CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
400,143 CVEs
1,730 on KEV
17,275 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-30
12,661 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2018-8897 EXP | A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the developmen… | Patch early | 7.8 high | 18.5% | 2018-05-08 |
| CVE-2013-3248 EXP | Untrusted search path vulnerability in Corel PDF Fusion 1.11 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current… | Patch early | 9.3 high | 18.5% | 2013-10-03 |
| CVE-2008-5297 EXP | Buffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted response to a DNS update request, re… | Patch early | 7.6 high | 18.5% | 2008-12-01 |
| CVE-2025-60787 EXP | MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as image_file_name. Unsanitized user input is wr… | Patch early | 7.2 high | 18.5% | 2025-10-03 |
| CVE-2007-0465 EXP | Format string vulnerability in Apple Installer 2.1.5 on Mac OS X 10.4.8 allows user-assisted remote attackers to execute arbitrary code via format str… | Patch early | 7.6 high | 18.5% | 2007-01-31 |
| CVE-2010-1495 EXP | Directory traversal vulnerability in the Matamko (com_matamko) component 1.01 for Joomla! allows remote attackers to read arbitrary files via a .. (do… | Patch early | 7.5 high | 18.5% | 2010-04-23 |
| CVE-2012-3576 EXP | Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows remote attackers to execute arbi… | Patch early | 10.0 high | 18.4% | 2012-06-16 |
| CVE-2017-6190 EXP | Directory traversal vulnerability in the web interface on the D-Link DWR-116 device with firmware before V1.05b09 allows remote attackers to read arbi… | Patch early | 7.5 high | 18.4% | 2017-04-10 |
| CVE-2019-1124 EXP | A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerabili… | Patch early | 8.8 high | 18.4% | 2019-07-15 |
| CVE-1999-0005 EXP | Arbitrary command execution via IMAP buffer overflow in authenticate command. | Patch early | 10.0 high | 18.4% | 1998-07-20 |
| CVE-2007-6335 EXP | Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers… | Patch early | 7.5 high | 18.4% | 2007-12-20 |
| CVE-2007-1071 EXP | Integer overflow in the gifGetBandProc function in ImageIO in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service (segmentation… | Patch early | 7.8 high | 18.4% | 2007-02-22 |
| CVE-2011-1018 EXP | logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log file name, as demonstrated via a… | Patch early | 10.0 high | 18.3% | 2011-02-25 |
| CVE-2019-7670 EXP | Prima Systems FlexAir, Versions 2.3.38 and prior. The application incorrectly neutralizes special elements that could modify the intended OS command w… | Patch early | 7.2 high | 18.3% | 2019-07-01 |
| CVE-2003-0500 EXP | SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers to execute… | Patch early | 10.0 high | 18.3% | 2003-08-07 |
| CVE-2024-4956 EXP | Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1. | Patch early | 7.5 high | 18.2% | 2024-05-16 |
| CVE-2006-3660 EXP | Unspecified vulnerability in Microsoft PowerPoint 2003 has unknown impact and user-assisted attack vectors related to powerpnt.exe. NOTE: due to the l… | Patch early | 7.6 high | 18.2% | 2006-07-18 |
| CVE-2003-1118 EXP | Buffer overflow in the SETI@home client 3.03 and other versions allows remote attackers to cause a denial of service (client crash) and execute arbitr… | Patch early | 7.5 high | 18.2% | 2003-12-31 |
| CVE-2018-15142 EXP | Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal t… | Patch early | 8.8 high | 18.2% | 2018-08-13 |
| CVE-2008-6393 EXP | PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a file transfer r… | Patch early | 10.0 high | 18.2% | 2009-03-03 |
| CVE-2001-0664 EXP | Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which cau… | Patch early | 7.5 high | 18.2% | 2001-10-30 |
| CVE-2019-12624 EXP | A vulnerability in the web-based management interface of Cisco IOS XE New Generation Wireless Controller (NGWC) could allow an unauthenticated, remote… | Patch early | 8.8 high | 18.2% | 2019-08-21 |
| CVE-2007-1285 EXP | The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) v… | Patch early | 7.5 high | 18.2% | 2007-03-06 |
| CVE-2024-58258 EXP | SugarCRM before 13.0.4 and 14.x before 14.0.1 allows SSRF in the API module because a limited type of code injection can occur. | Patch early | 7.2 high | 18.2% | 2025-07-13 |
| CVE-2018-19423 EXP | Codiad 2.8.4 allows remote authenticated administrators to execute arbitrary code by uploading an executable file. | Patch early | 7.2 high | 18.1% | 2018-11-21 |
| CVE-2016-2207 EXP | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Syman… | Patch early | 8.4 high | 18.1% | 2016-06-30 |
| CVE-2017-2988 EXP | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection. Successful… | Patch early | 8.8 high | 18.1% | 2017-02-15 |
| CVE-2000-0973 EXP | Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a lo… | Patch early | 10.0 high | 18.1% | 2000-12-19 |
| CVE-2009-1331 EXP | Integer overflow in Microsoft Windows Media Player (WMP) 11.0.5721.5260 allows remote attackers to cause a denial of service (application crash) via a… | Patch early | 9.3 high | 18.1% | 2009-04-17 |
| CVE-2010-2259 EXP | Directory traversal vulnerability in the BF Survey (com_bfsurvey) component for Joomla! allows remote attackers to include and execute arbitrary local… | Patch early | 7.5 high | 18.1% | 2010-06-09 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt