CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
399,451 CVEs
1,729 on KEV
17,272 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-29
12,661 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2011-1276 EXP | Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewe… | Patch early | 9.3 high | 28.2% | 2011-06-16 |
| CVE-2018-19571 EXP | GitLab CE/EE, versions 8.18 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an SSRF vulnerability in webhooks… | Patch early | 7.7 high | 28.2% | 2019-07-10 |
| CVE-2010-1225 EXP | The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server… | Patch early | 9.3 high | 28.2% | 2010-04-01 |
| CVE-2011-0041 EXP | Integer overflow in gdiplus.dll in GDI+ in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 G… | Patch early | 9.3 high | 28.2% | 2011-04-13 |
| CVE-2014-1912 EXP | Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 a… | Patch early | 7.5 high | 28.1% | 2014-03-01 |
| CVE-2001-0875 EXP | Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in… | Patch early | 7.5 high | 28.1% | 2001-11-26 |
| CVE-2020-35606 EXP | Arbitrary command execution can occur in Webmin through 1.962. Any user authorized for the Package Updates module can execute arbitrary commands with… | Patch early | 8.8 high | 28% | 2020-12-21 |
| CVE-2008-3263 EXP | The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B… | Patch early | 7.8 high | 28% | 2008-07-22 |
| CVE-2013-0726 EXP | Stack-based buffer overflow in the ERM_convert_to_correct_webpath function in ermapper_u.dll in ERDAS ER Viewer before 13.00.0001 allows remote attack… | Patch early | 9.3 high | 28% | 2013-05-05 |
| CVE-2006-1236 EXP | Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound… | Patch early | 7.5 high | 28% | 2006-03-15 |
| CVE-2001-0239 EXP | Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request w… | Patch early | 7.5 high | 28% | 2001-07-02 |
| CVE-2018-7171 EXP | Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of arbitrary directories via a ..… | Patch early | 7.5 high | 27.9% | 2018-03-30 |
| CVE-2001-0341 EXP | Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary comma… | Patch early | 7.5 high | 27.9% | 2001-07-21 |
| CVE-1999-0002 EXP | Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems. | Patch early | 10.0 high | 27.9% | 1998-10-12 |
| CVE-2010-4741 EXP | Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MDM Gateways to execute arbitrar… | Patch early | 9.3 high | 27.8% | 2011-02-18 |
| CVE-2017-14335 EXP | On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently sanitized, sending a PUT request to /ISAPI/Security/users/1… | Patch early | 7.5 high | 27.8% | 2017-09-12 |
| CVE-2010-2330 EXP | Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arb… | Patch early | 9.3 high | 27.8% | 2010-06-18 |
| CVE-2009-0184 EXP | Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allow remote attackers… | Patch early | 9.3 high | 27.8% | 2009-02-03 |
| CVE-2010-4566 EXP | The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NTLM authent… | Patch early | 9.3 high | 27.8% | 2011-01-14 |
| CVE-2008-2752 EXP | Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted remote attackers to cause a de… | Patch early | 7.1 high | 27.8% | 2008-06-18 |
| CVE-2015-3036 EXP | Stack-based buffer overflow in the run_init_sbus function in the KCodes NetUSB module for the Linux kernel, as used in certain NETGEAR products, TP-LI… | Patch early | 10.0 high | 27.7% | 2015-05-21 |
| CVE-2015-5118 EXP | Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481… | Patch early | 10.0 high | 27.7% | 2015-07-09 |
| CVE-2015-2467 EXP | Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerabil… | Patch early | 9.3 high | 27.7% | 2015-08-15 |
| CVE-2015-2520 EXP | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execu… | Patch early | 9.3 high | 27.7% | 2015-09-09 |
| CVE-2015-2521 EXP | Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a craft… | Patch early | 9.3 high | 27.7% | 2015-09-09 |
| CVE-2010-4367 EXP | awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted… | Patch early | 7.5 high | 27.7% | 2010-12-02 |
| CVE-2005-3116 EXP | Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5… | Patch early | 10.0 high | 27.6% | 2005-11-18 |
| CVE-2008-4830 EXP | Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 Patch 5 (KWEDIT.DLL 7100.1.1.43… | Patch early | 9.3 high | 27.6% | 2009-04-16 |
| CVE-2013-3686 EXP | cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password via a list a… | Patch early | 10.0 high | 27.6% | 2013-10-11 |
| CVE-2007-6015 EXP | Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows r… | Patch early | 9.3 high | 27.5% | 2007-12-13 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt