CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
401,074 CVEs
1,733 on KEV
17,290 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-04
319,690 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2005-3524 EXP | Buffer overflow in the SSL-ready version of linux-ftpd (linux-ftpd-ssl) 0.17 allows remote attackers to execute arbitrary code by creating a long dire… | Patch early | 10.0 high | 21.5% | 2005-11-07 |
| CVE-2008-4668 EXP | Directory traversal vulnerability in the Image Browser (com_imagebrowser) 0.1.5 component for Joomla! allows remote attackers to include and execute a… | Patch early | 9.0 high | 21.5% | 2008-10-22 |
| CVE-2012-3794 EXP | Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a deni… | Patch early | 5.0 medium | 21.5% | 2012-06-25 |
| CVE-2009-2146 EXP | Unrestricted file upload vulnerability in the Compose Email feature in the Emails module in Sugar Community Edition (aka SugarCRM) before 5.2f allows… | Patch early | 6.0 medium | 21.5% | 2009-06-22 |
| CVE-2011-0959 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to inject arbitrary w… | Patch early | 4.3 medium | 21.5% | 2011-05-20 |
| CVE-2007-0236 EXP | Double free vulnerability in the _ATPsndrsp function in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a denial… | Patch early | 10.0 high | 21.4% | 2007-01-16 |
| CVE-2008-5745 EXP | Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, including 11.0.5721.5260, allows rem… | Patch early | 4.3 medium | 21.4% | 2008-12-29 |
| CVE-2009-1868 EXP | Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a… | Patch early | 9.3 high | 21.4% | 2009-07-31 |
| CVE-2008-1046 EXP | PHP remote file inclusion vulnerability in footer.php in Quinsonnas Mail Checker 1.55 allows remote attackers to execute arbitrary PHP code via a URL… | Patch early | 6.8 medium | 21.4% | 2008-02-27 |
| CVE-2008-1051 EXP | PHP remote file inclusion vulnerability in include/body_comm.inc.php in phpProfiles 4.5.2 BETA allows remote attackers to execute arbitrary PHP code v… | Patch early | 6.8 medium | 21.4% | 2008-02-27 |
| CVE-2008-5750 EXP | Argument injection vulnerability in Microsoft Internet Explorer 8 beta 2 on Windows XP SP3 allows remote attackers to execute arbitrary commands via t… | Patch early | 6.8 medium | 21.4% | 2008-12-29 |
| CVE-2009-1667 EXP | Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a long entry in a .m3u file, a dif… | Patch early | 9.3 high | 21.4% | 2009-05-18 |
| CVE-2006-4182 EXP | Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service (scanning service… | Patch early | 7.5 high | 21.4% | 2006-10-16 |
| CVE-2015-8636 EXP | Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0… | Patch early | 8.8 high | 21.4% | 2015-12-28 |
| CVE-1999-0288 EXP | The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service (process termination) via invalid UDP fram… | Patch early | 5.0 medium | 21.3% | 1998-08-01 |
| CVE-2000-0211 EXP | The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper se… | Patch early | 5.0 medium | 21.3% | 2000-02-23 |
| CVE-2011-0406 EXP | Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a long request to TCP p… | Patch early | 10.0 high | 21.3% | 2011-01-11 |
| CVE-2013-0657 EXP | Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System (IGSS) 10 and earlier allows remote attackers to execute arbitrar… | Patch early | 10.0 high | 21.3% | 2013-01-21 |
| CVE-2003-0540 EXP | The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelope address… | Patch early | 5.0 medium | 21.3% | 2003-08-27 |
| CVE-2010-1173 EXP | The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attacker… | Patch early | 7.1 high | 21.2% | 2010-05-07 |
| CVE-2014-5383 EXP | SQL injection vulnerability in AlienVault OSSIM before 4.7.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vecto… | Patch early | 6.5 medium | 21.2% | 2014-08-21 |
| CVE-2019-9955 EXP | On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 11… | Patch early | 6.1 medium | 21.2% | 2019-04-22 |
| CVE-2004-0083 EXP | Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a… | Patch early | 10.0 high | 21.2% | 2004-03-03 |
| CVE-2025-47166 EXP | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Patch early | 8.8 high | 21.2% | 2025-06-10 |
| CVE-2017-2931 EXP | Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to the parsing of SWF metadata. Success… | Patch early | 8.8 high | 21.1% | 2017-01-11 |
| CVE-2016-4338 EXP | The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x before 2.2.13, and 3.0.x before 3… | Patch early | 8.1 high | 21.1% | 2017-01-23 |
| CVE-2006-5647 EXP | Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11 allows remote attackers to c… | Patch early | 6.4 medium | 21.1% | 2006-11-01 |
| CVE-2022-47874 EXP | Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view details of database connections via class 'c… | Patch early | 6.5 medium | 21.1% | 2023-05-02 |
| CVE-2005-2842 EXP | Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary code via the username. | Patch early | 7.5 high | 21.1% | 2005-09-08 |
| CVE-2021-44595 EXP | Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send manually crafted packets to the… | Patch early | 8.8 high | 21.1% | 2022-04-29 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt