CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,882 CVEs
1,728 on KEV
17,272 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-28
25,086 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2015-2295 EXP | Cross-site request forgery (CSRF) vulnerability in system_firmware_restorefullbackup.php in the WebGUI in pfSense before 2.2.1 allows remote attackers… | Patch early | 6.8 medium | 65.7% | 2015-04-10 |
| CVE-2011-5010 EXP | apps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via shell metacharacters in the PING… | Patch early | 10.0 high | 65.7% | 2011-12-25 |
| CVE-2005-3314 EXP | Stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary code via "long verb arguments." | Patch early | 7.5 high | 65.7% | 2005-11-18 |
| CVE-2017-14147 EXP | An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which could allow an attacker to easily restore a router to its f… | Patch early | 9.8 critical | 65.6% | 2017-09-07 |
| CVE-2010-4279 EXP | The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which allows remote attackers to bypas… | Patch early | 10.0 high | 65.6% | 2010-12-02 |
| CVE-2001-1013 EXP | Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html dir… | Patch early | 5.0 medium | 65.6% | 2001-09-12 |
| CVE-2019-14530 EXP | An issue was discovered in custom/ajax_download.php in OpenEMR before 5.0.2 via the fileName parameter. An attacker can download any file (that is rea… | Patch early | 8.8 high | 65.5% | 2019-08-13 |
| CVE-2009-4988 EXP | Stack-based buffer overflow in NT_Naming_Service.exe in SAP Business One 2005 A 6.80.123 and 6.80.320 allows remote attackers to execute arbitrary cod… | Patch early | 10.0 high | 65.5% | 2010-08-25 |
| CVE-2005-3390 EXP | The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GL… | Patch early | 7.5 high | 65.5% | 2005-11-01 |
| CVE-2018-0767 EXP | Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise… | Patch early | 5.3 medium | 65.5% | 2018-01-04 |
| CVE-2017-11911 EXP | ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u… | Patch early | 7.5 high | 65.5% | 2017-12-12 |
| CVE-2017-11811 EXP | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in… | Patch early | 7.5 high | 65.5% | 2017-10-13 |
| CVE-2017-11909 EXP | ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u… | Patch early | 7.5 high | 65.5% | 2017-12-12 |
| CVE-2014-2624 EXP | Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vecto… | Patch early | 10.0 high | 65.4% | 2014-09-11 |
| CVE-2008-3558 EXP | Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before 20.2008.2606.4919 allows remot… | Patch early | 9.3 high | 65.4% | 2008-08-08 |
| CVE-2009-3869 EXP | Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK an… | Patch early | 9.3 high | 65.4% | 2009-11-05 |
| CVE-2012-3399 EXP | Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter. | Patch early | 7.5 high | 65.3% | 2012-07-12 |
| CVE-2018-0838 EXP | Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how t… | Patch early | 7.5 high | 65.3% | 2018-02-15 |
| CVE-2018-0860 EXP | Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how t… | Patch early | 7.5 high | 65.3% | 2018-02-15 |
| CVE-2018-0835 EXP | Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how t… | Patch early | 7.5 high | 65.3% | 2018-02-15 |
| CVE-2018-0837 EXP | Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how t… | Patch early | 7.5 high | 65.3% | 2018-02-15 |
| CVE-2008-2161 EXP | Buffer overflow in TFTP Server SP 1.4 and 1.5 on Windows, and possibly other versions, allows remote attackers to execute arbitrary code via a long TF… | Patch early | 10.0 high | 65.3% | 2008-05-12 |
| CVE-2006-6199 EXP | Stack-based buffer overflow in BlazeVideo BlazeDVD Standard and Professional 5.0, and possibly earlier, allows remote attackers to execute arbitrary c… | Patch early | 7.5 high | 65.3% | 2006-12-01 |
| CVE-2011-4040 EXP | Buffer overflow in MiniSmtp 3.0.11818 in NJStar Communicator allows remote attackers to execute arbitrary code via a crafted packet. | Patch early | 10.0 high | 65.3% | 2011-11-21 |
| CVE-2002-1744 EXP | Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbi… | Patch early | 5.0 medium | 65.2% | 2002-12-31 |
| CVE-2008-0935 EXP | Stack-based buffer overflow in the Novell iPrint Control ActiveX control in ienipp.ocx in Novell iPrint Client before 4.34 allows remote attackers to… | Patch early | 10.0 high | 65.1% | 2008-02-25 |
| CVE-2011-4828 EXP | Unrestricted file upload vulnerability in includes/inline_image_upload.php in AutoSec Tools V-CMS 1.0 allows remote attackers to execute arbitrary cod… | Patch early | 7.5 high | 65.1% | 2011-12-15 |
| CVE-2003-1200 EXP | Stack-based buffer overflow in FORM2RAW.exe in Alt-N MDaemon 6.5.2 through 6.8.5 allows remote attackers to execute arbitrary code via a long From par… | Patch early | 7.5 high | 65.1% | 2003-12-29 |
| CVE-2008-4322 EXP | Stack-based buffer overflow in RealFlex Technologies Ltd. RealWin Server 2.0, as distributed by DATAC, allows remote attackers to execute arbitrary co… | Patch early | 10.0 high | 65.1% | 2008-09-29 |
| CVE-2006-0900 EXP | nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demonstrated by the ProtoVer NFS t… | Patch early | 7.8 high | 65.1% | 2006-02-27 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt