CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,917 CVEs
1,728 on KEV
17,272 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-29
25,086 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2006-3726 EXP | Buffer overflow in FileCOPA FTP Server before 1.01 released on 18th July 2006, allows remote authenticated attackers to execute arbitrary code via a l… | Patch early | 6.5 medium | 63.7% | 2006-07-21 |
| CVE-2012-5201 EXP | Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E… | Patch early | 10.0 high | 63.7% | 2013-03-09 |
| CVE-2012-0299 EXP | The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code to a desi… | Patch early | 10.0 high | 63.7% | 2012-05-21 |
| CVE-2005-3155 EXP | Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute arbitrary code. | Patch early | 7.5 high | 63.7% | 2005-10-05 |
| CVE-2011-0647 EXP | The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows remote attac… | Patch early | 10.0 high | 63.7% | 2011-02-10 |
| CVE-2017-11799 EXP | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in… | Patch early | 7.5 high | 63.7% | 2017-10-13 |
| CVE-2005-2127 EXP | Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary c… | Patch early | 7.5 high | 63.7% | 2005-08-19 |
| CVE-2006-5216 EXP | Stack-based buffer overflow in Sergey Lyubka Simple HTTPD (shttpd) 1.34 allows remote attackers to execute arbitrary code via a long URI. | Patch early | 7.5 high | 63.6% | 2006-10-10 |
| CVE-2004-0313 EXP | Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request, as… | Patch early | 10.0 high | 63.6% | 2004-11-23 |
| CVE-2005-1939 EXP | Directory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers to read arbitrary files via ".." (dot dot) sequences… | Patch early | 5.0 medium | 63.6% | 2005-12-31 |
| CVE-2013-5019 EXP | Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resource name in an HTTP request. | Patch early | 10.0 high | 63.6% | 2013-07-31 |
| CVE-2012-3274 EXP | Stack-based buffer overflow in uam.exe in the User Access Manager (UAM) component in HP Intelligent Management Center (IMC) before 5.1 E0101P01 allows… | Patch early | 10.0 high | 63.6% | 2012-12-06 |
| CVE-2018-8735 EXP | Remote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary commands on the ta… | Patch early | 8.8 high | 63.6% | 2018-04-18 |
| CVE-2004-0212 EXP | Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers… | Patch early | 10.0 high | 63.5% | 2004-08-06 |
| CVE-2012-6329 EXP | The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully quali… | Patch early | 7.5 high | 63.5% | 2013-01-04 |
| CVE-2002-2226 EXP | Buffer overflow in tftpd of TFTP32 2.21 and earlier allows remote attackers to execute arbitrary code via a long filename argument. | Patch early | 7.5 high | 63.5% | 2002-12-31 |
| CVE-2007-5082 EXP | Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to… | Patch early | 10.0 high | 63.5% | 2007-10-01 |
| CVE-2003-0245 EXP | Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.45 allows remote attackers to ca… | Patch early | 5.0 medium | 63.5% | 2003-06-09 |
| CVE-2008-0067 EXP | Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary co… | Patch early | 10.0 high | 63.4% | 2009-01-08 |
| CVE-2004-0932 EXP | McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to by… | Patch early | 7.5 high | 63.4% | 2005-01-27 |
| CVE-2014-3789 EXP | GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary commands via unspecified vecto… | Patch early | 7.5 high | 63.4% | 2014-05-22 |
| CVE-2017-16944 EXP | The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to cause a denial of service (infinite loop and… | Patch early | 7.5 high | 63.3% | 2017-11-25 |
| CVE-2007-2711 EXP | Stack-based buffer overflow in TinyIdentD 2.2 and earlier allows remote attackers to execute arbitrary code via a long string to TCP port 113. | Patch early | 10.0 high | 63.3% | 2007-05-16 |
| CVE-2000-0884 EXP | IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that co… | Patch early | 7.5 high | 63.3% | 2000-12-19 |
| CVE-2018-0986 EXP | A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to… | Patch early | 8.8 high | 63.3% | 2018-04-04 |
| CVE-2020-28328 EXP | SuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File Name setting. In certain circumstances involving admin… | Patch early | 8.8 high | 63.3% | 2020-11-06 |
| CVE-2004-0380 EXP | The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions an… | Patch early | 10.0 high | 63.3% | 2004-05-04 |
| CVE-2015-7768 EXP | Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD command. | Patch early | 7.5 high | 63.2% | 2015-10-09 |
| CVE-2014-1773 EXP | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf… | Patch early | 9.3 high | 63.1% | 2014-06-11 |
| CVE-2012-1493 EXP | F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, and Enterprise Manager before 2… | Patch early | 7.8 high | 63.1% | 2012-07-09 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt