CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,987 CVEs
1,728 on KEV
17,272 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-29
25,086 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2015-1172 EXP | Unrestricted file upload vulnerability in admin/upload-file.php in the Holding Pattern theme (aka holding_pattern) 0.6 and earlier for WordPress allow… | Patch early | 7.5 high | 58.3% | 2015-02-11 |
| CVE-2007-1355 EXP | Multiple cross-site scripting (XSS) vulnerabilities in the appdev/sample/web/hello.jsp example application in Tomcat 4.0.0 through 4.0.6, 4.1.0 throug… | Patch early | 4.3 medium | 58.2% | 2007-05-21 |
| CVE-2011-4722 EXP | Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a .. (dot d… | Patch early | 7.8 high | 58.2% | 2014-12-28 |
| CVE-2019-6111 EXP | An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent… | Patch early | 5.9 medium | 58.2% | 2019-01-31 |
| CVE-2006-6425 EXP | Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbitrary code… | Patch early | 9.0 high | 58.2% | 2006-12-27 |
| CVE-2008-0926 EXP | The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on client-side authentication, which a… | Patch early | 7.5 high | 58.2% | 2008-03-28 |
| CVE-2006-0848 EXP | The "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to execute arbitrary commands by tr… | Patch early | 5.1 medium | 58.1% | 2006-02-22 |
| CVE-2009-2485 EXP | Stack-based buffer overflow in HT-MP3Player 1.0 allows remote attackers to execute arbitrary code via a long string in a .ht3 file. | Patch early | 9.3 high | 58.1% | 2009-07-16 |
| CVE-2019-14931 EXP | An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. An unauthenticated remote… | Patch early | 9.8 critical | 58.1% | 2019-10-28 |
| CVE-2008-0437 EXP | Multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in HPVirtualRooms14.dll 1.0.0.100, as used in the installation proces… | Patch early | 10.0 high | 58.1% | 2008-01-23 |
| CVE-2017-8618 EXP | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold,… | Patch early | 7.5 high | 58.1% | 2017-07-11 |
| CVE-2010-1318 EXP | Stack-based buffer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and Helix Mobile Server 11… | Patch early | 10.0 high | 58.1% | 2010-04-20 |
| CVE-2012-4177 EXP | The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbit_exe_path command line ar… | Patch early | 10.0 high | 58% | 2012-08-07 |
| CVE-2000-0408 EXP | IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions… | Patch early | 5.0 medium | 58% | 2000-05-11 |
| CVE-2007-4712 EXP | PHP remote file inclusion vulnerability in index.php in eNetman 1 allows remote attackers to execute arbitrary PHP code via a URL in the page paramete… | Patch early | 7.5 high | 57.9% | 2007-09-05 |
| CVE-2005-0554 EXP | Buffer overflow in the URL processor of Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (crash) and… | Patch early | 7.5 high | 57.9% | 2005-05-02 |
| CVE-2008-0081 EXP | Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to… | Patch early | 9.8 critical | 57.9% | 2008-01-16 |
| CVE-2016-7194 EXP | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… | Patch early | 7.5 high | 57.9% | 2016-10-14 |
| CVE-2018-7314 EXP | SQL Injection exists in the PrayerCenter 3.0.2 component for Joomla! via the sessionid parameter, a different vulnerability than CVE-2008-6429. | Patch early | 9.8 critical | 57.8% | 2018-02-22 |
| CVE-2019-10475 EXP | A reflected cross-site scripting vulnerability in Jenkins build-metrics Plugin allows attackers to inject arbitrary HTML and JavaScript into web pages… | Patch early | 6.1 medium | 57.7% | 2019-10-23 |
| CVE-2018-6605 EXP | SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHov… | Patch early | 9.8 critical | 57.7% | 2018-02-05 |
| CVE-2014-2850 EXP | The network interface configuration page (netinterface) in Sophos Web Appliance before 3.8.2 allows remote administrators to execute arbitrary command… | Patch early | 8.5 high | 57.7% | 2014-04-11 |
| CVE-2015-1503 EXP | Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote attackers to read arbitrary files via a (1) .. (dot dot)… | Patch early | 7.5 high | 57.6% | 2018-05-08 |
| CVE-2006-1188 EXP | Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via HTML elements with a certain crafted tag, which leads… | Patch early | 7.5 high | 57.6% | 2006-04-11 |
| CVE-2008-4654 EXP | Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows re… | Patch early | 9.3 high | 57.5% | 2008-10-22 |
| CVE-2006-5854 EXP | Multiple buffer overflows in the Spooler service (nwspool.dll) in Novell Netware Client 4.91 through 4.91 SP2 allow remote attackers to execute arbitr… | Patch early | 7.5 high | 57.5% | 2006-12-03 |
| CVE-2014-5377 EXP | ReadUsersFromMasterServlet in ManageEngine DeviceExpert before 5.9 build 5981 allows remote attackers to obtain user account credentials via a direct… | Patch early | 5.0 medium | 57.5% | 2014-09-04 |
| CVE-2016-8582 EXP | A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and retrieve da… | Patch early | 9.8 critical | 57.4% | 2016-10-28 |
| CVE-2017-6526 EXP | An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to unauthenticated command execution through an improperly protected admi… | Patch early | 9.8 critical | 57.4% | 2017-03-09 |
| CVE-2004-0209 EXP | Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attacker… | Patch early | 10.0 high | 57.4% | 2004-11-03 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt