CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
424,962 CVEs
1,779 on KEV
17,545 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-13
1,779 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2022-23227 KEV | NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users because o… | Patch first | 9.8 critical | 48.5% | 2022-01-14 |
| CVE-2020-16009 KEV | Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a craf… | Patch first | 8.8 high | 48.3% | 2020-11-03 |
| CVE-2016-1646 KEV | The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider eleme… | Patch first | 8.8 high | 48.1% | 2016-03-29 |
| CVE-2006-2492 KEV | Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-ass… | Patch first | 8.8 high | 48.1% | 2006-05-20 |
| CVE-2021-26829 KEV | OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via system_settings.shtm. | Patch first | 5.4 medium | 48.1% | 2021-06-11 |
| CVE-2026-28318 KEV | SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: defla… | Patch first | 7.5 high | 48% | 2026-06-04 |
| CVE-2023-48365 KEV | Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of… | Patch first | 9.6 critical | 47.7% | 2023-11-15 |
| CVE-2021-40407 KEV | An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [1] or [2], base… | Patch first | 7.2 high | 47.6% | 2022-01-28 |
| CVE-2025-0411 KEV | 7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected… | Patch first | 7.0 high | 47.6% | 2025-01-25 |
| CVE-2021-22893 KEV | Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Puls… | Patch first | 10.0 critical | 47.5% | 2021-04-23 |
| CVE-2026-48356 KEV | Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the co… | Patch first | 9.3 critical | 47.5% | 2026-07-14 |
| CVE-2014-4123 KEV | Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privil… | Patch first | 8.8 high | 47.1% | 2014-10-15 |
| CVE-2021-27104 KEV | Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints. The fixed version is FTA… | Patch first | 9.8 critical | 46.2% | 2021-02-16 |
| CVE-2024-43573 KEV | Windows MSHTML Platform Spoofing Vulnerability | Patch first | 6.5 medium | 46.1% | 2024-10-08 |
| CVE-2026-12569 KEV | A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited th… | Patch first | 9.8 critical | 46% | 2026-06-18 |
| CVE-2017-6862 KEV | NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and re… | Patch first | 9.8 critical | 45.7% | 2017-05-26 |
| CVE-2017-16651 KEV | Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host's filesystem, in… | Patch first | 7.8 high | 45.7% | 2017-11-09 |
| CVE-2020-12812 KEV | An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log in succes… | Patch first | 9.8 critical | 45.4% | 2020-07-24 |
| CVE-2024-29988 KEV | SmartScreen Prompt Security Feature Bypass Vulnerability | Patch first | 8.8 high | 45.2% | 2024-04-09 |
| CVE-2017-6737 KEV | A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely ex… | Patch first | 8.8 high | 45% | 2017-07-17 |
| CVE-2014-9163 KEV | Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on… | Patch first | 7.8 high | 44.9% | 2014-12-10 |
| CVE-2015-2425 KEV | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web si… | Patch first | 8.8 high | 44.7% | 2015-07-14 |
| CVE-2013-3900 KEV | Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and… | Patch first | 5.5 medium | 44.6% | 2013-12-11 |
| CVE-2023-36874 KEV | Windows Error Reporting Service Elevation of Privilege Vulnerability | Patch first | 7.8 high | 44.4% | 2023-07-11 |
| CVE-2026-20131 KEV | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote… | Patch first | 10.0 critical | 44.4% | 2026-03-04 |
| CVE-2024-9379 KEV | SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrar… | Patch first | 6.5 medium | 44.3% | 2024-10-08 |
| CVE-2019-1579 KEV | Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProt… | Patch first | 8.1 high | 44.2% | 2019-07-19 |
| CVE-2022-39197 KEV | An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote attacker to execute HTML on the C… | Patch first | 6.1 medium | 44.1% | 2022-09-22 |
| CVE-2007-0671 KEV | Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attacke… | Patch first | 8.8 high | 44.1% | 2007-02-03 |
| CVE-2026-32201 KEV | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | Patch first | 6.5 medium | 44% | 2026-04-14 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt