CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,882 CVEs
1,728 on KEV
17,272 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-28
25,086 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2007-1689 EXP | Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attac… | Patch early | 10.0 high | 65% | 2007-05-16 |
| CVE-2025-27218 EXP | Sitecore Experience Manager (XM) and Experience Platform (XP) 10.4 before KB1002844 allow remote code execution through insecure deserialization. | Patch early | 5.3 medium | 65% | 2025-02-20 |
| CVE-2016-10175 EXP | The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI. This serial number allows a user… | Patch early | 9.8 critical | 65% | 2017-01-30 |
| CVE-2014-5519 EXP | The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a device option in the edit[content… | Patch early | 7.5 high | 65% | 2014-09-11 |
| CVE-2011-3167 EXP | Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vec… | Patch early | 10.0 high | 65% | 2011-11-02 |
| CVE-2012-1876 EXP | Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allows remote attackers to execute… | Patch early | 9.3 high | 65% | 2012-06-12 |
| CVE-2005-0491 EXP | Stack-based buffer overflow in Knox Arkeia Server Backup 5.3.x allows remote attackers to execute arbitrary code via a long type 77 request. | Patch early | 10.0 high | 64.9% | 2005-05-02 |
| CVE-2016-7203 EXP | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrup… | Patch early | 7.5 high | 64.9% | 2016-11-10 |
| CVE-2012-4705 EXP | Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving… | Patch early | 10.0 high | 64.9% | 2013-02-24 |
| CVE-2015-6973 EXP | Multiple cross-site request forgery (CSRF) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to hijack the authentication of a… | Patch early | 6.8 medium | 64.8% | 2015-09-16 |
| CVE-2005-3190 EXP | Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to execute arb… | Patch early | 7.5 high | 64.8% | 2005-10-13 |
| CVE-2008-2240 EXP | Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to cause a d… | Patch early | 10.0 high | 64.8% | 2008-05-22 |
| CVE-1999-0278 EXP | In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL. | Patch early | 5.0 medium | 64.8% | 1998-06-01 |
| CVE-2008-0455 EXP | Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and ear… | Patch early | 4.3 medium | 64.8% | 2008-01-25 |
| CVE-2014-8636 EXP | The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with a DOM object that has a named… | Patch early | 7.5 high | 64.8% | 2015-01-14 |
| CVE-2011-0404 EXP | Stack-based buffer overflow in NetSupport Manager Agent for Linux 11.00, for Solaris 9.50, and for Mac OS X 11.00 allows remote attackers to execute a… | Patch early | 7.5 high | 64.7% | 2011-01-11 |
| CVE-2017-11907 EXP | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 G… | Patch early | 7.5 high | 64.7% | 2017-12-12 |
| CVE-2009-1978 EXP | Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, in… | Patch early | 9.0 high | 64.7% | 2009-07-14 |
| CVE-2007-4757 EXP | PHP remote file inclusion vulnerability in menu.php in phpMytourney allows remote attackers to execute arbitrary PHP code via a URL in the functions_f… | Patch early | 7.5 high | 64.7% | 2007-09-08 |
| CVE-2008-4779 EXP | Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash) or execute arbitrary code via a long filename in a… | Patch early | 10.0 high | 64.7% | 2008-10-29 |
| CVE-2012-2020 EXP | Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-13… | Patch early | 10.0 high | 64.7% | 2012-07-11 |
| CVE-2012-2019 EXP | Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-13… | Patch early | 10.0 high | 64.7% | 2012-07-11 |
| CVE-2005-4411 EXP | Buffer overflow in Mercury Mail Transport System 4.01b allows remote attackers to execute arbitrary code via a long request to TCP port 105. | Patch early | 7.5 high | 64.7% | 2005-12-20 |
| CVE-2011-3322 EXP | Core Server HMI Service (Coreservice.exe) in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows remote attackers to cause a d… | Patch early | 10.0 high | 64.7% | 2011-09-15 |
| CVE-2014-7187 EXP | Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (o… | Patch early | 10.0 high | 64.6% | 2014-09-28 |
| CVE-2020-7115 EXP | The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass. Upon successful bypass an attacker coul… | Patch early | 9.8 critical | 64.6% | 2020-06-03 |
| CVE-2007-4440 EXP | Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, allows remote attackers to execut… | Patch early | 7.5 high | 64.5% | 2007-08-21 |
| CVE-2007-2793 EXP | PHP remote file inclusion vulnerability in ImageImageMagick.php in Geeklog 2.x allows remote attackers to execute arbitrary PHP code via a URL in the… | Patch early | 7.5 high | 64.5% | 2007-05-22 |
| CVE-2010-4094 EXP | The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN account, which makes it easier fo… | Patch early | 5.0 medium | 64.5% | 2010-10-26 |
| CVE-2002-0148 EXP | Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other… | Patch early | 7.5 high | 64.5% | 2002-04-22 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt