CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
424,657 CVEs
1,779 on KEV
17,541 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-12
1,779 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-86060 KEV EXP | RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted… | Patch first | 9.8 critical | 6.4% | 2026-09-05 |
| CVE-2019-0863 KEV EXP | An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privi… | Patch first | 7.8 high | 5.2% | 2019-05-16 |
| CVE-2015-5287 KEV EXP | The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via… | Patch first | 7.8 high | 5% | 2015-12-07 |
| CVE-2002-0367 KEV EXP | smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local… | Patch first | 7.8 high | 4.9% | 2002-06-25 |
| CVE-2019-0543 KEV EXP | An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege… | Patch first | 7.8 high | 4.7% | 2019-01-08 |
| CVE-2025-62215 KEV EXP | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate… | Patch first | 7.0 high | 4.5% | 2025-11-11 |
| CVE-2016-3643 KEV EXP | SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by… | Patch first | 7.8 high | 3.7% | 2016-06-17 |
| CVE-2021-22005 KEV | The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCen… | Patch first | 9.8 critical | 100% | 2021-09-23 |
| CVE-2024-7593 KEV | Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to… | Patch first | 9.8 critical | 100% | 2024-08-13 |
| CVE-2022-29464 KEV | Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content… | Patch first | 9.8 critical | 100% | 2022-04-18 |
| CVE-2021-21985 KEV | The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in whic… | Patch first | 9.8 critical | 100% | 2021-05-26 |
| CVE-2021-1498 KEV | Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform comman… | Patch first | 9.8 critical | 100% | 2021-05-06 |
| CVE-2023-35082 KEV | An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of th… | Patch first | 9.8 critical | 100% | 2023-08-15 |
| CVE-2023-22518 KEV | All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an… | Patch first | 9.8 critical | 100% | 2023-10-31 |
| CVE-2023-35078 KEV | An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application wit… | Patch first | 9.8 critical | 100% | 2023-07-25 |
| CVE-2023-4966 KEV | Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) … | Patch first | 9.4 critical | 100% | 2023-10-10 |
| CVE-2021-34473 KEV | Microsoft Exchange Server Remote Code Execution Vulnerability | Patch first | 9.1 critical | 100% | 2021-07-14 |
| CVE-2024-21887 KEV | A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated… | Patch first | 9.1 critical | 100% | 2024-01-12 |
| CVE-2021-40438 KEV | A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP S… | Patch first | 9.0 critical | 100% | 2021-09-16 |
| CVE-2023-32315 KEV | Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be… | Patch first | 8.6 high | 100% | 2023-05-26 |
| CVE-2024-21893 KEV | A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti… | Patch first | 8.2 high | 100% | 2024-01-31 |
| CVE-2026-109619 KEV | PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopu… | Patch first | 8.1 high | 100% | 2026-10-21 |
| CVE-2022-22954 KEV | VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious acto… | Patch first | 9.8 critical | 100% | 2022-04-11 |
| CVE-2017-7921 KEV | An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.… | Patch first | 9.8 critical | 100% | 2017-05-06 |
| CVE-2019-16920 KEV | Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker… | Patch first | 9.8 critical | 100% | 2019-09-27 |
| CVE-2025-49704 KEV | Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Patch first | 8.8 high | 100% | 2025-07-08 |
| CVE-2024-3273 KEV | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to… | Patch first | 7.3 high | 100% | 2024-04-04 |
| CVE-2024-34102 KEV | Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE… | Patch first | 9.8 critical | 100% | 2024-06-13 |
| CVE-2024-13159 KEV | Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthent… | Patch first | 9.8 critical | 100% | 2025-01-14 |
| CVE-2023-46604 KEV | The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to… | Patch first | 10.0 critical | 100% | 2023-10-27 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt