CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
401,121 CVEs
1,733 on KEV
17,292 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-04
319,720 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2007-6335 EXP | Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers… | Patch early | 7.5 high | 18.4% | 2007-12-20 |
| CVE-2016-6855 EXP | Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attacke… | Patch early | 7.5 high | 18.4% | 2016-09-07 |
| CVE-2007-1071 EXP | Integer overflow in the gifGetBandProc function in ImageIO in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service (segmentation… | Patch early | 7.8 high | 18.4% | 2007-02-22 |
| CVE-2011-1018 EXP | logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log file name, as demonstrated via a… | Patch early | 10.0 high | 18.3% | 2011-02-25 |
| CVE-2025-60689 EXP | An unauthenticated command injection vulnerability exists in the Start_EPI function of the httpd binary on Linksys E1200 v2 routers (Firmware E1200_v2… | Patch early | 5.4 medium | 18.3% | 2025-11-13 |
| CVE-2019-7670 EXP | Prima Systems FlexAir, Versions 2.3.38 and prior. The application incorrectly neutralizes special elements that could modify the intended OS command w… | Patch early | 7.2 high | 18.3% | 2019-07-01 |
| CVE-2006-7031 EXP | Microsoft Internet Explorer 6.0.2900 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a table element with a CSS attri… | Patch early | 6.5 medium | 18.3% | 2007-02-23 |
| CVE-2003-0500 EXP | SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers to execute… | Patch early | 10.0 high | 18.3% | 2003-08-07 |
| CVE-2024-4956 EXP | Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1. | Patch early | 7.5 high | 18.2% | 2024-05-16 |
| CVE-2006-3660 EXP | Unspecified vulnerability in Microsoft PowerPoint 2003 has unknown impact and user-assisted attack vectors related to powerpnt.exe. NOTE: due to the l… | Patch early | 7.6 high | 18.2% | 2006-07-18 |
| CVE-2009-1379 EXP | Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to caus… | Patch early | 5.0 medium | 18.2% | 2009-05-19 |
| CVE-2003-1118 EXP | Buffer overflow in the SETI@home client 3.03 and other versions allows remote attackers to cause a denial of service (client crash) and execute arbitr… | Patch early | 7.5 high | 18.2% | 2003-12-31 |
| CVE-2018-15142 EXP | Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal t… | Patch early | 8.8 high | 18.2% | 2018-08-13 |
| CVE-2005-3774 EXP | Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP packets that cause the PIX to cre… | Patch early | 5.0 medium | 18.2% | 2005-11-23 |
| CVE-2008-6393 EXP | PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a file transfer r… | Patch early | 10.0 high | 18.2% | 2009-03-03 |
| CVE-2001-0664 EXP | Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which cau… | Patch early | 7.5 high | 18.2% | 2001-10-30 |
| CVE-2019-12624 EXP | A vulnerability in the web-based management interface of Cisco IOS XE New Generation Wireless Controller (NGWC) could allow an unauthenticated, remote… | Patch early | 8.8 high | 18.2% | 2019-08-21 |
| CVE-2007-2788 EXP | Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun… | Patch early | 6.8 medium | 18.2% | 2007-05-22 |
| CVE-2021-24275 EXP | The Popup by Supsystic WordPress plugin before 1.10.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, lea… | Patch early | 6.1 medium | 18.2% | 2021-05-05 |
| CVE-2005-0701 EXP | Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via "\\.\\.." (modifi… | Patch early | 5.0 medium | 18.1% | 2005-03-07 |
| CVE-2018-19423 EXP | Codiad 2.8.4 allows remote authenticated administrators to execute arbitrary code by uploading an executable file. | Patch early | 7.2 high | 18.1% | 2018-11-21 |
| CVE-2001-0328 EXP | TCP implementations that use random increments for initial sequence numbers (ISN) can allow remote attackers to perform session hijacking or disruptio… | Patch early | 5.0 medium | 18.1% | 2001-06-27 |
| CVE-2013-5979 EXP | Directory traversal vulnerability in Spring Signage Xibo 1.2.x before 1.2.3 and 1.4.x before 1.4.2 allows remote attackers to read arbitrary files via… | Patch early | 5.0 medium | 18.1% | 2013-10-02 |
| CVE-2006-6601 EXP | Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service via a .MID (MIDI) fi… | Patch early | 4.3 medium | 18.1% | 2006-12-15 |
| CVE-2016-2207 EXP | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Syman… | Patch early | 8.4 high | 18.1% | 2016-06-30 |
| CVE-2017-2988 EXP | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection. Successful… | Patch early | 8.8 high | 18.1% | 2017-02-15 |
| CVE-2000-0973 EXP | Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a lo… | Patch early | 10.0 high | 18.1% | 2000-12-19 |
| CVE-2007-0811 EXP | Microsoft Internet Explorer 6.0 SP1 on Windows 2000, and 6.0 SP2 on Windows XP, allows remote attackers to cause a denial of service (NULL pointer der… | Patch early | 4.3 medium | 18.1% | 2007-02-07 |
| CVE-2009-1331 EXP | Integer overflow in Microsoft Windows Media Player (WMP) 11.0.5721.5260 allows remote attackers to cause a denial of service (application crash) via a… | Patch early | 9.3 high | 18.1% | 2009-04-17 |
| CVE-2010-2259 EXP | Directory traversal vulnerability in the BF Survey (com_bfsurvey) component for Joomla! allows remote attackers to include and execute arbitrary local… | Patch early | 7.5 high | 18.1% | 2010-06-09 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt