CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
424,477 CVEs
1,779 on KEV
17,541 EPSS ≥ 10%
25,094 with exploits
synced 2026-11-11
10,150 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2005-0478 EXP | Multiple buffer overflows in TrackerCam 5.12 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (… | Patch early | 5.0 medium | 66.5% | 2005-03-30 |
| CVE-2014-6593 EXP | Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote a… | Patch early | 4.0 medium | 66.4% | 2015-01-21 |
| CVE-2007-3522 EXP | Multiple PHP remote file inclusion vulnerabilities in sPHPell 1.01 allow remote attackers to execute arbitrary PHP code via a URL in the SpellIncPath… | Patch early | 6.8 medium | 66.2% | 2007-07-03 |
| CVE-2008-4546 EXP | Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of servi… | Patch early | 4.3 medium | 65.9% | 2008-10-14 |
| CVE-2023-40028 EXP | Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows authenticated users to upload… | Patch early | 4.9 medium | 65.7% | 2023-08-15 |
| CVE-2015-2295 EXP | Cross-site request forgery (CSRF) vulnerability in system_firmware_restorefullbackup.php in the WebGUI in pfSense before 2.2.1 allows remote attackers… | Patch early | 6.8 medium | 65.7% | 2015-04-10 |
| CVE-2001-1013 EXP | Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html dir… | Patch early | 5.0 medium | 65.6% | 2001-09-12 |
| CVE-2018-0767 EXP | Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise… | Patch early | 5.3 medium | 65.5% | 2018-01-04 |
| CVE-2023-41425 EXP | Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded… | Patch early | 6.1 medium | 65.5% | 2023-11-07 |
| CVE-2002-1744 EXP | Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbi… | Patch early | 5.0 medium | 65.2% | 2002-12-31 |
| CVE-2025-27218 EXP | Sitecore Experience Manager (XM) and Experience Platform (XP) 10.4 before KB1002844 allow remote code execution through insecure deserialization. | Patch early | 5.3 medium | 65% | 2025-02-20 |
| CVE-2015-0802 EXP | Mozilla Firefox before 37.0 relies on docshell type information instead of page principal information for Window.webidl access control, which might al… | Patch early | 5.0 medium | 65% | 2015-04-01 |
| CVE-2008-0455 EXP | Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and ear… | Patch early | 4.3 medium | 64.9% | 2008-01-25 |
| CVE-2015-6973 EXP | Multiple cross-site request forgery (CSRF) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to hijack the authentication of a… | Patch early | 6.8 medium | 64.8% | 2015-09-16 |
| CVE-1999-0278 EXP | In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL. | Patch early | 5.0 medium | 64.8% | 1998-06-01 |
| CVE-2015-0816 EXP | Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 do not properly restrict resource: URLs, which makes it easier… | Patch early | 5.0 medium | 64.6% | 2015-04-01 |
| CVE-2010-4094 EXP | The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN account, which makes it easier fo… | Patch early | 5.0 medium | 64.5% | 2010-10-26 |
| CVE-2007-3524 EXP | Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote attackers to execute arbitrary PHP code via… | Patch early | 6.8 medium | 64.2% | 2007-07-03 |
| CVE-2007-2939 EXP | Multiple PHP remote file inclusion vulnerabilities in Mazen's PHP Chat 3.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the bas… | Patch early | 6.8 medium | 64% | 2007-05-31 |
| CVE-2012-5067 EXP | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect c… | Patch early | 5.0 medium | 64% | 2012-10-16 |
| CVE-2014-5350 EXP | Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via a (1) ..… | Patch early | 5.0 medium | 63.9% | 2014-08-19 |
| CVE-2006-3726 EXP | Buffer overflow in FileCOPA FTP Server before 1.01 released on 18th July 2006, allows remote authenticated attackers to execute arbitrary code via a l… | Patch early | 6.5 medium | 63.7% | 2006-07-21 |
| CVE-2005-1939 EXP | Directory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers to read arbitrary files via ".." (dot dot) sequences… | Patch early | 5.0 medium | 63.6% | 2005-12-31 |
| CVE-2003-0245 EXP | Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.45 allows remote attackers to ca… | Patch early | 5.0 medium | 63.5% | 2003-06-09 |
| CVE-2007-3220 EXP | PHP remote file inclusion vulnerability in admin/editor2/spaw_control.class.php in the Cjay Content 3 module for XOOPS allows remote attackers to exec… | Patch early | 6.8 medium | 62.7% | 2007-06-14 |
| CVE-2023-34096 EXP | Thruk is a multibackend monitoring webinterface which currently supports Naemon, Icinga, Shinken and Nagios as backends. In versions 3.06 and prior, t… | Patch early | 6.5 medium | 62.7% | 2023-06-08 |
| CVE-2007-5333 EXP | Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (") characters or (2) %5C… | Patch early | 5.0 medium | 62.6% | 2008-02-12 |
| CVE-2019-13396 EXP | FlightPath 4.x and 5.0-x allows directory traversal and Local File Inclusion through the form_include parameter in an index.php?q=system-handle-form-s… | Patch early | 5.3 medium | 62.6% | 2019-07-10 |
| CVE-2000-0760 EXP | The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL wi… | Patch early | 6.4 medium | 62.5% | 2000-10-20 |
| CVE-2018-9948 EXP | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction… | Patch early | 6.5 medium | 62.5% | 2018-05-17 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt