CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,672 CVEs
1,728 on KEV
17,267 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-28
25,086 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2019-19509 EXP | An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a GET request to ajaxArchiveFile… | Patch early | 8.8 high | 71.6% | 2020-01-06 |
| CVE-2011-3011 EXP | BaseServiceImpl.class in CA ARCserve D2D r15 does not properly handle sessions, which allows remote attackers to obtain credentials, and consequently… | Patch early | 5.0 medium | 71.6% | 2011-08-15 |
| CVE-2017-8641 EXP | Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold… | Patch early | 7.5 high | 71.6% | 2017-08-08 |
| CVE-2013-2751 EXP | Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x befor… | Patch early | 10.0 high | 71.6% | 2013-12-12 |
| CVE-2019-11231 EXP | An issue was discovered in GetSimple CMS through 3.3.15. insufficient input sanitation in the theme-edit.php file allows upload of files with arbitrar… | Patch early | 9.8 critical | 71.6% | 2019-05-22 |
| CVE-2015-2845 EXP | The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arbitrary commands via the $type… | Patch early | 10.0 high | 71.5% | 2015-05-12 |
| CVE-2007-5779 EXP | Buffer overflow in the GomManager (GomWeb Control) ActiveX control in GomWeb3.dll 1.0.0.12 in Gretech Online Movie Player (GOM Player) 2.1.6.3499 allo… | Patch early | 7.5 high | 71.5% | 2007-11-01 |
| CVE-2005-3683 EXP | Stack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled, allows remote attackers to cause a denial of service (application crash), a… | Patch early | 7.5 high | 71.5% | 2005-11-19 |
| CVE-2019-6977 EXP | gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x… | Patch early | 8.8 high | 71.5% | 2019-01-27 |
| CVE-2016-7241 EXP | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi… | Patch early | 7.5 high | 71.5% | 2016-11-10 |
| CVE-2018-20434 EXP | LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to html/pages/addhost.inc.php during… | Patch early | 9.8 critical | 71.5% | 2019-04-24 |
| CVE-2003-0264 EXP | Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a lon… | Patch early | 7.5 high | 71.5% | 2003-05-27 |
| CVE-2016-3247 EXP | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi… | Patch early | 7.5 high | 71.5% | 2016-09-14 |
| CVE-2008-4828 EXP | Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8… | Patch early | 10.0 high | 71.5% | 2009-05-05 |
| CVE-2006-0441 EXP | Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER command, which triggers the ove… | Patch early | 7.5 high | 71.5% | 2006-01-26 |
| CVE-2019-19985 EXP | The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclo… | Patch early | 5.3 medium | 71.4% | 2019-12-26 |
| CVE-2021-46419 EXP | An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system files and scripts. | Patch early | 9.1 critical | 71.4% | 2022-04-07 |
| CVE-2010-2703 EXP | Stack-based buffer overflow in the execvp_nc function in the ov.dll module in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when running on… | Patch early | 10.0 high | 71.4% | 2010-07-28 |
| CVE-2006-2407 EXP | Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other products including (2) FreeSSHd 1.0.… | Patch early | 7.5 high | 71.4% | 2006-05-16 |
| CVE-2011-3400 EXP | Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 do not properly handle OLE objects in memory, which allows remote attackers to execute arbitrary… | Patch early | 9.3 high | 71.4% | 2011-12-14 |
| CVE-2006-0295 EXP | Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code… | Patch early | 5.1 medium | 71.3% | 2006-02-02 |
| CVE-2013-4811 EXP | UpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manage… | Patch early | 10.0 high | 71.3% | 2013-09-16 |
| CVE-2017-8755 EXP | Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the cu… | Patch early | 7.5 high | 71.3% | 2017-09-13 |
| CVE-2016-1909 EXP | Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x before 3.3.3; FortiCache 3.0.x before 3.0.8; and FortiOS 4.1.x before 4… | Patch early | 9.8 critical | 71.3% | 2016-01-15 |
| CVE-2010-1885 EXP | The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not properly handle… | Patch early | 9.3 high | 71.2% | 2010-06-15 |
| CVE-2012-4959 EXP | Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD… | Patch early | 10.0 high | 71.2% | 2012-11-18 |
| CVE-2007-3371 EXP | PHP remote file inclusion vulnerability in plugins/widgets/htmledit/htmledit.php in Powl 0.94 allows remote attackers to execute arbitrary PHP code vi… | Patch early | 7.5 high | 71.2% | 2007-06-22 |
| CVE-2012-4876 EXP | Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera allows remote attackers to exe… | Patch early | 10.0 high | 71.2% | 2012-09-06 |
| CVE-2005-0353 EXP | Buffer overflow in the Sentinel LM (Lservnt) service in the Sentinel License Manager 7.2.0.2 allows remote attackers to execute arbitrary code by send… | Patch early | 10.0 high | 71.1% | 2005-05-02 |
| CVE-2004-1558 EXP | Multiple stack-based buffer overflows in YPOPs! (aka YahooPOPS) 0.4 through 0.6 allow remote attackers to cause a denial of service (crash) and possib… | Patch early | 7.5 high | 71.1% | 2004-12-31 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt