CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
399,486 CVEs
1,729 on KEV
17,272 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-29
12,661 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2010-0265 EXP | Buffer overflow in Microsoft Windows Movie Maker 2.1, 2.6, and 6.0, and Microsoft Producer 2003, allows remote attackers to execute arbitrary code via… | Patch early | 9.3 high | 26.6% | 2010-03-10 |
| CVE-2016-6255 EXP | Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a register… | Patch early | 7.5 high | 26.6% | 2017-03-07 |
| CVE-2017-15647 EXP | On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value. | Patch early | 7.5 high | 26.6% | 2017-10-19 |
| CVE-2011-2003 EXP | Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Serv… | Patch early | 9.3 high | 26.6% | 2011-10-12 |
| CVE-2020-5515 EXP | Gila CMS 1.11.8 allows /admin/sql?query= SQL Injection. | Patch early | 7.2 high | 26.5% | 2020-01-06 |
| CVE-2015-3134 EXP | Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18… | Patch early | 10.0 high | 26.5% | 2015-07-09 |
| CVE-1999-0918 EXP | Denial of service in various Windows systems via malformed, fragmented IGMP packets. | Patch early | 7.8 high | 26.4% | 1999-07-03 |
| CVE-2014-2994 EXP | Stack-based buffer overflow in Acunetix Web Vulnerability Scanner (WVS) 8 build 20120704 allows remote attackers to execute arbitrary code via an HTML… | Patch early | 10.0 high | 26.4% | 2014-04-27 |
| CVE-2017-16642 EXP | In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back o… | Patch early | 7.5 high | 26.4% | 2017-11-07 |
| CVE-2000-0666 EXP | rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to… | Patch early | 10.0 high | 26.3% | 2000-07-16 |
| CVE-2019-1150 EXP | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who succes… | Patch early | 8.8 high | 26.2% | 2019-08-14 |
| CVE-2004-0104 EXP | Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code. | Patch early | 7.5 high | 26.2% | 2004-03-03 |
| CVE-2001-0552 EXP | ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell… | Patch early | 10.0 high | 26.2% | 2001-09-20 |
| CVE-2002-0823 EXP | Buffer overflow in Winhlp32.exe allows remote attackers to execute arbitrary code via an HTML document that calls the HTML Help ActiveX control (HHCtr… | Patch early | 7.5 high | 26.2% | 2002-08-12 |
| CVE-2002-0859 EXP | Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code. | Patch early | 7.5 high | 26.2% | 2002-09-05 |
| CVE-2003-0910 EXP | The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attacke… | Patch early | 7.2 high | 26.1% | 2004-06-01 |
| CVE-2015-8644 EXP | Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0… | Patch early | 8.8 high | 26.1% | 2015-12-28 |
| CVE-2016-0985 EXP | Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0… | Patch early | 8.8 high | 26.1% | 2016-02-10 |
| CVE-2012-5692 EXP | Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x through 3.3.x has unknown impact and remo… | Patch early | 10.0 high | 26% | 2012-10-31 |
| CVE-2013-2097 EXP | ZPanel through 10.1.0 has Remote Command Execution | Patch early | 7.8 high | 26% | 2020-02-12 |
| CVE-2018-0708 EXP | Command injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run a… | Patch early | 8.8 high | 26% | 2018-07-17 |
| CVE-2016-1011 EXP | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.6… | Patch early | 8.8 high | 26% | 2016-04-09 |
| CVE-2003-0107 EXP | Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, all… | Patch early | 7.5 high | 26% | 2003-03-07 |
| CVE-1999-0045 EXP | List of arbitrary files on Web host via nph-test-cgi script. | Patch early | 7.5 high | 26% | 1996-12-10 |
| CVE-2003-0908 EXP | The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary code via a "… | Patch early | 7.2 high | 25.9% | 2004-06-01 |
| CVE-1999-0236 EXP | ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs. | Patch early | 7.5 high | 25.8% | 1997-01-01 |
| CVE-2009-0692 EXP | Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 be… | Patch early | 10.0 high | 25.8% | 2009-07-14 |
| CVE-2019-13359 EXP | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, a cwpsrv-xxx cookie allows a normal user to craft and upload a session file to the /tmp d… | Patch early | 7.5 high | 25.8% | 2019-07-16 |
| CVE-2021-25162 EXP | A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6… | Patch early | 8.1 high | 25.8% | 2021-03-30 |
| CVE-2002-1131 EXP | Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1) addressboo… | Patch early | 7.5 high | 25.8% | 2002-10-04 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt