 73.8% | 2017-12-15 |
| CVE-2014-0659 EXP | The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000… | Patch early | 10.0 high | 73.8% | 2014-01-12 |
| CVE-2013-1814 EXP | The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive information about all… | Patch early | 4.0 medium | 73.8% | 2013-03-14 |
| CVE-2009-0542 EXP | SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" (percent) cha… | Patch early | 7.5 high | 73.8% | 2009-02-12 |
| CVE-2011-2404 EXP | A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program… | Patch early | 7.5 high | 73.7% | 2011-08-11 |
| CVE-2008-1914 EXP | Stack-based buffer overflow in the AntServer module (AntServer.exe) in BigAnt IM Server in BigAnt Messenger 2.2 allows remote attackers to execute arb… | Patch early | 10.0 high | 73.7% | 2008-04-22 |
| CVE-2013-2578 EXP | cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P1… | Patch early | 10.0 high | 73.7% | 2013-10-11 |
| CVE-2013-1966 EXP | Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled when using t… | Patch early | 9.3 high | 73.7% | 2013-07-10 |
| CVE-2009-3849 EXP | Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary co… | Patch early | 10.0 high | 73.7% | 2009-12-10 |
| CVE-2017-15889 EXP | Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authenticated users to execute arbi… | Patch early | 8.8 high | 73.7% | 2017-12-04 |
| CVE-2000-0248 EXP | The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to e… | Patch early | 10.0 high | 73.7% | 2000-04-24 |
| CVE-2020-17456 EXP | SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi page. | Patch early | 9.8 critical | 73.6% | 2020-08-20 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt