CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
425,731 CVEs
1,781 on KEV
17,555 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-14
12,664 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2007-1277 EXP | WordPress 2.1.1, as downloaded from some official distribution sites during February and March 2007, contains an externally introduced backdoor that a… | Patch early | 7.5 high | 27.8% | 2007-03-05 |
| CVE-2008-2752 EXP | Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted remote attackers to cause a de… | Patch early | 7.1 high | 27.8% | 2008-06-18 |
| CVE-2015-3036 EXP | Stack-based buffer overflow in the run_init_sbus function in the KCodes NetUSB module for the Linux kernel, as used in certain NETGEAR products, TP-LI… | Patch early | 10.0 high | 27.7% | 2015-05-21 |
| CVE-2015-5118 EXP | Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481… | Patch early | 10.0 high | 27.7% | 2015-07-09 |
| CVE-2015-2467 EXP | Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerabil… | Patch early | 9.3 high | 27.7% | 2015-08-15 |
| CVE-2015-2520 EXP | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execu… | Patch early | 9.3 high | 27.7% | 2015-09-09 |
| CVE-2015-2521 EXP | Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a craft… | Patch early | 9.3 high | 27.7% | 2015-09-09 |
| CVE-2005-3116 EXP | Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5… | Patch early | 10.0 high | 27.6% | 2005-11-18 |
| CVE-2008-4830 EXP | Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 Patch 5 (KWEDIT.DLL 7100.1.1.43… | Patch early | 9.3 high | 27.6% | 2009-04-16 |
| CVE-2013-3686 EXP | cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password via a list a… | Patch early | 10.0 high | 27.6% | 2013-10-11 |
| CVE-2007-6015 EXP | Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows r… | Patch early | 9.3 high | 27.5% | 2007-12-13 |
| CVE-2020-14209 EXP | Dolibarr before 11.0.5 allows low-privilege users to upload files of dangerous types, leading to arbitrary code execution. This occurs because .pht an… | Patch early | 8.8 high | 27.5% | 2020-09-02 |
| CVE-2025-11001 EXP | 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code o… | Patch early | 7.8 high | 27.4% | 2025-11-19 |
| CVE-2006-5379 EXP | The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operati… | Patch early | 7.5 high | 27.4% | 2006-10-18 |
| CVE-2000-0169 EXP | Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'. | Patch early | 7.5 high | 27.4% | 2000-03-15 |
| CVE-2010-0103 EXP | UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the %WINDIR%\s… | Patch early | 9.3 high | 27.3% | 2010-03-10 |
| CVE-2012-3001 EXP | Mutiny Standard before 4.5-1.12 allows remote attackers to execute arbitrary commands via the network-interface menu, related to a "command injection… | Patch early | 8.5 high | 27.3% | 2012-10-22 |
| CVE-2001-1325 EXP | Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by includi… | Patch early | 7.5 high | 27.3% | 2001-04-20 |
| CVE-2003-0809 EXP | Internet Explorer 5.01 through 6.0 does not properly handle object tags returned from a Web server during XML data binding, which allows remote attack… | Patch early | 7.5 high | 27.3% | 2003-11-17 |
| CVE-2010-3138 EXP | Untrusted search path vulnerability in the Indeo Codec in iac25_32.ax in Microsoft Windows XP SP3 allows local users to gain privileges via a Trojan h… | Patch early | 9.3 high | 27.3% | 2010-08-27 |
| CVE-2008-4699 EXP | Insecure method vulnerability in the ActiveX control (PAWWeb11.ocx) in Peachtree Accounting 2004 allows remote attackers to execute arbitrary programs… | Patch early | 9.3 high | 27.2% | 2008-10-22 |
| CVE-2019-13063 EXP | Within Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim files on the system via the script parameter on the Script_v… | Patch early | 7.5 high | 27.2% | 2019-09-23 |
| CVE-2014-1912 EXP | Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 a… | Patch early | 7.5 high | 27.2% | 2014-03-01 |
| CVE-2019-9810 EXP | Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow. This vu… | Patch early | 8.8 high | 27.2% | 2019-04-26 |
| CVE-2019-16405 EXP | Centreon Web before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5 and 19.10.x before 19.10.2 allows Remote Code Execution by an administrator… | Patch early | 7.2 high | 27.2% | 2019-11-21 |
| CVE-2010-4367 EXP | awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted… | Patch early | 7.5 high | 27.2% | 2010-12-02 |
| CVE-2010-1248 EXP | Buffer overflow in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel file with a… | Patch early | 9.3 high | 27.2% | 2010-06-08 |
| CVE-2005-0468 EXP | Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary c… | Patch early | 7.5 high | 27.1% | 2005-05-02 |
| CVE-2016-6255 EXP | Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a register… | Patch early | 7.5 high | 27% | 2017-03-07 |
| CVE-1999-1484 EXP | Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary commands via the methods (1) v… | Patch early | 7.5 high | 27% | 1999-09-24 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt