CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
424,671 CVEs
1,779 on KEV
17,541 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-12
1,779 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2019-7481 KEV | Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 ver… | Patch first | 7.5 high | 99.9% | 2019-12-17 |
| CVE-2023-21839 KEV | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.… | Patch first | 7.5 high | 99.9% | 2023-01-18 |
| CVE-2021-35394 KEV | Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binar… | Patch first | 9.8 critical | 99.9% | 2021-08-16 |
| CVE-2022-35405 KEV | Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. (This also affects… | Patch first | 9.8 critical | 99.9% | 2022-07-19 |
| CVE-2021-44515 KEV | Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in the wild in… | Patch first | 9.8 critical | 99.9% | 2021-12-12 |
| CVE-2021-31166 KEV | HTTP Protocol Stack Remote Code Execution Vulnerability | Patch first | 9.8 critical | 99.9% | 2021-05-11 |
| CVE-2025-49706 KEV | Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | Patch first | 6.5 medium | 99.9% | 2025-07-08 |
| CVE-2021-37415 KEV | Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication. | Patch first | 9.8 critical | 99.8% | 2021-09-01 |
| CVE-2025-10035 KEV | A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response signature to… | Patch first | 10.0 critical | 99.8% | 2025-09-18 |
| CVE-2023-38831 KEV | RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs… | Patch first | 7.8 high | 99.8% | 2023-08-23 |
| CVE-2024-36401 KEV | GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2, multiple… | Patch first | 9.8 critical | 99.8% | 2024-07-01 |
| CVE-2023-38205 KEV | Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerabilit… | Patch first | 7.5 high | 99.8% | 2023-09-14 |
| CVE-2026-8037 KEV | OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary comm… | Patch first | 9.6 critical | 99.8% | 2026-06-04 |
| CVE-2021-34527 KEV | A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who su… | Patch first | 8.8 high | 99.8% | 2021-07-02 |
| CVE-2023-29298 KEV | Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Access Control vul… | Patch first | 7.5 high | 99.8% | 2023-07-12 |
| CVE-2024-0012 KEV | An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface… | Patch first | 9.8 critical | 99.8% | 2024-11-18 |
| CVE-2021-31207 KEV | Microsoft Exchange Server Security Feature Bypass Vulnerability | Patch first | 6.6 medium | 99.8% | 2021-05-11 |
| CVE-2023-20198 KEV | Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating… | Patch first | 10.0 critical | 99.8% | 2023-10-16 |
| CVE-2022-47966 KEV | Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xml… | Patch first | 9.8 critical | 99.8% | 2023-01-18 |
| CVE-2023-3519 KEV | Unauthenticated remote code execution | Patch first | 9.8 critical | 99.7% | 2023-07-19 |
| CVE-2020-15505 KEV | A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0,… | Patch first | 9.8 critical | 99.7% | 2020-07-07 |
| CVE-2025-61882 KEV | Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that a… | Patch first | 9.8 critical | 99.7% | 2025-10-05 |
| CVE-2021-22054 KEV | VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 cont… | Patch first | 7.5 high | 99.7% | 2021-12-17 |
| CVE-2026-21589 KEV | This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data… | Patch first | 7.5 high | 99.7% | 2026-10-05 |
| CVE-2025-48703 KEV | CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in the t_total… | Patch first | 9.0 critical | 99.7% | 2025-09-19 |
| CVE-2022-22965 KEV | A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit r… | Patch first | 9.8 critical | 99.6% | 2022-04-01 |
| CVE-2024-5217 KEV | ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. Thi… | Patch first | 9.8 critical | 99.6% | 2024-07-10 |
| CVE-2024-9465 KEV | An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as pas… | Patch first | 9.1 critical | 99.6% | 2024-10-09 |
| CVE-2021-33045 KEV | The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentic… | Patch first | 9.8 critical | 99.6% | 2021-09-15 |
| CVE-2020-16846 KEV | An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell… | Patch first | 9.8 critical | 99.6% | 2020-11-06 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt