CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
402,556 CVEs
1,734 on KEV
17,294 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-07
402,556 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2025-64459 EXP | An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. The methods `QuerySet.filter()`, `QuerySet.exclude()`, and `Que… | Patch early | 9.1 critical | 19.3% | 2025-11-05 |
| CVE-2019-9017 EXP | DWRCC in SolarWinds DameWare Mini Remote Control 10.0 x64 has a Buffer Overflow associated with the size field for the machine name. | Patch early | 7.5 high | 19.2% | 2019-05-02 |
| CVE-2019-19208 EXP | Codiad Web IDE through 2.8.4 allows PHP Code injection. | Patch early | 9.8 critical | 19.2% | 2020-03-16 |
| CVE-2016-6598 EXP | BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service (FileStorageService) on port 9010. This service conta… | Patch early | 9.8 critical | 19.2% | 2018-01-30 |
| CVE-2013-3684 EXP | NextGEN Gallery plugin before 1.9.13 for WordPress: ngggallery.php file upload | Patch early | 9.8 critical | 19.2% | 2020-02-11 |
| CVE-2000-0377 EXP | The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which causes the w… | Patch early | 5.0 medium | 19.2% | 2000-06-08 |
| CVE-2010-1657 EXP | Directory traversal vulnerability in the SmartSite (com_smartsite) component 1.0.0 for Joomla! allows remote attackers to read arbitrary files via a .… | Patch early | 5.0 medium | 19.2% | 2010-05-03 |
| CVE-2019-12616 EXP | An issue was discovered in phpMyAdmin before 4.9.0. A vulnerability was found that allows an attacker to trigger a CSRF attack against a phpMyAdmin us… | Patch early | 6.5 medium | 19.2% | 2019-06-05 |
| CVE-2016-2208 EXP | The kernel component in Symantec Anti-Virus Engine (AVE) 20151.1 before 20151.1.1.4 allows remote attackers to execute arbitrary code or cause a denia… | Patch early | 9.1 critical | 19.2% | 2016-05-19 |
| CVE-2014-8272 EXP | The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select sessi… | Patch early | 5.0 medium | 19.2% | 2014-12-19 |
| CVE-2011-3182 EXP | PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attack… | Patch early | 5.0 medium | 19.2% | 2011-08-25 |
| CVE-2017-16949 EXP | An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress. Improper input sanitization allows the at… | Patch early | 9.8 critical | 19.2% | 2017-12-19 |
| CVE-2018-7313 EXP | SQL Injection exists in the CW Tags 2.0.6 component for Joomla! via the searchtext array parameter. | Patch early | 9.8 critical | 19.2% | 2018-02-22 |
| CVE-2018-5972 EXP | SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI. | Patch early | 9.8 critical | 19.2% | 2018-01-24 |
| CVE-2018-5979 EXP | SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field. | Patch early | 9.8 critical | 19.2% | 2018-01-24 |
| CVE-2018-5985 EXP | SQL Injection exists in the LiveCRM SaaS Cloud 1.0 component for Joomla! via an r=site/login&company_id= request. | Patch early | 9.8 critical | 19.2% | 2018-01-24 |
| CVE-2018-5988 EXP | SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobile_preview.php or index.php. | Patch early | 9.8 critical | 19.2% | 2018-01-24 |
| CVE-2018-6006 EXP | SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter. | Patch early | 9.8 critical | 19.2% | 2018-02-17 |
| CVE-2018-6583 EXP | SQL Injection exists in the Timetable Responsive Schedule 1.5 component for Joomla! via a view=event&alias= request. | Patch early | 9.8 critical | 19.2% | 2018-02-17 |
| CVE-2018-1000888 EXP | PEAR Archive_Tar version 1.4.3 and earlier contains a CWE-502, CWE-915 vulnerability in the Archive_Tar class. There are several file operations with… | Patch early | 8.8 high | 19.1% | 2018-12-28 |
| CVE-1999-0386 EXP | Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using… | Patch early | 5.0 medium | 19.1% | 1999-03-01 |
| CVE-2019-16516 EXP | An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. There is a user enumeration vulnerability, allowing… | Patch early | 5.3 medium | 19.1% | 2020-01-23 |
| CVE-2025-7769 EXP | Tigo Energy's CCA is vulnerable to a command injection vulnerability in the /cgi-bin/mobile_api endpoint when the DEVICE_PING command is called, allow… | Patch early | — | 19.1% | 2025-08-06 |
| CVE-2006-0187 EXP | By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserControl1_Load function), which al… | Patch early | 5.1 medium | 19.1% | 2006-01-12 |
| CVE-2020-6507 EXP | Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… | Patch early | 8.8 high | 19.1% | 2020-07-22 |
| CVE-2006-4343 EXP | The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers… | Patch early | 4.3 medium | 19.1% | 2006-09-28 |
| CVE-2015-5995 EXP | Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150 devices allow remote attackers to obtain administrative ac… | Patch early | 9.8 critical | 19.1% | 2015-12-31 |
| CVE-2011-3833 EXP | Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to execute… | Patch early | 6.0 medium | 19% | 2012-01-29 |
| CVE-2000-0132 EXP | Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function. | Patch early | 2.6 low | 19% | 2000-01-31 |
| CVE-2015-2153 EXP | The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (o… | Patch early | 5.0 medium | 19% | 2015-03-24 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt