CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
401,098 CVEs
1,733 on KEV
17,290 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-04
319,704 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2011-1568 EXP | Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technolo… | Patch early | 10.0 high | 19.4% | 2011-04-05 |
| CVE-2010-1119 EXP | Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Safari before 4.1 on Mac OS X 10.4, and S… | Patch early | 10.0 high | 19.4% | 2010-03-25 |
| CVE-2006-2297 EXP | Heap-based buffer overflow in Microsoft Infotech Storage System Library (itss.dll) allows user-assisted attackers to execute arbitrary code via a craf… | Patch early | 4.0 medium | 19.4% | 2006-05-10 |
| CVE-2002-0379 EXP | Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 2001.315) with legacy RFC 1730 sup… | Patch early | 7.5 high | 19.4% | 2002-06-25 |
| CVE-2007-2057 EXP | Stack-based buffer overflow in aircrack-ng airodump-ng 0.7 allows remote attackers to execute arbitrary code via crafted 802.11 authentication packets… | Patch early | 10.0 high | 19.4% | 2007-04-18 |
| CVE-2017-7285 EXP | A vulnerability in the network stack of MikroTik Version 6.38.5 released 2017-03-09 could allow an unauthenticated remote attacker to exhaust all avai… | Patch early | 7.5 high | 19.3% | 2017-03-29 |
| CVE-2002-1183 EXP | Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute cod… | Patch early | 7.5 high | 19.3% | 2002-12-11 |
| CVE-2001-0247 EXP | Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as… | Patch early | 10.0 high | 19.3% | 2001-06-18 |
| CVE-2016-3116 EXP | CRLF injection vulnerability in Dropbear SSH before 2016.72 allows remote authenticated users to bypass intended shell-command restrictions via crafte… | Patch early | 6.4 medium | 19.3% | 2016-03-22 |
| CVE-2019-18634 EXP | In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfe… | Patch early | 7.8 high | 19.3% | 2020-01-29 |
| CVE-2018-15139 EXP | Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to exec… | Patch early | 8.8 high | 19.3% | 2018-08-13 |
| CVE-2014-4940 EXP | Multiple directory traversal vulnerabilities in Tera Charts (tera-charts) plugin 0.1 for WordPress allow remote attackers to read arbitrary files via… | Patch early | 5.0 medium | 19.3% | 2014-07-11 |
| CVE-2019-9017 EXP | DWRCC in SolarWinds DameWare Mini Remote Control 10.0 x64 has a Buffer Overflow associated with the size field for the machine name. | Patch early | 7.5 high | 19.2% | 2019-05-02 |
| CVE-2000-0377 EXP | The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which causes the w… | Patch early | 5.0 medium | 19.2% | 2000-06-08 |
| CVE-2010-1657 EXP | Directory traversal vulnerability in the SmartSite (com_smartsite) component 1.0.0 for Joomla! allows remote attackers to read arbitrary files via a .… | Patch early | 5.0 medium | 19.2% | 2010-05-03 |
| CVE-2019-12616 EXP | An issue was discovered in phpMyAdmin before 4.9.0. A vulnerability was found that allows an attacker to trigger a CSRF attack against a phpMyAdmin us… | Patch early | 6.5 medium | 19.2% | 2019-06-05 |
| CVE-2014-8272 EXP | The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select sessi… | Patch early | 5.0 medium | 19.2% | 2014-12-19 |
| CVE-2011-3182 EXP | PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attack… | Patch early | 5.0 medium | 19.2% | 2011-08-25 |
| CVE-2018-1000888 EXP | PEAR Archive_Tar version 1.4.3 and earlier contains a CWE-502, CWE-915 vulnerability in the Archive_Tar class. There are several file operations with… | Patch early | 8.8 high | 19.1% | 2018-12-28 |
| CVE-1999-0386 EXP | Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using… | Patch early | 5.0 medium | 19.1% | 1999-03-01 |
| CVE-2019-16516 EXP | An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. There is a user enumeration vulnerability, allowing… | Patch early | 5.3 medium | 19.1% | 2020-01-23 |
| CVE-2006-0187 EXP | By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserControl1_Load function), which al… | Patch early | 5.1 medium | 19.1% | 2006-01-12 |
| CVE-2020-6507 EXP | Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… | Patch early | 8.8 high | 19.1% | 2020-07-22 |
| CVE-2006-4343 EXP | The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers… | Patch early | 4.3 medium | 19.1% | 2006-09-28 |
| CVE-2011-3833 EXP | Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to execute… | Patch early | 6.0 medium | 19% | 2012-01-29 |
| CVE-2015-2153 EXP | The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (o… | Patch early | 5.0 medium | 19% | 2015-03-24 |
| CVE-1999-0450 EXP | In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe). | Patch early | 7.5 high | 19% | 1999-01-26 |
| CVE-2017-14627 EXP | Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) author (inside the INFORMATION t… | Patch early | 7.8 high | 19% | 2017-09-23 |
| CVE-2013-5967 EXP | Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.3 and earlier allow remote attackers to exe… | Patch early | 7.5 high | 19% | 2013-10-09 |
| CVE-2003-0172 EXP | Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote attackers to cause a crash and p… | Patch early | 7.5 high | 19% | 2003-04-02 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt