CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
401,200 CVEs
1,734 on KEV
17,292 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-05
401,200 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2005-2307 EXP | netman.dll in Microsoft Windows Connections Manager Library allows local users to cause a denial of service (Network Connections Service crash) via a… | Patch early | 5.0 medium | 25.6% | 2005-07-19 |
| CVE-2015-6086 EXP | Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Inte… | Patch early | 4.3 medium | 25.6% | 2015-11-11 |
| CVE-2005-0420 EXP | Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the o… | Patch early | 5.8 medium | 25.6% | 2005-04-27 |
| CVE-2009-1492 EXP | The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote attackers to cause a denial of… | Patch early | 9.3 high | 25.5% | 2009-04-30 |
| CVE-2006-1626 EXP | Internet Explorer 6 for Windows XP SP2 and earlier allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-openin… | Patch early | 4.3 medium | 25.5% | 2006-04-05 |
| CVE-2005-2340 EXP | Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a crafted (1) QuickTime Image File (Q… | Patch early | 7.5 high | 25.5% | 2005-12-31 |
| CVE-2019-15106 EXP | An issue was discovered in Zoho ManageEngine OpManager in builds before 14310. One can bypass the user password requirement and execute commands on th… | Patch early | 9.8 critical | 25.5% | 2019-08-16 |
| CVE-2015-3073 EXP | Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript… | Patch early | 10.0 high | 25.5% | 2015-05-13 |
| CVE-2015-8634 EXP | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 o… | Patch early | 8.8 high | 25.5% | 2015-12-28 |
| CVE-2015-8635 EXP | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 o… | Patch early | 8.8 high | 25.5% | 2015-12-28 |
| CVE-2008-2948 EXP | Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location property of a frame via the Object da… | Patch early | 6.8 medium | 25.4% | 2008-06-30 |
| CVE-2008-0095 EXP | The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer… | Patch early | 5.0 medium | 25.4% | 2008-01-08 |
| CVE-2016-4138 EXP | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11… | Patch early | 9.8 critical | 25.4% | 2016-06-16 |
| CVE-2015-2746 EXP | The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON 7.8.3 and V-Series appliances… | Patch early | 6.5 medium | 25.4% | 2015-03-26 |
| CVE-2016-2851 EXP | Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and app… | Patch early | 9.8 critical | 25.4% | 2016-04-07 |
| CVE-2015-1489 EXP | The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to gain privileges vi… | Patch early | 8.5 high | 25.4% | 2015-08-01 |
| CVE-2017-5586 EXP | OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java object, re… | Patch early | 9.8 critical | 25.3% | 2017-02-22 |
| CVE-2021-3278 EXP | Local Service Search Engine Management System 1.0 has a vulnerability through authentication bypass using SQL injection . Using this vulnerability, an… | Patch early | 9.8 critical | 25.3% | 2021-01-26 |
| CVE-1999-1538 EXP | When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allo… | Patch early | 2.1 low | 25.3% | 1999-01-14 |
| CVE-2017-12786 EXP | Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwit… | Patch early | 9.8 critical | 25.3% | 2017-08-22 |
| CVE-2022-23046 EXP | PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edi… | Patch early | 7.2 high | 25.2% | 2022-01-19 |
| CVE-2019-0572 EXP | An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Ser… | Patch early | 7.8 high | 25.1% | 2019-01-08 |
| CVE-2013-3568 EXP | Cross-site request forgery (CSRF) vulnerability in Cisco Linksys WRT110 allows remote attackers to hijack the authentication of users for requests tha… | Patch early | 8.8 high | 25.1% | 2020-02-06 |
| CVE-2006-7210 EXP | Microsoft Windows 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (cpu consumption) via a PNG image with crafted (1) Wi… | Patch early | 5.0 medium | 25.1% | 2007-06-27 |
| CVE-2017-11906 EXP | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows… | Patch early | 5.3 medium | 25.1% | 2017-12-12 |
| CVE-2003-0411 EXP | Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase ".JSP" exte… | Patch early | 7.5 high | 25.1% | 2003-06-30 |
| CVE-2012-1226 EXP | Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly execute arbitrary… | Patch early | 7.5 high | 25.1% | 2012-02-21 |
| CVE-2004-0557 EXP | Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute… | Patch early | 10.0 high | 25.1% | 2004-08-06 |
| CVE-2016-1001 EXP | Heap-based buffer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577… | Patch early | 8.8 high | 25.1% | 2016-03-12 |
| CVE-2014-5006 EXP | Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers to execute arbitrary code via… | Patch early | 7.5 high | 25.1% | 2014-10-21 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt