CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
425,750 CVEs
1,781 on KEV
17,555 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-14
25,095 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2007-4809 EXP | Multiple PHP remote file inclusion vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 allow remote attackers to execute arbitrary PHP code… | Patch early | 7.5 high | 56.4% | 2007-09-11 |
| CVE-2008-0659 EXP | Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx… | Patch early | 10.0 high | 56.3% | 2008-02-08 |
| CVE-2006-3459 EXP | Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-depe… | Patch early | 7.5 high | 56.3% | 2006-08-03 |
| CVE-2008-4008 EXP | Unspecified vulnerability in the WebLogic Server Plugins for Apache component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7… | Patch early | 10.0 high | 56.3% | 2008-10-14 |
| CVE-2006-6707 EXP | Stack-based buffer overflow in the NeoTraceExplorer.NeoTraceLoader ActiveX control (NeoTraceExplorer.dll) in NeoTrace Express 3.25 and NeoTrace Pro (a… | Patch early | 7.5 high | 56.2% | 2006-12-23 |
| CVE-2016-3078 EXP | Multiple integer overflows in php_zip.c in the zip extension in PHP before 7.0.6 allow remote attackers to cause a denial of service (heap-based buffe… | Patch early | 9.8 critical | 56.1% | 2016-08-07 |
| CVE-2014-7228 EXP | Akeeba Restore (restore.php), as used in Joomla! 2.5.4 through 2.5.25, 3.x through 3.2.5, and 3.3.0 through 3.3.4; Akeeba Backup for Joomla! Professio… | Patch early | 7.5 high | 56% | 2014-11-03 |
| CVE-2013-1469 EXP | Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a .. (dot dot)… | Patch early | 4.0 medium | 56% | 2013-03-13 |
| CVE-2010-2115 EXP | SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new connections) via a crafted read request. | Patch early | 5.0 medium | 56% | 2010-05-28 |
| CVE-2015-1833 EXP | XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2… | Patch early | 6.4 medium | 55.9% | 2015-05-29 |
| CVE-2008-3704 EXP | Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Vis… | Patch early | 9.3 high | 55.9% | 2008-08-18 |
| CVE-2006-3280 EXP | Cross-domain vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to access restricted information from other domains via an objec… | Patch early | 7.5 high | 55.9% | 2006-06-28 |
| CVE-2008-3008 EXP | Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote attackers… | Patch early | 9.3 high | 55.9% | 2008-09-11 |
| CVE-2017-8635 EXP | Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold… | Patch early | 7.5 high | 55.9% | 2017-08-08 |
| CVE-2019-14322 EXP | In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames. | Patch early | 7.5 high | 55.8% | 2019-07-28 |
| CVE-2011-3494 EXP | WinSig.exe in eSignal 10.6.2425 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a… | Patch early | 10.0 high | 55.8% | 2011-09-16 |
| CVE-2015-1397 EXP | SQL injection vulnerability in the getCsvFile function in the Mage_Adminhtml_Block_Widget_Grid class in Magento Community Edition (CE) 1.9.1.0 and Ent… | Patch early | 6.5 medium | 55.8% | 2015-04-29 |
| CVE-2011-4908 EXP | TinyBrowser plugin for Joomla! before 1.5.13 allows arbitrary file upload via upload.php. | Patch early | 9.8 critical | 55.8% | 2020-02-12 |
| CVE-2013-0025 EXP | Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers a… | Patch early | 9.3 high | 55.8% | 2013-02-13 |
| CVE-2019-8387 EXP | MASTER IPCAMERA01 3.3.4.2103 devices allow Remote Command Execution, related to the thttpd component. | Patch early | 9.8 critical | 55.7% | 2019-05-08 |
| CVE-2016-6602 EXP | ZOHO WebNMS Framework 5.2 and 5.2 SP1 use a weak obfuscation algorithm to store passwords, which allows context-dependent attackers to obtain cleartex… | Patch early | 9.8 critical | 55.7% | 2017-01-23 |
| CVE-2005-2124 EXP | Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1, related to "An unchec… | Patch early | 7.6 high | 55.7% | 2005-11-29 |
| CVE-2018-1612 EXP | IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and obtain sensitive information.… | Patch early | 5.8 medium | 55.7% | 2018-07-17 |
| CVE-2019-7255 EXP | Linear eMerge E3-Series devices allow XSS. | Patch early | 6.1 medium | 55.7% | 2019-07-02 |
| CVE-2013-3520 EXP | VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary code via u… | Patch early | 7.5 high | 55.6% | 2013-06-17 |
| CVE-2014-7236 EXP | Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenablep… | Patch early | 9.1 critical | 55.6% | 2020-02-17 |
| CVE-2021-43857 EXP | Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue is patched… | Patch early | 9.8 critical | 55.6% | 2021-12-27 |
| CVE-2006-4948 EXP | Stack-based buffer overflow in tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 and earlier allows remote attackers to execute arbitrary code or cau… | Patch early | 7.5 high | 55.6% | 2006-09-23 |
| CVE-2018-0935 EXP | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 G… | Patch early | 7.5 high | 55.6% | 2018-03-14 |
| CVE-2010-1423 EXP | Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and (b) Java Deployment Toolkit in Java 6 Update 10, 19, and other versio… | Patch early | 9.3 high | 55.6% | 2010-04-15 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt