CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,502 CVEs
1,726 on KEV
17,265 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-27
169,001 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2020-10770 EXP | A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using the OIDC parameter request_ur… | Patch early | 5.3 medium | 69.7% | 2020-12-15 |
| CVE-2013-4124 EXP | Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allow… | Patch early | 5.0 medium | 69% | 2013-08-06 |
| CVE-2023-40028 EXP | Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows authenticated users to upload… | Patch early | 4.9 medium | 68.7% | 2023-08-15 |
| CVE-2007-4313 EXP | PHP remote file inclusion vulnerability in public_includes/pub_blocks/activecontent.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execut… | Patch early | 6.8 medium | 68.7% | 2007-08-13 |
| CVE-2007-3057 EXP | PHP remote file inclusion vulnerability in include/wysiwyg/spaw_control.class.php in the icontent 4.5 module for XOOPS allows remote attackers to exec… | Patch early | 6.8 medium | 68.7% | 2007-06-06 |
| CVE-2010-3332 EXP | Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Services (IIS),… | Patch early | 6.4 medium | 68.2% | 2010-09-22 |
| CVE-2000-0630 EXP | IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading vi… | Patch early | 5.0 medium | 68.2% | 2000-07-17 |
| CVE-2007-2707 EXP | PHP remote file inclusion vulnerability in linksnet_linkslog_rss.php in Linksnet Newsfeed 1.0 allows remote attackers to execute arbitrary PHP code vi… | Patch early | 6.8 medium | 68.1% | 2007-05-16 |
| CVE-2005-2265 EXP | Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access violation and cras… | Patch early | 5.0 medium | 68.1% | 2005-07-13 |
| CVE-2007-3358 EXP | PHP remote file inclusion vulnerability in html/load_lang.php in SerWeb 0.9.6 and earlier allows remote attackers to execute arbitrary PHP code via a… | Patch early | 6.8 medium | 68% | 2007-06-22 |
| CVE-2008-5180 EXP | Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service (memory consumption) via… | Patch early | 5.3 medium | 68% | 2008-11-20 |
| CVE-2011-5035 EXP | Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 and 8.2, and possibly other pro… | Patch early | 5.0 medium | 67.9% | 2011-12-30 |
| CVE-2001-0151 EXP | IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests. | Patch early | 5.0 medium | 67.9% | 2001-06-02 |
| CVE-2007-3230 EXP | PHP remote file inclusion vulnerability in phphtml.php in Idan Sofer PHP::HTML 0.6.4 allows remote attackers to execute arbitrary PHP code via a URL i… | Patch early | 6.8 medium | 67.9% | 2007-06-14 |
| CVE-2007-3221 EXP | PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the XT-Conteudo module for XOOPS allows remote attackers to execute ar… | Patch early | 6.8 medium | 67.8% | 2007-06-14 |
| CVE-2005-0803 EXP | The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service (application crash) via a craft… | Patch early | 5.0 medium | 67.7% | 2005-05-02 |
| CVE-2007-3237 EXP | PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the TinyContent 1.5 module for XOOPS allows remote attackers to execut… | Patch early | 6.8 medium | 67.7% | 2007-06-15 |
| CVE-2014-8799 EXP | Directory traversal vulnerability in the dp_img_resize function in php/dp-functions.php in the DukaPress plugin before 2.5.4 for WordPress allows remo… | Patch early | 5.0 medium | 67.6% | 2014-11-28 |
| CVE-2017-14494 EXP | dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6… | Patch early | 5.9 medium | 67.5% | 2017-10-03 |
| CVE-2007-3228 EXP | PHP remote file inclusion vulnerability in saf/lib/PEAR/PhpDocumentor/Documentation/tests/bug-559668.php in Sitellite CMS 4.2.12 and earlier might all… | Patch early | 6.8 medium | 67.5% | 2007-06-14 |
| CVE-2004-1626 EXP | Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a long STOR command. | Patch early | 5.0 medium | 67.4% | 2004-10-22 |
| CVE-2015-0802 EXP | Mozilla Firefox before 37.0 relies on docshell type information instead of page principal information for Window.webidl access control, which might al… | Patch early | 5.0 medium | 67.3% | 2015-04-01 |
| CVE-2004-0176 EXP | Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the… | Patch early | 5.0 medium | 67.1% | 2004-05-04 |
| CVE-2015-0816 EXP | Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 do not properly restrict resource: URLs, which makes it easier… | Patch early | 5.0 medium | 66.9% | 2015-04-01 |
| CVE-2016-7237 EXP | Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Win… | Patch early | 6.5 medium | 66.9% | 2016-11-10 |
| CVE-2012-2962 EXP | SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2 allows remote authenticated us… | Patch early | 6.5 medium | 66.8% | 2012-07-30 |
| CVE-2005-0478 EXP | Multiple buffer overflows in TrackerCam 5.12 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (… | Patch early | 5.0 medium | 66.5% | 2005-03-30 |
| CVE-2014-6593 EXP | Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote a… | Patch early | 4.0 medium | 66.4% | 2015-01-21 |
| CVE-2007-3522 EXP | Multiple PHP remote file inclusion vulnerabilities in sPHPell 1.01 allow remote attackers to execute arbitrary PHP code via a URL in the SpellIncPath… | Patch early | 6.8 medium | 66.2% | 2007-07-03 |
| CVE-2015-2295 EXP | Cross-site request forgery (CSRF) vulnerability in system_firmware_restorefullbackup.php in the WebGUI in pfSense before 2.2.1 allows remote attackers… | Patch early | 6.8 medium | 65.7% | 2015-04-10 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt