CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
425,729 CVEs
1,781 on KEV
17,555 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-14
12,664 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2008-5232 EXP | Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3917 in Windows Media Services… | Patch early | 9.3 high | 32.2% | 2008-11-26 |
| CVE-2009-1568 EXP | Stack-based buffer overflow in ienipp.ocx in Novell iPrint Client 5.30, and possibly other versions before 5.32, allows remote attackers to execute ar… | Patch early | 9.3 high | 32.2% | 2009-12-08 |
| CVE-2017-7692 EXP | SquirrelMail 1.4.22 (and other versions before 20170427_0200-SVN) allows post-authentication remote code execution via a sendmail.cf file that is mish… | Patch early | 8.8 high | 32.2% | 2017-04-20 |
| CVE-2009-3837 EXP | Stack-based buffer overflow in Eureka Email 2.2q allows remote POP3 servers to execute arbitrary code via a long error message. | Patch early | 9.3 high | 32.1% | 2009-11-02 |
| CVE-2009-4588 EXP | Heap-based buffer overflow in the WindsPlayerIE.View.1 ActiveX control in WindsPly.ocx 3.5.0.0 Beta, 3.0.0.5, and earlier in AwingSoft Awakening Web3D… | Patch early | 9.3 high | 32% | 2010-01-07 |
| CVE-2013-3174 EXP | DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows… | Patch early | 9.3 high | 32% | 2013-07-10 |
| CVE-2010-5193 EXP | Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewe… | Patch early | 9.3 high | 32% | 2012-08-31 |
| CVE-2011-5170 EXP | Stack-based buffer overflow in Castillo Bueno Systems CCMPlayer 1.5 allows remote attackers to execute arbitrary code via a long track name in an m3u… | Patch early | 9.3 high | 32% | 2012-09-15 |
| CVE-2021-46378 EXP | DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through an unauthenticated remote configuration download. | Patch early | 7.5 high | 31.9% | 2022-03-04 |
| CVE-2009-1029 EXP | Stack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to execute arbitrary code via a long Date header, related to… | Patch early | 9.3 high | 31.8% | 2009-03-20 |
| CVE-2018-7777 EXP | The vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider Electric U.motion Builder softwar… | Patch early | 8.8 high | 31.8% | 2018-07-03 |
| CVE-2008-6898 EXP | Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote attackers to cause a denial o… | Patch early | 9.3 high | 31.7% | 2009-08-05 |
| CVE-2009-1960 EXP | inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote attackers to include and execute… | Patch early | 9.3 high | 31.7% | 2009-06-08 |
| CVE-2007-2244 EXP | Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote attackers to execute arbitrary code… | Patch early | 9.3 high | 31.7% | 2007-04-25 |
| CVE-2018-12827 EXP | Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. | Patch early | 7.5 high | 31.7% | 2018-08-29 |
| CVE-2019-13024 EXP | Centreon 18.x before 18.10.6, 19.x before 19.04.3, and Centreon web before 2.8.29 allows the attacker to execute arbitrary system commands by using th… | Patch early | 8.8 high | 31.6% | 2019-07-01 |
| CVE-2013-3120 EXP | Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web si… | Patch early | 9.3 high | 31.6% | 2013-06-12 |
| CVE-2015-8413 EXP | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 o… | Patch early | 10.0 high | 31.6% | 2015-12-10 |
| CVE-2015-8411 EXP | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 o… | Patch early | 10.0 high | 31.6% | 2015-12-10 |
| CVE-2015-8412 EXP | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 o… | Patch early | 10.0 high | 31.6% | 2015-12-10 |
| CVE-2015-8410 EXP | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 o… | Patch early | 10.0 high | 31.6% | 2015-12-10 |
| CVE-2015-8048 EXP | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 o… | Patch early | 10.0 high | 31.6% | 2015-12-10 |
| CVE-2008-4728 EXP | Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard… | Patch early | 9.3 high | 31.6% | 2008-10-24 |
| CVE-2001-0010 EXP | Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges. | Patch early | 10.0 high | 31.6% | 2001-02-12 |
| CVE-2009-4656 EXP | Stack-based buffer overflow in E-Soft DJ Studio Pro 4.2 including 4.2.2.7.5, and 5.x including 5.1.4.3.1, allows user-assisted remote attackers to cau… | Patch early | 9.3 high | 31.6% | 2010-03-03 |
| CVE-2012-2176 EXP | Multiple stack-based buffer overflows in a certain ActiveX control in qp2.cab in IBM Lotus Quickr 8.2 before 8.2.0.27-002a for Domino allow remote att… | Patch early | 9.3 high | 31.6% | 2012-05-25 |
| CVE-2018-19571 EXP | GitLab CE/EE, versions 8.18 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an SSRF vulnerability in webhooks… | Patch early | 7.7 high | 31.5% | 2019-07-10 |
| CVE-2013-3482 EXP | Stack-based buffer overflow in the rf_report_error function in ermapper_u.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote attackers… | Patch early | 9.3 high | 31.5% | 2014-01-19 |
| CVE-2008-5178 EXP | Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute arbitrary code via a long file:// URI. NOTE: this might overla… | Patch early | 9.3 high | 31.5% | 2008-11-20 |
| CVE-2015-2525 EXP | Task Scheduler in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and… | Patch early | 7.2 high | 31.5% | 2015-09-09 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt