CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
401,084 CVEs
1,733 on KEV
17,290 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-04
186,450 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2022-34047 EXP | An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/s… | Patch early | 7.5 high | 21.8% | 2022-07-20 |
| CVE-2014-1772 EXP | Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… | Patch early | 9.3 high | 21.7% | 2014-06-11 |
| CVE-2014-1805 EXP | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf… | Patch early | 9.3 high | 21.7% | 2014-06-11 |
| CVE-2014-2754 EXP | Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web sit… | Patch early | 9.3 high | 21.7% | 2014-06-11 |
| CVE-2006-0544 EXP | urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 (aka 7.0.5296.0) allows remote attackers to cause a denial of service (application crash) and pos… | Patch early | 7.5 high | 21.7% | 2006-02-04 |
| CVE-2004-0989 EXP | Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via… | Patch early | 10.0 high | 21.7% | 2005-03-01 |
| CVE-2022-46770 EXP | qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of service (CPU consumption and lo… | Patch early | 7.5 high | 21.7% | 2022-12-07 |
| CVE-2005-3277 EXP | The LPD service in HP-UX 10.20 11.11 (11i) and earlier allows remote attackers to execute arbitrary code via shell metacharacters ("`" or single backq… | Patch early | 10.0 high | 21.7% | 2005-10-21 |
| CVE-2009-1330 EXP | Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long filename in a playlist (.pls) fil… | Patch early | 9.3 high | 21.7% | 2009-04-17 |
| CVE-2010-3338 EXP | The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine th… | Patch early | 7.2 high | 21.7% | 2010-12-16 |
| CVE-2018-20525 EXP | Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php. | Patch early | 9.1 critical | 21.6% | 2019-03-21 |
| CVE-2013-0249 EXP | Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1, when neg… | Patch early | 7.5 high | 21.6% | 2013-03-08 |
| CVE-2011-0222 EXP | WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and ap… | Patch early | 9.3 high | 21.6% | 2011-07-21 |
| CVE-2021-40379 EXP | An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. rstp://.../medias2 does not require authorization. | Patch early | 7.5 high | 21.6% | 2021-09-01 |
| CVE-2010-3639 EXP | Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 o… | Patch early | 9.3 high | 21.6% | 2010-11-07 |
| CVE-1999-0886 EXP | The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager. | Patch early | 9.0 high | 21.6% | 1999-09-17 |
| CVE-2009-4502 EXP | The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote attackers to bypass the EnableRem… | Patch early | 9.3 high | 21.6% | 2009-12-31 |
| CVE-2014-2776 EXP | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web si… | Patch early | 9.3 high | 21.6% | 2014-06-11 |
| CVE-2013-0658 EXP | Heap-based buffer overflow in RFManagerService.exe in Schneider Electric Accutech Manager 2.00.1 and earlier allows remote attackers to execute arbitr… | Patch early | 10.0 high | 21.5% | 2013-02-15 |
| CVE-2006-4219 EXP | The Terminal Services COM object (tsuserex.dll) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by in… | Patch early | 7.5 high | 21.5% | 2006-08-18 |
| CVE-2005-3524 EXP | Buffer overflow in the SSL-ready version of linux-ftpd (linux-ftpd-ssl) 0.17 allows remote attackers to execute arbitrary code by creating a long dire… | Patch early | 10.0 high | 21.5% | 2005-11-07 |
| CVE-2008-4668 EXP | Directory traversal vulnerability in the Image Browser (com_imagebrowser) 0.1.5 component for Joomla! allows remote attackers to include and execute a… | Patch early | 9.0 high | 21.5% | 2008-10-22 |
| CVE-2007-0236 EXP | Double free vulnerability in the _ATPsndrsp function in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a denial… | Patch early | 10.0 high | 21.4% | 2007-01-16 |
| CVE-2009-1868 EXP | Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a… | Patch early | 9.3 high | 21.4% | 2009-07-31 |
| CVE-2009-1667 EXP | Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a long entry in a .m3u file, a dif… | Patch early | 9.3 high | 21.4% | 2009-05-18 |
| CVE-2006-4182 EXP | Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service (scanning service… | Patch early | 7.5 high | 21.4% | 2006-10-16 |
| CVE-2017-3195 EXP | Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overflow vulnera… | Patch early | 9.8 critical | 21.4% | 2017-12-16 |
| CVE-2015-8636 EXP | Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0… | Patch early | 8.8 high | 21.4% | 2015-12-28 |
| CVE-2017-6548 EXP | Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC… | Patch early | 9.8 critical | 21.3% | 2017-03-09 |
| CVE-2011-0406 EXP | Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a long request to TCP p… | Patch early | 10.0 high | 21.3% | 2011-01-11 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt