CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
401,014 CVEs
1,733 on KEV
17,286 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-03
401,014 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2016-1606 EXP | Multiple stack-based buffer overflows in COM objects in Micro Focus Rumba 9.4.x before 9.4 HF 13960 allow remote attackers to execute arbitrary code v… | Patch early | 9.8 critical | 45.6% | 2016-07-03 |
| CVE-2007-2238 EXP | Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft Intelligent Application Gatewa… | Patch early | 9.3 high | 45.5% | 2009-04-16 |
| CVE-2017-11885 EXP | Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Win… | Patch early | 6.6 medium | 45.5% | 2017-12-12 |
| CVE-2015-5539 EXP | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199… | Patch early | 10.0 high | 45.5% | 2015-08-14 |
| CVE-2015-5540 EXP | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199… | Patch early | 10.0 high | 45.5% | 2015-08-14 |
| CVE-2015-5574 EXP | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux,… | Patch early | 10.0 high | 45.5% | 2015-09-22 |
| CVE-2015-7245 EXP | Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remote attackers to read sensitive… | Patch early | 7.5 high | 45.5% | 2017-04-24 |
| CVE-2009-3031 EXP | Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSConsoleUtili… | Patch early | 9.3 high | 45.4% | 2009-11-03 |
| CVE-2022-22909 EXP | HotelDruid v3.0.3 was discovered to contain a remote code execution (RCE) vulnerability which is exploited via an attacker inserting a crafted payload… | Patch early | 8.8 high | 45.4% | 2022-03-03 |
| CVE-2021-29003 EXP | Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sys_config_valid.xgi, as… | Patch early | 9.8 critical | 45.4% | 2021-04-13 |
| CVE-2008-5764 EXP | PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when register_globals is enabled, allows remote attackers to execute arbi… | Patch early | 9.3 high | 45.4% | 2008-12-30 |
| CVE-2007-2484 EXP | PHP remote file inclusion vulnerability in js/wptable-button.php in the wp-Table 1.43 and earlier plugin for WordPress, when register_globals is enabl… | Patch early | 6.8 medium | 45.4% | 2007-05-03 |
| CVE-2014-9312 EXP | Unrestricted File Upload vulnerability in Photo Gallery 1.2.5. | Patch early | 8.8 high | 45.4% | 2017-08-28 |
| CVE-2018-15839 EXP | D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header. | Patch early | 9.8 critical | 45.3% | 2018-08-28 |
| CVE-2008-4557 EXP | plugins/wacko/highlight/html.php in Strawberry in CuteNews.ru 1.1.1 (aka Strawberry) allows remote attackers to execute arbitrary PHP code via the tex… | Patch early | 10.0 high | 45.3% | 2008-10-14 |
| CVE-2011-5046 EXP | The Graphics Device Interface (GDI) in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vis… | Patch early | 9.3 high | 45.3% | 2011-12-30 |
| CVE-2020-36847 EXP | The Simple-File-List Plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.2.2 via the rename function which… | Patch early | 9.8 critical | 45.3% | 2025-07-12 |
| CVE-2018-15535 EXP | /filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 uses external input to construct a pathname that should be within a restri… | Patch early | 7.5 high | 45.2% | 2018-08-24 |
| CVE-2020-35313 EXP | A server-side request forgery (SSRF) vulnerability in the addCustomThemePluginRepository function in index.php in WonderCMS 3.1.3 allows remote attack… | Patch early | 9.8 critical | 45.2% | 2021-04-20 |
| CVE-2011-2386 EXP | VisiWaveReport.exe in AZO Technologies, Inc. VisiWave Site Survey before 2.1.9 allows user-assisted remote attackers to execute arbitrary code via a (… | Patch early | 9.3 high | 45.2% | 2011-06-08 |
| CVE-2013-0209 EXP | lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x through 4.38 does not require authentication for requests to database-migration func… | Patch early | 7.5 high | 45.2% | 2013-01-23 |
| CVE-2004-0595 EXP | The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input t… | Patch early | 6.8 medium | 45.2% | 2004-07-27 |
| CVE-2024-48760 EXP | An issue in GestioIP v3.5.7 allows a remote attacker to execute arbitrary code via the file upload function. The attacker can upload a malicious perlc… | Patch early | 9.8 critical | 45.1% | 2025-01-14 |
| CVE-2024-42640 EXP | angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability allow… | Patch early | 9.8 critical | 45.1% | 2024-10-11 |
| CVE-2019-13344 EXP | An authentication bypass vulnerability in the CRUDLab WP Like Button plugin through 1.6.0 for WordPress allows unauthenticated attackers to change set… | Patch early | 5.3 medium | 45.1% | 2019-07-05 |
| CVE-2007-5009 EXP | PHP remote file inclusion vulnerability in language/lang_german/lang_main_album.php in phpBB Plus 1.53, and 1.53a before 20070922, allows remote attac… | Patch early | 6.8 medium | 45% | 2007-09-20 |
| CVE-2008-5789 EXP | Multiple PHP remote file inclusion vulnerabilities in the Recly Interactive Feederator (com_feederator) component 1.0.5 for Joomla! allow remote attac… | Patch early | 7.5 high | 45% | 2008-12-31 |
| CVE-2004-1043 EXP | Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help ActiveX Co… | Patch early | 5.0 medium | 45% | 2004-12-31 |
| CVE-2007-0927 EXP | Heap-based buffer overflow in uTorrent 1.6 allows remote attackers to execute arbitrary code via a torrent file with a crafted announce header. | Patch early | 7.5 high | 45% | 2007-02-14 |
| CVE-2001-0136 EXP | Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the… | Patch early | 5.0 medium | 44.9% | 2001-03-12 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt