CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
401,289 CVEs
1,734 on KEV
17,292 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-05
401,289 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2018-5997 EXP | An issue was discovered in the HTTP Server in RAVPower Filehub 2.000.056. Due to an unrestricted upload feature and a path traversal vulnerability, it… | Patch early | 9.8 critical | 23.5% | 2018-01-25 |
| CVE-2002-1375 EXP | The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long response. | Patch early | 7.5 high | 23.5% | 2002-12-23 |
| CVE-2010-3139 EXP | Untrusted search path vulnerability in Microsoft Windows Progman Group Converter (grpconv.exe) allows local users, and possibly remote attackers, to e… | Patch early | 9.3 high | 23.5% | 2010-08-27 |
| CVE-2022-31101 EXP | prestashop/blockwishlist is a prestashop extension which adds a block containing the customer's wishlists. In affected versions an authenticated custo… | Patch early | 8.1 high | 23.5% | 2022-06-27 |
| CVE-2010-4476 EXP | The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and ear… | Patch early | 5.0 medium | 23.5% | 2011-02-17 |
| CVE-2023-37629 EXP | Online Piggery Management System 1.0 is vulnerable to File Upload. An unauthenticated user can upload a php file by sending a POST request to "add-pig… | Patch early | 9.8 critical | 23.5% | 2023-07-12 |
| CVE-2019-13577 EXP | SnmpAdm.exe in MAPLE WBT SNMP Administrator v2.0.195.15 has an Unauthenticated Remote Buffer Overflow via a long string to the CE Remote feature liste… | Patch early | 9.8 critical | 23.5% | 2019-07-17 |
| CVE-2008-0566 EXP | PHP remote file inclusion vulnerability in includes/smarty.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary… | Patch early | 6.8 medium | 23.5% | 2008-02-05 |
| CVE-2024-56902 EXP | Information disclosure vulnerability in Geovision GV-ASManager web application with the version v6.1.0.0 or less, which discloses account information,… | Patch early | 7.5 high | 23.4% | 2025-02-03 |
| CVE-2013-1606 EXP | Buffer overflow in the ubnt-streamer RTSP service on the Ubiquiti UBNT AirCam with airVision firmware before 1.1.6 allows remote attackers to execute… | Patch early | 7.5 high | 23.4% | 2013-07-18 |
| CVE-2015-7622 EXP | Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acr… | Patch early | 10.0 high | 23.4% | 2015-10-14 |
| CVE-2008-3529 EXP | Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a d… | Patch early | 10.0 high | 23.4% | 2008-09-12 |
| CVE-2018-8527 EXP | An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XEL file containing a referen… | Patch early | 5.5 medium | 23.4% | 2018-10-10 |
| CVE-2018-8532 EXP | An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XMLA file containing a refere… | Patch early | 5.5 medium | 23.4% | 2018-10-10 |
| CVE-2018-8533 EXP | An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious XML content containing a refere… | Patch early | 5.5 medium | 23.4% | 2018-10-10 |
| CVE-2005-0452 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attackers to inject arbitrary HTML or… | Patch early | 4.3 medium | 23.4% | 2005-02-16 |
| CVE-2011-4106 EXP | TimThumb (timthumb.php) before 2.0 does not validate the entire source with the domain white list, which allows remote attackers to upload and execute… | Patch early | 6.8 medium | 23.3% | 2013-10-26 |
| CVE-2002-0647 EXP | Buffer overflow in a legacy ActiveX control used to display specially formatted text in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote a… | Patch early | 7.5 high | 23.3% | 2002-09-24 |
| CVE-2006-3897 EXP | Stack overflow in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (application crash) by creating a… | Patch early | 5.0 medium | 23.3% | 2006-07-27 |
| CVE-2003-0002 EXP | Cross-site scripting vulnerability (XSS) in ManualLogin.asp script for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to exec… | Patch early | 6.8 medium | 23.3% | 2003-02-07 |
| CVE-2004-2289 EXP | Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellClassInfo sp… | Patch early | 10.0 high | 23.3% | 2004-12-31 |
| CVE-2025-24071 EXP | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network… | Patch early | 6.5 medium | 23.3% | 2025-03-11 |
| CVE-2012-2052 EXP | Stack-based buffer overflow in the U3D.8BI library plugin in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attac… | Patch early | 9.3 high | 23.3% | 2014-06-19 |
| CVE-2013-5528 EXP | Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users… | Patch early | 4.0 medium | 23.3% | 2013-10-11 |
| CVE-2016-9682 EXP | The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web administrati… | Patch early | 9.8 critical | 23.3% | 2017-02-22 |
| CVE-2005-3120 EXP | Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article… | Patch early | 9.8 critical | 23.3% | 2005-10-17 |
| CVE-2008-2281 EXP | Cross-zone scripting vulnerability in the Print Table of Links feature in Internet Explorer 6.0, 7.0, and 8.0b allows user-assisted remote attackers t… | Patch early | 9.3 high | 23.2% | 2008-05-18 |
| CVE-2013-1360 EXP | An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Ma… | Patch early | 9.8 critical | 23.2% | 2020-02-11 |
| CVE-1999-0980 EXP | Windows NT Service Control Manager (SCM) allows remote attackers to cause a denial of service via a malformed argument in a resource enumeration reque… | Patch early | 5.0 medium | 23.2% | 2000-05-16 |
| CVE-2008-0503 EXP | Eval injection vulnerability in admin/op/disp.php in Netwerk Smart Publisher 1.0.1 allows remote attackers to execute arbitrary PHP code via the filed… | Patch early | 6.8 medium | 23.2% | 2008-01-31 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt