CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
401,185 CVEs
1,734 on KEV
17,292 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-05
149,780 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2008-4138 EXP | PHP remote file inclusion vulnerability in skin_shop/standard/3_plugin_twindow/twindow_notice.php in TECHNOTE 7 allows remote attackers to execute arb… | Patch early | 10.0 high | 10.3% | 2008-09-24 |
| CVE-2018-4314 EXP | A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 fo… | Patch early | 8.8 high | 10.3% | 2019-04-03 |
| CVE-2013-3612 EXP | Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for remote at… | Patch early | 10.0 high | 10.3% | 2013-09-17 |
| CVE-2017-8770 EXP | There is LFD (local file disclosure) on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesystem on the device via a crafte… | Patch early | 7.5 high | 10.3% | 2017-09-20 |
| CVE-2011-3495 EXP | Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to read, modify, or delet… | Patch early | 10.0 high | 10.3% | 2011-09-16 |
| CVE-2006-4670 EXP | Multiple PHP remote file inclusion vulnerabilities in PhotoKorn Gallery 1.52 and earlier allow remote attackers to execute arbitrary PHP code via a UR… | Patch early | 7.5 high | 10.3% | 2006-09-09 |
| CVE-2006-5518 EXP | Multiple PHP remote file inclusion vulnerabilities in Christopher Fowler (Rhode Island) RSSonate allow remote attackers to execute arbitrary PHP code… | Patch early | 7.5 high | 10.3% | 2006-10-26 |
| CVE-2007-0167 EXP | Multiple PHP file inclusion vulnerabilities in WGS-PPC (aka PPC Search Engine), as distributed with other aliases, allow remote attackers to execute a… | Patch early | 7.5 high | 10.3% | 2007-01-10 |
| CVE-2013-6884 EXP | The write-blocker in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a has a default "ditto" username and password, which allows remote… | Patch early | 10.0 high | 10.3% | 2014-01-07 |
| CVE-2019-3978 EXP | RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291. The queries… | Patch early | 7.5 high | 10.3% | 2019-10-29 |
| CVE-2018-20221 EXP | Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code execution via deserialization of untrusted user input… | Patch early | 8.8 high | 10.3% | 2019-03-21 |
| CVE-2005-1924 EXP | The G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allow remote authenticated users to execute arbitrary commands via shell metacharacters in (1)… | Patch early | 9.3 high | 10.3% | 2005-12-31 |
| CVE-2001-1138 EXP | Directory traversal vulnerability in r.pl (aka r.cgi) of Randy Parker Power Up HTML 0.8033beta allows remote attackers to read arbitrary files and pos… | Patch early | 7.5 high | 10.3% | 2001-09-07 |
| CVE-2001-0405 EXP | ip_conntrack_ftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT command tha… | Patch early | 7.5 high | 10.3% | 2001-07-02 |
| CVE-2007-2498 EXP | libmp4v2.dll in Winamp 5.02 through 5.34 allows user-assisted remote attackers to execute arbitrary code via a certain .MP4 file. NOTE: some of these… | Patch early | 9.3 high | 10.2% | 2007-05-04 |
| CVE-1999-0412 EXP | In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension. | Patch early | 7.5 high | 10.2% | 1999-02-19 |
| CVE-1999-0267 EXP | Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution. | Patch early | 7.5 high | 10.2% | 1997-09-23 |
| CVE-2011-4191 EXP | Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitrary code or… | Patch early | 7.5 high | 10.2% | 2011-11-30 |
| CVE-2002-1823 EXP | Buffer overflow in the HttpGetRequest function in Zeroo HTTP server 1.5 allows remote attackers to execute arbitrary code via a long HTTP request. | Patch early | 7.5 high | 10.2% | 2002-12-31 |
| CVE-2004-2299 EXP | Buffer overflow in Omnicron OmniHTTPd 3.0a and earlier allows remote attackers to execute arbitrary code via an HTTP GET request with a long Range hea… | Patch early | 7.5 high | 10.2% | 2004-12-31 |
| CVE-2013-6023 EXP | Directory traversal vulnerability in the TVT TD-2308SS-B DVR with firmware 3.2.0.P-3520A-00 and earlier allows remote attackers to read arbitrary file… | Patch early | 7.8 high | 10.2% | 2013-11-02 |
| CVE-2004-1770 EXP | The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shell metacharacters in the user p… | Patch early | 10.0 high | 10.2% | 2004-03-11 |
| CVE-2016-4309 EXP | Session fixation vulnerability in Symphony CMS 2.6.7, when session.use_only_cookies is disabled, allows remote attackers to hijack web sessions via th… | Patch early | 7.5 high | 10.2% | 2016-06-30 |
| CVE-2008-6994 EXP | Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-assisted remo… | Patch early | 9.3 high | 10.2% | 2009-08-19 |
| CVE-2005-0634 EXP | Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long USER command. | Patch early | 7.5 high | 10.2% | 2005-05-02 |
| CVE-2002-2281 EXP | Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute arbitrary Java commands via an… | Patch early | 10.0 high | 10.2% | 2002-12-31 |
| CVE-2016-4557 EXP | The replace_map_fd_with_map_ptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does not properly maintain an fd data structure, wh… | Patch early | 7.8 high | 10.2% | 2016-05-23 |
| CVE-2009-0350 EXP | Stack-based buffer overflow in Merak Media Player 3.2 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file, rel… | Patch early | 9.3 high | 10.2% | 2009-01-29 |
| CVE-2017-7117 EXP | An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected.… | Patch early | 8.8 high | 10.2% | 2017-10-23 |
| CVE-2007-1327 EXP | The SILC_SERVER_CMD_FUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote attackers to cause a denial of service (NULL dereference… | Patch early | 7.8 high | 10.2% | 2007-03-07 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt