CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
401,212 CVEs
1,734 on KEV
17,292 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-05
401,212 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2006-3880 EXP | Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cause a denial of service (IP sta… | Patch early | 5.0 medium | 24.7% | 2006-07-27 |
| CVE-2014-8146 EXP | The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Un… | Patch early | 7.5 high | 24.7% | 2015-05-25 |
| CVE-2014-1791 EXP | Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf… | Patch early | 9.3 high | 24.7% | 2014-06-11 |
| CVE-2014-1795 EXP | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf… | Patch early | 9.3 high | 24.7% | 2014-06-11 |
| CVE-2017-3061 EXP | Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the SWF parser. Successful exploitation coul… | Patch early | 9.8 critical | 24.7% | 2017-04-12 |
| CVE-2017-3076 EXP | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC module. Successful exploitati… | Patch early | 9.8 critical | 24.7% | 2017-06-20 |
| CVE-2019-5893 EXP | Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter. | Patch early | 9.8 critical | 24.7% | 2019-01-10 |
| CVE-2014-4650 EXP | The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remot… | Patch early | 9.8 critical | 24.7% | 2020-02-20 |
| CVE-2012-4353 EXP | Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attack… | Patch early | 9.3 high | 24.7% | 2012-08-19 |
| CVE-2018-4936 EXP | Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Heap Overflow vulnerability. Successful exploitation could lead to information… | Patch early | 6.5 medium | 24.7% | 2018-05-19 |
| CVE-2013-7052 EXP | D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script | Patch early | 9.8 critical | 24.7% | 2020-02-04 |
| CVE-2010-1246 EXP | Stack-based buffer overflow in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RT… | Patch early | 9.3 high | 24.7% | 2010-06-08 |
| CVE-2009-4850 EXP | The Awingsoft Awakening Winds3D Viewer plugin 3.5.0.9 allows remote attackers to execute arbitrary programs via a SceneURL property value with a URL f… | Patch early | 9.3 high | 24.7% | 2010-05-07 |
| CVE-2006-0015 EXP | Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services… | Patch early | 6.8 medium | 24.6% | 2006-04-11 |
| CVE-2016-9554 EXP | The Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a Remote Command Injection vulnerability in its web adm… | Patch early | 7.2 high | 24.6% | 2017-01-28 |
| CVE-2016-3645 EXP | Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:S… | Patch early | 9.8 critical | 24.6% | 2016-06-30 |
| CVE-1999-0448 EXP | IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request. | Patch early | 5.0 medium | 24.6% | 1999-01-01 |
| CVE-2017-12787 EXP | A network interface of the novi_process_manager_daemon service, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviS… | Patch early | 9.8 critical | 24.6% | 2017-08-22 |
| CVE-2015-7652 EXP | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux,… | Patch early | 9.3 high | 24.6% | 2015-11-11 |
| CVE-2017-2932 EXP | Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript MovieClip class. Successful ex… | Patch early | 8.8 high | 24.6% | 2017-01-11 |
| CVE-2006-0032 EXP | Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is set to Au… | Patch early | 4.3 medium | 24.6% | 2006-09-12 |
| CVE-1999-0003 EXP | Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd). | Patch early | 10.0 high | 24.6% | 1998-04-01 |
| CVE-2015-2790 EXP | Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a cra… | Patch early | 4.3 medium | 24.5% | 2015-03-30 |
| CVE-2008-7232 EXP | Buffer overflow in the report function in xtacacsd 4.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted CONNECT TACACS co… | Patch early | 10.0 high | 24.5% | 2009-09-14 |
| CVE-2008-5793 EXP | Multiple PHP remote file inclusion vulnerabilities in the Clickheat - Heatmap stats (com_clickheat) component 1.0.1 for Joomla! allow remote attackers… | Patch early | 6.8 medium | 24.5% | 2008-12-31 |
| CVE-2014-1797 EXP | Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… | Patch early | 9.3 high | 24.5% | 2014-06-11 |
| CVE-2014-1800 EXP | Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf… | Patch early | 9.3 high | 24.5% | 2014-06-11 |
| CVE-2007-2795 EXP | Multiple buffer overflows in Ipswitch IMail before 2006.21 allow remote attackers or authenticated users to execute arbitrary code via (1) the authent… | Patch early | 9.0 high | 24.5% | 2009-01-27 |
| CVE-2019-13360 EXP | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, remote attackers can bypass authentication in the login process by leveraging knowledge o… | Patch early | 9.8 critical | 24.5% | 2019-07-16 |
| CVE-2001-0419 EXP | Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle application server 4.0.8.2, allow… | Patch early | 7.5 high | 24.4% | 2001-07-02 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt