CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,831 CVEs
1,728 on KEV
17,272 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-28
25,086 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2006-3524 EXP | Buffer overflow in SIPfoundry sipXtapi released before 20060324 allows remote attackers to execute arbitrary code via a long CSeq field value in an IN… | Patch early | 7.5 high | 67.5% | 2006-07-12 |
| CVE-2008-1602 EXP | Stack-based buffer overflow in Orbit downloader 2.6.3 and 2.6.4 allows remote attackers to execute arbitrary code via a long download URL, which is no… | Patch early | 10.0 high | 67.5% | 2008-04-06 |
| CVE-2014-1635 EXP | Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103_WW_1.10.17m allows remote attackers to execute arbitrary… | Patch early | 10.0 high | 67.5% | 2014-11-12 |
| CVE-2013-3628 EXP | Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerability | Patch early | 8.8 high | 67.5% | 2020-02-07 |
| CVE-2007-3228 EXP | PHP remote file inclusion vulnerability in saf/lib/PEAR/PhpDocumentor/Documentation/tests/bug-559668.php in Sitellite CMS 4.2.12 and earlier might all… | Patch early | 6.8 medium | 67.5% | 2007-06-14 |
| CVE-2008-4687 EXP | manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort parameter containing PHP sequences,… | Patch early | 9.0 high | 67.5% | 2008-10-22 |
| CVE-2012-2953 EXP | The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to applic… | Patch early | 10.0 high | 67.4% | 2012-07-23 |
| CVE-2004-1626 EXP | Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a long STOR command. | Patch early | 5.0 medium | 67.4% | 2004-10-22 |
| CVE-2018-16858 EXP | It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary… | Patch early | 7.8 high | 67.3% | 2019-03-25 |
| CVE-2010-1961 EXP | Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitr… | Patch early | 10.0 high | 67.3% | 2010-06-10 |
| CVE-2010-1960 EXP | Buffer overflow in the error handling functionality in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attac… | Patch early | 10.0 high | 67.3% | 2010-06-10 |
| CVE-2006-2086 EXP | Buffer overflow in JuniperSetupDLL.dll, loaded from JuniperSetup.ocx by the Juniper SSL-VPN Client when accessing a Juniper NetScreen IVE device runni… | Patch early | 7.5 high | 67.3% | 2006-04-29 |
| CVE-2010-1681 EXP | Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to execute arbitrary code via a cra… | Patch early | 7.6 high | 67.3% | 2010-05-06 |
| CVE-2015-7765 EXP | ZOHO ManageEngine OpManager 11.5 build 11600 and earlier uses a hardcoded password of "plugin" for the IntegrationUser account, which allows remote au… | Patch early | 9.0 high | 67.3% | 2015-10-09 |
| CVE-2015-0802 EXP | Mozilla Firefox before 37.0 relies on docshell type information instead of page principal information for Window.webidl access control, which might al… | Patch early | 5.0 medium | 67.3% | 2015-04-01 |
| CVE-2007-5208 EXP | hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary… | Patch early | 7.6 high | 67.3% | 2007-10-13 |
| CVE-2012-0694 EXP | SugarCRM CE <= 6.3.1 contains scripts that use "unserialize()" with user controlled input which allows remote attackers to execute arbitrary PHP code. | Patch early | 9.8 critical | 67.3% | 2019-10-29 |
| CVE-2006-6576 EXP | Heap-based buffer overflow in Golden FTP Server (goldenftpd) 1.92 allows remote attackers to cause a denial of service (application crash) and possibl… | Patch early | 7.5 high | 67.2% | 2006-12-15 |
| CVE-2007-5003 EXP | Multiple stack-based buffer overflows in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote… | Patch early | 10.0 high | 67.2% | 2007-10-01 |
| CVE-2018-8145 EXP | An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with infor… | Patch early | 7.5 high | 67.2% | 2018-05-09 |
| CVE-2006-5650 EXP | The ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ 5.1 allows remote attackers to download and execute arbitrary code via the Downloa… | Patch early | 7.5 high | 67.1% | 2006-11-07 |
| CVE-2004-0176 EXP | Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the… | Patch early | 5.0 medium | 67.1% | 2004-05-04 |
| CVE-2019-13101 EXP | An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. wan.htm can be accessed directly without authentication, which can lead… | Patch early | 9.8 critical | 67.1% | 2019-08-08 |
| CVE-1999-1510 EXP | Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, vi… | Patch early | 7.5 high | 67.1% | 1999-05-17 |
| CVE-2010-1552 EXP | Stack-based buffer overflow in the doLoad function in snmpviewer.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote a… | Patch early | 10.0 high | 67.1% | 2010-05-13 |
| CVE-2004-1050 EXP | Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME,… | Patch early | 10.0 high | 67.1% | 2004-12-31 |
| CVE-2009-0133 EXP | Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a l… | Patch early | 10.0 high | 67% | 2009-01-15 |
| CVE-2013-4988 EXP | Stack-based buffer overflow in IcoFX 2.5 and earlier allows remote attackers to execute arbitrary code via a long idCount value in an ICONDIR structur… | Patch early | 9.3 high | 67% | 2013-12-13 |
| CVE-2011-1566 EXP | Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attack… | Patch early | 10.0 high | 67% | 2011-04-05 |
| CVE-2009-4179 EXP | Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitr… | Patch early | 10.0 high | 67% | 2009-12-10 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt