CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
401,061 CVEs
1,733 on KEV
17,290 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-03
206,641 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2000-0851 EXP | Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long WM_USER message, aka the "Still… | Patch early | 4.6 medium | 7.6% | 2000-11-14 |
| CVE-2000-0853 EXP | YaBB Bulletin Board 9.1.2000 allows remote attackers to read arbitrary files via a .. (dot dot) attack. | Patch early | 5.0 medium | 7.6% | 2000-11-14 |
| CVE-2000-1016 EXP | The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to read packa… | Patch early | 5.0 medium | 7.6% | 2000-12-11 |
| CVE-2001-1170 EXP | AmTote International homebet program stores the homebet.log file in the homebet/ virtual directory, which allows remote attackers to steal account and… | Patch early | 5.0 medium | 7.6% | 2001-09-29 |
| CVE-2007-0228 EXP | The DataCollector service in EIQ Networks Network Security Analyzer allows remote attackers to cause a denial of service (service crash) via a (1) &CO… | Patch early | 5.0 medium | 7.6% | 2007-01-13 |
| CVE-2002-2154 EXP | Directory traversal vulnerability in Monkey HTTP Daemon 0.1.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences. | Patch early | 5.0 medium | 7.6% | 2002-12-31 |
| CVE-2007-5694 EXP | Absolute path traversal vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to read arbitrary… | Patch early | 6.8 medium | 7.6% | 2007-10-29 |
| CVE-2013-2225 EXP | inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _predefined_fields parameter to f… | Patch early | 6.4 medium | 7.6% | 2014-05-27 |
| CVE-2001-1263 EXP | telnet95.exe in Pragma InterAccess 4.0 build 5 allows remote attackers to cause a denial of service (crash) via a large number of characters to port 2… | Patch early | 5.0 medium | 7.6% | 2001-06-06 |
| CVE-2006-2245 EXP | PHP remote file inclusion vulnerability in auction\auction_common.php in Auction mod 1.3m for phpBB allows remote attackers to execute arbitrary PHP c… | Patch early | 6.8 medium | 7.6% | 2006-05-09 |
| CVE-2006-1718 EXP | Magus Perde Clever Copy 3.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attacker… | Patch early | 5.0 medium | 7.6% | 2006-04-11 |
| CVE-2007-2186 EXP | Foxit Reader 2.0 allows remote attackers to cause a denial of service (application crash) via a crafted PDF document. | Patch early | 5.0 medium | 7.6% | 2007-04-24 |
| CVE-2023-27167 EXP | Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the values parameter at /users/absence?search_month=1. | Patch early | 6.5 medium | 7.6% | 2023-03-29 |
| CVE-2000-0582 EXP | Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid commands (such as binary zeros)… | Patch early | 5.0 medium | 7.6% | 2000-06-30 |
| CVE-2014-1771 EXP | SChannel in Microsoft Internet Explorer 6 through 11 does not ensure that a server's X.509 certificate is the same during renegotiation as it was befo… | Patch early | 6.8 medium | 7.6% | 2014-06-11 |
| CVE-2002-0892 EXP | The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web root via a direct request to co… | Patch early | 5.0 medium | 7.6% | 2002-10-04 |
| CVE-2000-0131 EXP | Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands. | Patch early | 5.0 medium | 7.6% | 2000-02-01 |
| CVE-2001-0007 EXP | Buffer overflow in NetScreen Firewall WebUI allows remote attackers to cause a denial of service via a long URL request to the web administration inte… | Patch early | 5.0 medium | 7.6% | 2001-02-12 |
| CVE-2004-1664 EXP | Call of Duty 1.4 and earlier allows remote attackers to cause a denial of service (game end) via a large (1) query or (2) reply packet, which is not p… | Patch early | 5.0 medium | 7.6% | 2004-09-05 |
| CVE-2017-6193 EXP | Buffer overflow in APNGDis 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted imag… | Patch early | 5.5 medium | 7.5% | 2018-02-20 |
| CVE-2007-1244 EXP | Cross-site request forgery (CSRF) vulnerability in the AdminPanel in WordPress 2.1.1 and earlier allows remote attackers to perform privileged actions… | Patch early | 6.8 medium | 7.5% | 2007-03-03 |
| CVE-2008-0149 EXP | TUTOS 1.3 allows remote attackers to read system information via a direct request to php/admin/phpinfo.php, which calls the phpinfo function. | Patch early | 5.0 medium | 7.5% | 2008-01-09 |
| CVE-2004-1533 EXP | Buffer overflow in pop3svr.exe for DMS POP3 1.5.3.27 and earlier allows remote attackers to cause a denial of service (service crash) via a long (1) u… | Patch early | 5.0 medium | 7.5% | 2004-12-31 |
| CVE-2002-1905 EXP | Buffer overflow in the web server of Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP GET req… | Patch early | 5.0 medium | 7.5% | 2002-12-31 |
| CVE-2006-2483 EXP | PHP remote file inclusion vulnerability in cart_content.php in Squirrelcart 2.2.2 and earlier allows remote attackers to execute arbitrary PHP code vi… | Patch early | 6.4 medium | 7.5% | 2006-05-19 |
| CVE-2011-4881 EXP | The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 does not properly check return values from functions, which allows remote attackers… | Patch early | 5.0 medium | 7.5% | 2012-04-13 |
| CVE-2006-5031 EXP | Directory traversal vulnerability in app/webroot/js/vendors.php in Cake Software Foundation CakePHP before 1.1.8.3544 allows remote attackers to read… | Patch early | 5.0 medium | 7.5% | 2006-09-27 |
| CVE-1999-0467 EXP | The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter. | Patch early | 5.0 medium | 7.5% | 1999-04-01 |
| CVE-2007-6369 EXP | Multiple directory traversal vulnerabilities in resize.php in the PictPress 0.91 and earlier plugin for WordPress allow remote attackers to read arbit… | Patch early | 5.0 medium | 7.5% | 2007-12-15 |
| CVE-2010-0462 EXP | Heap-based buffer overflow in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows remote authenticated users to have an unspecified impa… | Patch early | 6.5 medium | 7.5% | 2010-01-28 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt