CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
424,570 CVEs
1,779 on KEV
17,541 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-12
424,570 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2010-0738 KEV EXP | The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 bef… | Patch first | 5.3 medium | 73.8% | 2010-04-28 |
| CVE-2013-3918 KEV EXP | The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2,… | Patch first | 8.8 high | 73.7% | 2013-11-12 |
| CVE-2018-8120 KEV EXP | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation… | Patch first | 7.0 high | 73.3% | 2018-05-09 |
| CVE-2018-0824 KEV EXP | A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM fo… | Patch first | 8.8 high | 73% | 2018-05-09 |
| CVE-2017-6316 KEV EXP | Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie. On… | Patch first | 9.8 critical | 73% | 2017-07-20 |
| CVE-2019-9978 KEV EXP | The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter, as explo… | Patch first | 6.1 medium | 72.9% | 2019-03-24 |
| CVE-2017-6334 KEV EXP | dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell… | Patch first | 8.8 high | 72.6% | 2017-03-06 |
| CVE-2018-7841 KEV EXP | A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code execution when an improper se… | Patch first | 9.8 critical | 72.5% | 2019-05-22 |
| CVE-2019-2215 KEV EXP | A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this… | Patch first | 7.8 high | 72.1% | 2019-10-11 |
| CVE-2017-8540 KEV EXP | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows… | Patch first | 7.8 high | 71.9% | 2017-05-26 |
| CVE-2010-4344 KEV EXP | Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMT… | Patch first | 9.8 critical | 71.7% | 2010-12-14 |
| CVE-2016-2386 KEV EXP | SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspeci… | Patch first | 9.8 critical | 71.5% | 2016-02-16 |
| CVE-2026-32202 KEV EXP | Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network. | Patch first | 4.3 medium | 71.3% | 2026-04-14 |
| CVE-2013-3163 KEV EXP | Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf… | Patch first | 8.8 high | 70.7% | 2013-07-10 |
| CVE-2012-1535 KEV EXP | Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers t… | Patch first | 7.8 high | 70.4% | 2012-08-15 |
| CVE-2017-6736 KEV EXP | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authent… | Patch first | 8.8 high | 70.4% | 2017-07-17 |
| CVE-2018-8453 KEV EXP | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation… | Patch first | 7.8 high | 70% | 2018-10-10 |
| CVE-2016-0185 KEV EXP | Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media Cent… | Patch first | 7.8 high | 69.8% | 2016-05-11 |
| CVE-2013-1690 KEV EXP | Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle… | Patch first | 8.8 high | 69% | 2013-06-26 |
| CVE-2017-6077 KEV EXP | ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metac… | Patch first | 9.8 critical | 68.7% | 2017-02-22 |
| CVE-2015-4495 KEV EXP | The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same… | Patch first | 8.8 high | 68.6% | 2015-08-08 |
| CVE-2019-18426 KEV EXP | A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site script… | Patch first | 8.2 high | 68.1% | 2020-01-21 |
| CVE-2013-3896 KEV EXP | Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to… | Patch first | 5.5 medium | 67.1% | 2013-10-09 |
| CVE-2016-4657 KEV EXP | WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… | Patch first | 8.8 high | 66.8% | 2016-08-25 |
| CVE-2013-2729 KEV EXP | Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code… | Patch first | 9.8 critical | 66.6% | 2013-05-16 |
| CVE-2018-7445 KEV EXP | A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the… | Patch first | 9.8 critical | 65.8% | 2018-03-19 |
| CVE-2013-0629 KEV EXP | Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified vecto… | Patch first | 7.5 high | 65.8% | 2013-01-09 |
| CVE-2015-7645 KEV EXP | Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attack… | Patch first | 7.8 high | 65.3% | 2015-10-15 |
| CVE-2019-0211 KEV EXP | In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (… | Patch first | 7.8 high | 65% | 2019-04-08 |
| CVE-2023-4911 KEV EXP | A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue coul… | Patch first | 7.8 high | 63.8% | 2023-10-03 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt