CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
425,750 CVEs
1,781 on KEV
17,555 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-14
25,095 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2006-6063 EXP | Stack-based buffer overflow in Un4seen XMPlay 3.3.0.5 and earlier allows remote attackers to execute arbitrary code via a M3U file containing a long (… | Patch early | 7.5 high | 59.8% | 2006-11-22 |
| CVE-2005-0053 EXP | Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulnerability." | Patch early | 7.5 high | 59.8% | 2005-05-02 |
| CVE-2007-6019 EXP | Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via an SWF file with a modified… | Patch early | 9.3 high | 59.8% | 2008-04-09 |
| CVE-2021-46417 EXP | Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privileges in Franklin Fueling Systems… | Patch early | 7.5 high | 59.8% | 2022-04-07 |
| CVE-2011-2595 EXP | Multiple stack-based buffer overflows in ACDSee FotoSlate 4.0 Build 146 allow remote attackers to execute arbitrary code via a long id parameter in a… | Patch early | 10.0 high | 59.7% | 2011-09-14 |
| CVE-2008-5159 EXP | Integer overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to… | Patch early | 10.0 high | 59.7% | 2008-11-18 |
| CVE-2017-11840 EXP | ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to g… | Patch early | 7.5 high | 59.6% | 2017-11-15 |
| CVE-2017-11841 EXP | ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to g… | Patch early | 7.5 high | 59.6% | 2017-11-15 |
| CVE-2017-11870 EXP | ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the curren… | Patch early | 7.5 high | 59.6% | 2017-11-15 |
| CVE-2011-4317 EXP | The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch i… | Patch early | 4.3 medium | 59.6% | 2011-11-30 |
| CVE-2014-8424 EXP | ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication. | Patch early | 7.8 high | 59.6% | 2014-11-28 |
| CVE-2006-2212 EXP | Buffer overflow in KarjaSoft Sami FTP Server 2.0.2 and earlier allows remote attackers to execute arbitrary code via a long (1) USER or (2) PASS comma… | Patch early | 6.4 medium | 59.6% | 2006-05-05 |
| CVE-2007-1868 EXP | The management service in IBM Tivoli Provisioning Manager for OS Deployment before 5.1 Fix Pack 2 does not properly handle multipart/form-data in HTTP… | Patch early | 10.0 high | 59.6% | 2007-04-04 |
| CVE-2012-4333 EXP | Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0 ActiveX controls in Samsung N… | Patch early | 10.0 high | 59.6% | 2012-08-14 |
| CVE-2013-5880 EXP | Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.0, 12.2.1, and 12.2.2 allows r… | Patch early | 5.0 medium | 59.6% | 2014-01-15 |
| CVE-2005-0768 EXP | Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions before 5.0.7, allows remote attacke… | Patch early | 10.0 high | 59.5% | 2005-05-02 |
| CVE-2004-1317 EXP | Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbitrary code… | Patch early | 7.5 high | 59.5% | 2004-12-27 |
| CVE-2006-5854 EXP | Multiple buffer overflows in the Spooler service (nwspool.dll) in Novell Netware Client 4.91 through 4.91 SP2 allow remote attackers to execute arbitr… | Patch early | 7.5 high | 59.5% | 2006-12-03 |
| CVE-2013-5795 EXP | Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 1… | Patch early | 5.0 medium | 59.5% | 2014-01-15 |
| CVE-2024-11972 EXP | The Hunk Companion WordPress plugin before 1.9.0 does not correctly authorize some REST API endpoints, allowing unauthenticated requests to install an… | Patch early | 9.8 critical | 59.5% | 2024-12-31 |
| CVE-2007-3813 EXP | PHP remote file inclusion vulnerability in include/user.php in the NoBoard BETA module for MKPortal allows remote attackers to execute arbitrary PHP c… | Patch early | 4.3 medium | 59.4% | 2007-07-17 |
| CVE-2022-47075 EXP | An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via the action name parameter to Expo… | Patch early | 7.5 high | 59.4% | 2023-02-28 |
| CVE-2017-16249 EXP | The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the server to ha… | Patch early | 7.5 high | 59.4% | 2017-11-10 |
| CVE-2021-33393 EXP | lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/backup.pl is owned by the root account. It might be owned by an unprivil… | Patch early | 8.8 high | 59.3% | 2021-06-09 |
| CVE-2015-5603 EXP | The HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java code via unspecified vectors,… | Patch early | 6.5 medium | 59.3% | 2015-09-21 |
| CVE-2012-2957 EXP | The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain privileges by modifying files, related to a "file incl… | Patch early | 7.2 high | 59.3% | 2012-07-23 |
| CVE-2008-5081 EXP | The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause… | Patch early | 5.0 medium | 59.2% | 2008-12-17 |
| CVE-2007-0217 EXP | The wininet.dll FTP client code in Microsoft Internet Explorer 5.01 and 6 might allow remote attackers to execute arbitrary code via an FTP server res… | Patch early | 10.0 high | 59.2% | 2007-02-13 |
| CVE-2018-8770 EXP | Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php, controllers/getConfigTest.php, controllers/getUpdateTest.php, contr… | Patch early | 5.3 medium | 59.2% | 2018-03-18 |
| CVE-2007-4370 EXP | Multiple buffer overflows in the (1) client and (2) server in Racer 0.5.3 beta 5 allow remote attackers to execute arbitrary code via a long string to… | Patch early | 7.5 high | 59.2% | 2007-08-15 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt