CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
399,516 CVEs
1,729 on KEV
17,272 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-30
12,661 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2013-3162 EXP | Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf… | Patch early | 9.3 high | 25% | 2013-07-10 |
| CVE-2019-3948 EXP | The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0.R, Dahua DH-IPC HX883X and DH… | Patch early | 7.5 high | 25% | 2019-07-29 |
| CVE-2011-1965 EXP | Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-based QoS, whi… | Patch early | 7.1 high | 24.9% | 2011-08-10 |
| CVE-2012-1205 EXP | PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allows remote attackers to execute… | Patch early | 7.5 high | 24.9% | 2012-02-24 |
| CVE-2010-2561 EXP | Microsoft XML Core Services (aka MSXML) 3.0 does not properly handle HTTP responses, which allows remote attackers to execute arbitrary code or cause… | Patch early | 9.3 high | 24.9% | 2010-08-11 |
| CVE-2004-0084 EXP | Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenti… | Patch early | 10.0 high | 24.9% | 2004-03-03 |
| CVE-2019-1914 EXP | A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an authenticated, remote attacker to per… | Patch early | 7.2 high | 24.9% | 2019-08-07 |
| CVE-1999-0725 EXP | When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a.… | Patch early | 7.1 high | 24.9% | 1999-08-19 |
| CVE-2012-5863 EXP | These Sinapsi devices do not check for special elements in commands sent to the system. By accessing certain pages with administrative privileges th… | Patch early | 10.0 high | 24.8% | 2012-11-23 |
| CVE-2008-2959 EXP | Buffer overflow in a certain ActiveX control (vb6skit.dll) in Microsoft Visual Basic Enterprise Edition 6.0 SP6 might allow remote attackers to execut… | Patch early | 9.3 high | 24.8% | 2008-07-02 |
| CVE-2009-1140 EXP | Microsoft Internet Explorer 5.01 SP4; 6 SP1; 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 fo… | Patch early | 7.1 high | 24.8% | 2009-06-10 |
| CVE-2014-1791 EXP | Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf… | Patch early | 9.3 high | 24.7% | 2014-06-11 |
| CVE-2014-1795 EXP | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf… | Patch early | 9.3 high | 24.7% | 2014-06-11 |
| CVE-2012-4353 EXP | Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attack… | Patch early | 9.3 high | 24.7% | 2012-08-19 |
| CVE-2010-1246 EXP | Stack-based buffer overflow in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RT… | Patch early | 9.3 high | 24.7% | 2010-06-08 |
| CVE-2009-4850 EXP | The Awingsoft Awakening Winds3D Viewer plugin 3.5.0.9 allows remote attackers to execute arbitrary programs via a SceneURL property value with a URL f… | Patch early | 9.3 high | 24.7% | 2010-05-07 |
| CVE-2016-9554 EXP | The Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a Remote Command Injection vulnerability in its web adm… | Patch early | 7.2 high | 24.6% | 2017-01-28 |
| CVE-2015-7652 EXP | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux,… | Patch early | 9.3 high | 24.6% | 2015-11-11 |
| CVE-2017-2932 EXP | Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript MovieClip class. Successful ex… | Patch early | 8.8 high | 24.6% | 2017-01-11 |
| CVE-1999-0003 EXP | Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd). | Patch early | 10.0 high | 24.6% | 1998-04-01 |
| CVE-2008-7232 EXP | Buffer overflow in the report function in xtacacsd 4.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted CONNECT TACACS co… | Patch early | 10.0 high | 24.5% | 2009-09-14 |
| CVE-2014-1797 EXP | Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… | Patch early | 9.3 high | 24.5% | 2014-06-11 |
| CVE-2014-1800 EXP | Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf… | Patch early | 9.3 high | 24.5% | 2014-06-11 |
| CVE-2007-2795 EXP | Multiple buffer overflows in Ipswitch IMail before 2006.21 allow remote attackers or authenticated users to execute arbitrary code via (1) the authent… | Patch early | 9.0 high | 24.5% | 2009-01-27 |
| CVE-2001-0419 EXP | Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle application server 4.0.8.2, allow… | Patch early | 7.5 high | 24.4% | 2001-07-02 |
| CVE-1999-0702 EXP | Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExportFavori… | Patch early | 10.0 high | 24.4% | 1999-09-10 |
| CVE-2008-3892 EXP | Buffer overflow in a certain ActiveX control in the COM API in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0… | Patch early | 10.0 high | 24.4% | 2008-09-03 |
| CVE-2014-8146 EXP | The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Un… | Patch early | 7.5 high | 24.3% | 2015-05-25 |
| CVE-2019-13358 EXP | lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying operating system. The attacker must… | Patch early | 7.5 high | 24.3% | 2019-07-05 |
| CVE-2004-0110 EXP | Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitra… | Patch early | 7.5 high | 24.2% | 2004-03-15 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt