CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
425,731 CVEs
1,781 on KEV
17,555 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-14
25,095 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2003-0245 EXP | Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.45 allows remote attackers to ca… | Patch early | 5.0 medium | 63.5% | 2003-06-09 |
| CVE-2008-0067 EXP | Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary co… | Patch early | 10.0 high | 63.4% | 2009-01-08 |
| CVE-2006-5780 EXP | Stack-based buffer overflow in nfsd.exe in XLink Omni-NFS Server 5.2 allows remote attackers to execute arbitrary code via a crafted TCP packet to por… | Patch early | 7.5 high | 63.4% | 2006-11-07 |
| CVE-2014-3789 EXP | GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary commands via unspecified vecto… | Patch early | 7.5 high | 63.4% | 2014-05-22 |
| CVE-2017-16944 EXP | The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to cause a denial of service (infinite loop and… | Patch early | 7.5 high | 63.4% | 2017-11-25 |
| CVE-2007-2711 EXP | Stack-based buffer overflow in TinyIdentD 2.2 and earlier allows remote attackers to execute arbitrary code via a long string to TCP port 113. | Patch early | 10.0 high | 63.3% | 2007-05-16 |
| CVE-2017-8835 EXP | SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7… | Patch early | 9.8 critical | 63.3% | 2017-06-05 |
| CVE-2000-0884 EXP | IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that co… | Patch early | 7.5 high | 63.3% | 2000-12-19 |
| CVE-2018-0986 EXP | A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to… | Patch early | 8.8 high | 63.3% | 2018-04-04 |
| CVE-2020-28328 EXP | SuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File Name setting. In certain circumstances involving admin… | Patch early | 8.8 high | 63.3% | 2020-11-06 |
| CVE-2004-0380 EXP | The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions an… | Patch early | 10.0 high | 63.3% | 2004-05-04 |
| CVE-2005-2127 EXP | Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary c… | Patch early | 7.5 high | 63.2% | 2005-08-19 |
| CVE-2015-7768 EXP | Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD command. | Patch early | 7.5 high | 63.2% | 2015-10-09 |
| CVE-2014-1773 EXP | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf… | Patch early | 9.3 high | 63.1% | 2014-06-11 |
| CVE-2013-3307 EXP | Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell metacharacter… | Patch early | 8.3 high | 63.1% | 2025-07-11 |
| CVE-2005-1323 EXP | Buffer overflow in NetFtpd for NetTerm 5.1.1 and earlier allows remote attackers to execute arbitrary code via a long USER command. | Patch early | 7.5 high | 63.1% | 2005-05-02 |
| CVE-2012-0911 EXP | TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the (1)… | Patch early | 9.8 critical | 63% | 2012-07-12 |
| CVE-2010-4142 EXP | Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a denial of service (crash) and… | Patch early | 10.0 high | 63% | 2010-11-02 |
| CVE-2012-1493 EXP | F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, and Enterprise Manager before 2… | Patch early | 7.8 high | 63% | 2012-07-09 |
| CVE-2005-1812 EXP | Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to execute arbitrary code via a long… | Patch early | 10.0 high | 62.9% | 2005-06-01 |
| CVE-2026-0740 EXP | The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'NF_FU_AJAX_Con… | Patch early | 9.8 critical | 62.9% | 2026-04-07 |
| CVE-2024-8522 EXP | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_only_fields' parameter of the /wp-json/learnpress… | Patch early | 10.0 critical | 62.9% | 2024-09-12 |
| CVE-2006-0021 EXP | Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang) via an IGMP packet with an in… | Patch early | 7.8 high | 62.9% | 2006-02-14 |
| CVE-2007-2426 EXP | PHP remote file inclusion vulnerability in myfunctions/mygallerybrowser.php in the myGallery 1.4b4 and earlier plugin for WordPress allows remote atta… | Patch early | 7.5 high | 62.9% | 2007-05-02 |
| CVE-2004-1638 EXP | Buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long (1) EHLO and possibly (2) HELO command. | Patch early | 7.5 high | 62.8% | 2004-10-16 |
| CVE-2012-5932 EXP | Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allow… | Patch early | 10.0 high | 62.8% | 2012-12-24 |
| CVE-2007-3220 EXP | PHP remote file inclusion vulnerability in admin/editor2/spaw_control.class.php in the Cjay Content 3 module for XOOPS allows remote attackers to exec… | Patch early | 6.8 medium | 62.7% | 2007-06-14 |
| CVE-2009-4660 EXP | Stack-based buffer overflow in the AntServer Module (AntServer.exe) in BigAnt IM Server 2.50 allows remote attackers to execute arbitrary code via a l… | Patch early | 10.0 high | 62.7% | 2010-03-03 |
| CVE-2023-34096 EXP | Thruk is a multibackend monitoring webinterface which currently supports Naemon, Icinga, Shinken and Nagios as backends. In versions 3.06 and prior, t… | Patch early | 6.5 medium | 62.7% | 2023-06-08 |
| CVE-2004-0964 EXP | Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via cer… | Patch early | 10.0 high | 62.7% | 2005-02-09 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt