CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
400,208 CVEs
1,730 on KEV
17,275 EPSS ≥ 10%
25,087 with exploits
synced 2026-10-01
12,661 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2008-1320 EXP | Multiple buffer overflows in ASG-Sentry Network Manager 7.0.0 and earlier allow remote attackers to execute arbitrary code or cause a denial of servic… | Patch early | 10.0 high | 16.3% | 2008-03-13 |
| CVE-2010-2862 EXP | Integer overflow in CoolType.dll in Adobe Reader 8.2.3 and 9.3.3, and Acrobat 9.3.3, allows remote attackers to execute arbitrary code via a TrueType… | Patch early | 9.3 high | 16.3% | 2010-08-05 |
| CVE-2006-5506 EXP | Multiple PHP remote file inclusion vulnerabilities in WiClear 0.10 allow remote attackers to execute arbitrary PHP code via the path parameter in (1)… | Patch early | 7.5 high | 16.3% | 2006-10-25 |
| CVE-2019-7262 EXP | Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF). | Patch early | 8.8 high | 16.3% | 2019-07-02 |
| CVE-2010-4543 EXP | Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers t… | Patch early | 7.5 high | 16.3% | 2011-01-07 |
| CVE-1999-0233 EXP | IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files. | Patch early | 10.0 high | 16.3% | 1996-02-25 |
| CVE-2011-0501 EXP | Stack-based buffer overflow in Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attac… | Patch early | 9.3 high | 16.3% | 2011-01-20 |
| CVE-2024-44871 EXP | An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows attackers to execute arbitrary code via uploading a… | Patch early | 7.2 high | 16.2% | 2024-09-10 |
| CVE-2011-3491 EXP | Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) and possibl… | Patch early | 10.0 high | 16.2% | 2011-09-16 |
| CVE-2009-4492 EXP | WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to… | Patch early | 7.5 high | 16.2% | 2010-01-13 |
| CVE-2017-6206 EXP | D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware before 1.31.… | Patch early | 7.5 high | 16.2% | 2017-02-23 |
| CVE-2018-11220 EXP | Bitmain Antminer D3, L3+, and S9 devices allow Remote Command Execution via the system restore function. | Patch early | 8.8 high | 16.2% | 2018-05-31 |
| CVE-1999-0039 EXP | webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc parameter. | Patch early | 7.3 high | 16.2% | 1997-05-06 |
| CVE-2019-18396 EXP | An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor TD5130v2 devices. A Command Injection in the Ping modu… | Patch early | 7.2 high | 16.2% | 2019-10-31 |
| CVE-2009-3732 EXP | Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via… | Patch early | 10.0 high | 16.2% | 2010-04-12 |
| CVE-2010-4709 EXP | Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server before 3.0.2 allows remote attackers to cause a denial of service (cras… | Patch early | 7.6 high | 16.2% | 2011-01-28 |
| CVE-2007-3488 EXP | Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P5 before 1.29; SNC-CS10 and SNC… | Patch early | 10.0 high | 16.2% | 2007-06-29 |
| CVE-2014-7140 EXP | Unspecified vulnerability in the management interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.x before 10.1… | Patch early | 7.5 high | 16.2% | 2014-10-21 |
| CVE-2004-1292 EXP | Buffer overflow in the parse_emelody function in parse_emelody.c for ringtonetools 2.22 allows remote attackers to execute arbitrary code via a crafte… | Patch early | 10.0 high | 16.2% | 2005-01-10 |
| CVE-2017-1000251 EXP | The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to… | Patch early | 8.0 high | 16.2% | 2017-09-12 |
| CVE-2017-6971 EXP | AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged context, o… | Patch early | 8.8 high | 16.2% | 2017-03-22 |
| CVE-2010-3599 EXP | Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect… | Patch early | 9.4 high | 16.2% | 2011-01-19 |
| CVE-2018-10655 EXP | DLPnpAuditor.exe in DeviceLock Plug and Play Auditor (freeware) 5.72 has a Unicode Buffer Overflow (SEH). | Patch early | 7.8 high | 16.2% | 2018-05-10 |
| CVE-2005-0101 EXP | Buffer overflow in the socket_getline function in Newspost 2.1.1 and earlier allows remote malicious NNTP servers to execute arbitrary code via a long… | Patch early | 7.5 high | 16.2% | 2005-02-01 |
| CVE-2004-1018 EXP | Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execute arbitrar… | Patch early | 10.0 high | 16.2% | 2005-01-10 |
| CVE-2020-15956 EXP | ActiveMediaServer.exe in ACTi NVR3 Standard Server 3.0.12.42 allows remote unauthenticated attackers to trigger a buffer overflow and application term… | Patch early | 7.5 high | 16.2% | 2020-08-04 |
| CVE-2008-0748 EXP | Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyISUpload.cab 1.0.0.38 for Sony I… | Patch early | 10.0 high | 16.2% | 2008-02-13 |
| CVE-2010-1471 EXP | Directory traversal vulnerability in the AddressBook (com_addressbook) component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via… | Patch early | 7.5 high | 16.2% | 2010-04-19 |
| CVE-2010-1953 EXP | Directory traversal vulnerability in the iNetLanka Multiple Map (com_multimap) component 1.0 for Joomla! allows remote attackers to read arbitrary fil… | Patch early | 7.5 high | 16.2% | 2010-05-19 |
| CVE-2010-1954 EXP | Directory traversal vulnerability in the iNetLanka Multiple root (com_multiroot) component 1.0 and 1.1 for Joomla! allows remote attackers to read arb… | Patch early | 7.5 high | 16.2% | 2010-05-19 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt