CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
425,751 CVEs
1,781 on KEV
17,555 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-14
25,095 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2015-2994 EXP | Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators to execute arbitrary code by up… | Patch early | 6.5 medium | 49.8% | 2015-06-08 |
| CVE-2017-8682 EXP | Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows… | Patch early | 8.8 high | 49.8% | 2017-09-13 |
| CVE-2007-2447 EXP | The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters invol… | Patch early | 6.0 medium | 49.8% | 2007-05-14 |
| CVE-2026-23918 EXP | Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are… | Patch early | 8.8 high | 49.7% | 2026-05-04 |
| CVE-2011-3639 EXP | The mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 patch is in place, does not pro… | Patch early | 4.3 medium | 49.7% | 2011-11-30 |
| CVE-2022-23854 EXP | AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user with netw… | Patch early | 7.5 high | 49.7% | 2022-12-23 |
| CVE-2011-3486 EXP | Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to UDP port 48899, which triggers… | Patch early | 5.0 medium | 49.7% | 2011-09-16 |
| CVE-2004-1135 EXP | Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service crash) via long (1) SITE, (2)… | Patch early | 5.0 medium | 49.6% | 2005-01-10 |
| CVE-2017-11793 EXP | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows… | Patch early | 7.5 high | 49.6% | 2017-10-13 |
| CVE-2006-0006 EXP | Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Windows 2000… | Patch early | 9.3 high | 49.6% | 2006-02-14 |
| CVE-2013-3563 EXP | Stack-based buffer overflow in db_netserver in Lianja SQL Server before 1.0.0RC5.2 allows remote attackers to cause a denial of service (daemon crash)… | Patch early | 7.5 high | 49.5% | 2013-07-04 |
| CVE-2001-0876 EXP | Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY direc… | Patch early | 7.5 high | 49.5% | 2001-12-20 |
| CVE-2022-37109 EXP | patrickfuller camp up to and including commit bbd53a256ed70e79bd8758080936afbf6d738767 is vulnerable to Incorrect Access Control. Access to the passwo… | Patch early | 9.8 critical | 49.5% | 2022-11-14 |
| CVE-2016-0015 EXP | DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2,… | Patch early | 7.8 high | 49.4% | 2016-01-13 |
| CVE-2012-3363 EXP | Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attac… | Patch early | 9.1 critical | 49.3% | 2013-02-13 |
| CVE-2015-6967 EXP | Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to execute arbitrary code by upl… | Patch early | 6.5 medium | 49.3% | 2015-09-16 |
| CVE-2011-3230 EXP | Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers to execute arbitrary code via… | Patch early | 6.8 medium | 49.3% | 2011-10-14 |
| CVE-2018-13862 EXP | Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 (FW 303) allow unauthorized remote attackers to reset the authentication… | Patch early | 9.8 critical | 49.3% | 2018-07-17 |
| CVE-2008-4114 EXP | srv.sys in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remot… | Patch early | 7.1 high | 49.3% | 2008-09-16 |
| CVE-2020-6010 EXP | LearnPress Wordpress plugin version prior and including 3.2.6.7 is vulnerable to SQL Injection | Patch early | 8.8 high | 49.2% | 2020-04-30 |
| CVE-2006-2685 EXP | PHP remote file inclusion vulnerability in Basic Analysis and Security Engine (BASE) 1.2.4 and earlier, with register_globals enabled, allows remote a… | Patch early | 4.0 medium | 49.2% | 2006-05-31 |
| CVE-2008-1311 EXP | The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of service (daemon hang) by upload… | Patch early | 5.0 medium | 49.2% | 2008-03-12 |
| CVE-2023-3710 EXP | Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injection.This issue affects PM43 v… | Patch early | 9.9 critical | 49% | 2023-09-12 |
| CVE-2004-0200 EXP | Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers… | Patch early | 9.3 high | 49% | 2004-09-28 |
| CVE-2016-0736 EXP | In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured ciphers with possibly either CB… | Patch early | 7.5 high | 49% | 2017-07-27 |
| CVE-2007-4776 EXP | Buffer overflow in Microsoft Visual Basic 6.0 and Enterprise Edition 6.0 SP6 allows user-assisted remote attackers to execute arbitrary code via a Vis… | Patch early | 9.3 high | 49% | 2007-09-10 |
| CVE-2018-9126 EXP | The DNNArticle module 11 for DNN (formerly DotNetNuke) allows remote attackers to read the web.config file, and consequently discover database credent… | Patch early | 9.8 critical | 48.9% | 2018-04-04 |
| CVE-2005-3388 EXP | Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrar… | Patch early | 4.3 medium | 48.9% | 2005-11-01 |
| CVE-2018-16323 EXP | ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value. If t… | Patch early | 6.5 medium | 48.9% | 2018-09-01 |
| CVE-2012-1803 EXP | RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Address field in the banner, whi… | Patch early | 8.5 high | 48.9% | 2012-04-28 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt