CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
401,964 CVEs
1,734 on KEV
17,295 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-06
401,964 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2014-5383 EXP | SQL injection vulnerability in AlienVault OSSIM before 4.7.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vecto… | Patch early | 6.5 medium | 21.2% | 2014-08-21 |
| CVE-2019-9955 EXP | On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 11… | Patch early | 6.1 medium | 21.2% | 2019-04-22 |
| CVE-2004-0083 EXP | Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a… | Patch early | 10.0 high | 21.2% | 2004-03-03 |
| CVE-2025-47166 EXP | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Patch early | 8.8 high | 21.2% | 2025-06-10 |
| CVE-2016-9899 EXP | Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Fi… | Patch early | 9.8 critical | 21.1% | 2018-06-11 |
| CVE-2017-2931 EXP | Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to the parsing of SWF metadata. Success… | Patch early | 8.8 high | 21.1% | 2017-01-11 |
| CVE-2016-4338 EXP | The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x before 2.2.13, and 3.0.x before 3… | Patch early | 8.1 high | 21.1% | 2017-01-23 |
| CVE-2006-5647 EXP | Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11 allows remote attackers to c… | Patch early | 6.4 medium | 21.1% | 2006-11-01 |
| CVE-2022-47874 EXP | Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view details of database connections via class 'c… | Patch early | 6.5 medium | 21.1% | 2023-05-02 |
| CVE-2005-2842 EXP | Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary code via the username. | Patch early | 7.5 high | 21.1% | 2005-09-08 |
| CVE-2021-44595 EXP | Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send manually crafted packets to the… | Patch early | 8.8 high | 21.1% | 2022-04-29 |
| CVE-2018-0878 EXP | Windows Remote Assistance in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows… | Patch early | 3.1 low | 21.1% | 2018-03-14 |
| CVE-2005-2871 EXP | Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and earlier, and Netscape 8.0.3.3 and 7.2, allows remote attac… | Patch early | 7.5 high | 21.1% | 2005-09-09 |
| CVE-2002-0201 EXP | Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP… | Patch early | 5.0 medium | 21.1% | 2002-05-16 |
| CVE-2003-1083 EXP | Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP request. | Patch early | 10.0 high | 21.1% | 2003-12-31 |
| CVE-2011-4362 EXP | Integer signedness error in the base64_decode function in the HTTP authentication functionality (http_auth.c) in lighttpd 1.4 before 1.4.30 and 1.5 be… | Patch early | 5.0 medium | 21.1% | 2011-12-24 |
| CVE-2020-3956 EXP | VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4 do not properly handle input… | Patch early | 8.8 high | 21.1% | 2020-05-20 |
| CVE-1999-0153 EXP | Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke. | Patch early | 5.0 medium | 21.1% | 1997-07-01 |
| CVE-2016-3223 EXP | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Wind… | Patch early | 8.1 high | 21.1% | 2016-06-16 |
| CVE-2006-6379 EXP | Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier, ARCserve Backup 9… | Patch early | 7.5 high | 21.1% | 2006-12-10 |
| CVE-2013-3617 EXP | The XML API in Openbravo ERP 2.5, 3.0, and earlier allows remote authenticated users to read arbitrary files via an XML document with an external enti… | Patch early | 3.5 low | 21.1% | 2013-11-02 |
| CVE-2025-58180 EXP | OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.11.2 contain a vulnerability that… | Patch early | 8.8 high | 21.1% | 2025-09-09 |
| CVE-2018-5159 EXP | An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-… | Patch early | 9.8 critical | 21% | 2018-06-11 |
| CVE-2008-4864 EXP | Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Pyth… | Patch early | 7.5 high | 21% | 2008-11-01 |
| CVE-2010-3274 EXP | Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in the Employee Search Engine in ZOHO ManageEngine ADSelfService Plus before… | Patch early | 4.3 medium | 21% | 2011-02-17 |
| CVE-2010-2265 EXP | Cross-site scripting (XSS) vulnerability in the GetServerName function in sysinfo/commonFunc.js in Microsoft Windows Help and Support Center for Windo… | Patch early | 4.3 medium | 21% | 2010-06-15 |
| CVE-2011-4804 EXP | Directory traversal vulnerability in the obSuggest (com_obsuggest) component before 1.8 for Joomla! allows remote attackers to read arbitrary files vi… | Patch early | 5.0 medium | 21% | 2011-12-14 |
| CVE-2021-26599 EXP | ImpressCMS before 1.4.3 allows include/findusers.php groups SQL Injection. | Patch early | 9.8 critical | 21% | 2022-03-28 |
| CVE-2006-1490 EXP | PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script that processes user input in t… | Patch early | 5.0 medium | 21% | 2006-03-29 |
| CVE-2021-46387 EXP | ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting (XSS). Insecure URI handling leads to bypass security restriction… | Patch early | 6.1 medium | 21% | 2022-03-01 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt