CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
425,750 CVEs
1,781 on KEV
17,555 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-14
25,095 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2007-2888 EXP | Stack-based buffer overflow in UltraISO 8.6.2.2011 and earlier allows user-assisted remote attackers to execute arbitrary code via a long FILE string… | Patch early | 7.6 high | 54.7% | 2007-05-30 |
| CVE-2012-0270 EXP | Multiple stack-based buffer overflows in Csound before 5.16.6 allow remote attackers to execute arbitrary code via a crafted (1) hetro file to the get… | Patch early | 7.5 high | 54.7% | 2014-02-17 |
| CVE-2016-0784 EXP | Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1 allows remote authenticated ad… | Patch early | 6.5 medium | 54.7% | 2016-04-11 |
| CVE-2011-5124 EXP | Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows remote atta… | Patch early | 10.0 high | 54.6% | 2012-08-26 |
| CVE-2009-4223 EXP | PHP remote file inclusion vulnerability in adm/krgourl.php in KR-Web 1.1b2 and earlier allows remote attackers to execute arbitrary PHP code via a URL… | Patch early | 7.5 high | 54.6% | 2009-12-07 |
| CVE-2019-6453 EXP | mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc://… | Patch early | 8.1 high | 54.6% | 2019-02-18 |
| CVE-2017-8657 EXP | Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the cu… | Patch early | 7.5 high | 54.6% | 2017-08-08 |
| CVE-2019-16667 EXP | diag_command.php in pfSense 2.4.4-p3 allows CSRF via the txtCommand or txtRecallBuffer field, as demonstrated by executing OS commands. This occurs be… | Patch early | 8.8 high | 54.5% | 2019-09-26 |
| CVE-2010-3863 EXP | Apache Shiro before 1.1.0, and JSecurity 0.9.x, does not canonicalize URI paths before comparing them to entries in the shiro.ini file, which allows r… | Patch early | 5.0 medium | 54.5% | 2010-11-05 |
| CVE-2009-1730 EXP | Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read or modify arbitrary files via… | Patch early | 10.0 high | 54.5% | 2009-05-20 |
| CVE-2016-2056 EXP | xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the a… | Patch early | 8.8 high | 54.5% | 2016-04-13 |
| CVE-2022-24562 EXP | In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary read/write access to the enti… | Patch early | 9.8 critical | 54.5% | 2022-06-16 |
| CVE-2012-0202 EXP | Multiple stack-based buffer overflows in tm1admsd.exe in the Admin Server in IBM Cognos TM1 9.4.x and 9.5.x before 9.5.2 FP2 allow remote attackers to… | Patch early | 10.0 high | 54.5% | 2012-05-04 |
| CVE-2025-49132 EXP | Pterodactyl is a free, open-source game server management panel. Prior to version 1.11.11, using the /locales/locale.json with the locale and namespac… | Patch early | 10.0 critical | 54.5% | 2025-06-20 |
| CVE-2002-0371 EXP | Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to exec… | Patch early | 7.5 high | 54.4% | 2002-07-03 |
| CVE-2007-3040 EXP | Stack-based buffer overflow in agentdpv.dll 2.0.0.3425 in Microsoft Agent on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a… | Patch early | 9.3 high | 54.4% | 2007-09-12 |
| CVE-2021-36356 EXP | KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts arbitrary e… | Patch early | 9.8 critical | 54.4% | 2021-08-31 |
| CVE-2011-0027 EXP | Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation f… | Patch early | 9.3 high | 54.4% | 2011-01-12 |
| CVE-2018-10956 EXP | IPConfigure Orchid Core VMS 2.0.5 allows Directory Traversal. | Patch early | 7.5 high | 54.3% | 2018-06-25 |
| CVE-2018-18326 EXP | DNN (aka DotNetNuke) 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expected entropy. NOTE: this issue e… | Patch early | 7.5 high | 54.3% | 2019-07-03 |
| CVE-2017-17932 EXP | A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow remote attackers to execute ar… | Patch early | 9.8 critical | 54.2% | 2017-12-28 |
| CVE-1999-0661 EXP | A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers 7.6, (2) u… | Patch early | 10.0 high | 54.2% | 1999-01-01 |
| CVE-2025-27007 EXP | Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a… | Patch early | 9.8 critical | 54.2% | 2025-05-01 |
| CVE-2018-5347 EXP | Seagate Media Server in Seagate Personal Cloud has unauthenticated command injection in the uploadTelemetry and getLogs functions in views.py because… | Patch early | 9.8 critical | 54.2% | 2018-01-12 |
| CVE-2022-33098 EXP | Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting (XSS) vulnerability via the Edit Contact function. This vulnerability allows att… | Patch early | 6.1 medium | 54.1% | 2022-07-07 |
| CVE-2022-36267 EXP | In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command injection vulnerability. The ping functionality can… | Patch early | 9.8 critical | 54.1% | 2022-08-08 |
| CVE-2006-2502 EXP | Stack-based buffer overflow in pop3d in Cyrus IMAPD (cyrus-imapd) 2.3.2, when the popsubfolders option is enabled, allows remote attackers to execute… | Patch early | 5.1 medium | 54.1% | 2006-05-22 |
| CVE-2001-0800 EXP | lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters. | Patch early | 10.0 high | 54.1% | 2001-12-06 |
| CVE-2019-19609 EXP | The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin components of the Admin panel,… | Patch early | 7.2 high | 54.1% | 2019-12-05 |
| CVE-2010-1663 EXP | The Google URL Parsing Library (aka google-url or GURL) in Google Chrome before 4.1.249.1064 allows remote attackers to bypass the Same Origin Policy… | Patch early | 10.0 high | 54.1% | 2010-05-03 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt