CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
401,061 CVEs
1,733 on KEV
17,290 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-03
186,445 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2001-0875 EXP | Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in… | Patch early | 7.5 high | 28.1% | 2001-11-26 |
| CVE-2020-35606 EXP | Arbitrary command execution can occur in Webmin through 1.962. Any user authorized for the Package Updates module can execute arbitrary commands with… | Patch early | 8.8 high | 28% | 2020-12-21 |
| CVE-2018-12327 EXP | Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges vi… | Patch early | 9.8 critical | 28% | 2018-06-20 |
| CVE-2008-3263 EXP | The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B… | Patch early | 7.8 high | 28% | 2008-07-22 |
| CVE-2013-0726 EXP | Stack-based buffer overflow in the ERM_convert_to_correct_webpath function in ermapper_u.dll in ERDAS ER Viewer before 13.00.0001 allows remote attack… | Patch early | 9.3 high | 28% | 2013-05-05 |
| CVE-2006-1236 EXP | Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound… | Patch early | 7.5 high | 28% | 2006-03-15 |
| CVE-2019-8982 EXP | com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leading to discl… | Patch early | 9.6 critical | 28% | 2019-02-21 |
| CVE-2001-0239 EXP | Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request w… | Patch early | 7.5 high | 28% | 2001-07-02 |
| CVE-2010-1225 EXP | The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server… | Patch early | 9.3 high | 28% | 2010-04-01 |
| CVE-2018-7171 EXP | Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of arbitrary directories via a ..… | Patch early | 7.5 high | 27.9% | 2018-03-30 |
| CVE-2001-0341 EXP | Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary comma… | Patch early | 7.5 high | 27.9% | 2001-07-21 |
| CVE-1999-0002 EXP | Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems. | Patch early | 10.0 high | 27.9% | 1998-10-12 |
| CVE-2010-4741 EXP | Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MDM Gateways to execute arbitrar… | Patch early | 9.3 high | 27.8% | 2011-02-18 |
| CVE-2017-14335 EXP | On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently sanitized, sending a PUT request to /ISAPI/Security/users/1… | Patch early | 7.5 high | 27.8% | 2017-09-12 |
| CVE-2010-2330 EXP | Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arb… | Patch early | 9.3 high | 27.8% | 2010-06-18 |
| CVE-2009-0184 EXP | Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allow remote attackers… | Patch early | 9.3 high | 27.8% | 2009-02-03 |
| CVE-2010-4566 EXP | The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NTLM authent… | Patch early | 9.3 high | 27.8% | 2011-01-14 |
| CVE-2007-1277 EXP | WordPress 2.1.1, as downloaded from some official distribution sites during February and March 2007, contains an externally introduced backdoor that a… | Patch early | 7.5 high | 27.8% | 2007-03-05 |
| CVE-2008-2752 EXP | Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted remote attackers to cause a de… | Patch early | 7.1 high | 27.8% | 2008-06-18 |
| CVE-2015-3036 EXP | Stack-based buffer overflow in the run_init_sbus function in the KCodes NetUSB module for the Linux kernel, as used in certain NETGEAR products, TP-LI… | Patch early | 10.0 high | 27.7% | 2015-05-21 |
| CVE-2015-5118 EXP | Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481… | Patch early | 10.0 high | 27.7% | 2015-07-09 |
| CVE-2015-2467 EXP | Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerabil… | Patch early | 9.3 high | 27.7% | 2015-08-15 |
| CVE-2015-2520 EXP | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execu… | Patch early | 9.3 high | 27.7% | 2015-09-09 |
| CVE-2015-2521 EXP | Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a craft… | Patch early | 9.3 high | 27.7% | 2015-09-09 |
| CVE-2018-9032 EXP | An authentication bypass vulnerability on D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router (Hardware Version : A1, B1; Firmware Version… | Patch early | 9.8 critical | 27.7% | 2018-03-27 |
| CVE-2019-25024 EXP | OpenRepeater (ORP) before 2.2 allows unauthenticated command injection via shell metacharacters in the functions/ajax_system.php post_service paramete… | Patch early | 9.8 critical | 27.6% | 2021-02-19 |
| CVE-2005-3116 EXP | Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5… | Patch early | 10.0 high | 27.6% | 2005-11-18 |
| CVE-2008-4830 EXP | Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 Patch 5 (KWEDIT.DLL 7100.1.1.43… | Patch early | 9.3 high | 27.6% | 2009-04-16 |
| CVE-2013-3686 EXP | cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password via a list a… | Patch early | 10.0 high | 27.6% | 2013-10-11 |
| CVE-2007-6015 EXP | Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows r… | Patch early | 9.3 high | 27.5% | 2007-12-13 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt