CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
402,585 CVEs
1,734 on KEV
17,294 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-07
320,622 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2001-1163 EXP | Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT argument to port 6500. | Patch early | 10.0 high | 11.2% | 2001-06-16 |
| CVE-2014-4927 EXP | Buffer overflow in ACME micro_httpd, as used in D-Link DSL2750U and DSL2740U and NetGear WGR614 and MR-ADSL-DG834 routers allows remote attackers to c… | Patch early | 7.8 high | 11.2% | 2014-07-24 |
| CVE-2004-2652 EXP | The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST output or verbose mode, allows remote attacke… | Patch early | 7.8 high | 11.2% | 2004-12-31 |
| CVE-2004-1260 EXP | Multiple buffer overflows in the (1) write_heading function in subs.cpp or (2) trim_title function in parse.cpp for abctab2ps 1.6.3 allow remote attac… | Patch early | 10.0 high | 11.2% | 2005-01-10 |
| CVE-2009-1608 EXP | Multiple buffer overflows in Microchip MPLAB IDE 8.30 and possibly earlier versions allow user-assisted remote attackers to execute arbitrary code via… | Patch early | 9.3 high | 11.2% | 2009-05-11 |
| CVE-2016-9651 EXP | A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arb… | Patch early | 8.8 high | 11.2% | 2019-01-09 |
| CVE-2015-2196 EXP | SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the cat_id para… | Patch early | 7.5 high | 11.2% | 2015-03-03 |
| CVE-2012-1008 EXP | OfficeSIP Server 3.1 allows remote attackers to cause a denial of service (daemon crash) via a crafted To header in a SIP INVITE message. | Patch early | 5.0 medium | 11.2% | 2012-02-08 |
| CVE-2004-1992 EXP | Buffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of service (crash) via a long -l parameter, which trigge… | Patch early | 5.0 medium | 11.2% | 2004-04-20 |
| CVE-2007-4061 EXP | Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to create or overwrite ar… | Patch early | 9.3 high | 11.2% | 2007-07-30 |
| CVE-2008-1996 EXP | licq before 1.3.6 allows remote attackers to cause a denial of service (file-descriptor exhaustion and application crash) via a large number of connec… | Patch early | 5.0 medium | 11.2% | 2008-04-28 |
| CVE-2009-3111 EXP | The rad_decode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service (radiusd crash) via zero-length Tunnel-Passwor… | Patch early | 5.0 medium | 11.2% | 2009-09-09 |
| CVE-2008-4096 EXP | libraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request to server… | Patch early | 8.5 high | 11.2% | 2008-09-18 |
| CVE-2002-1549 EXP | Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request. | Patch early | 7.5 high | 11.2% | 2003-03-31 |
| CVE-2010-3856 EXP | ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LD_AUDIT environment va… | Patch early | 7.2 high | 11.2% | 2011-01-07 |
| CVE-2008-3480 EXP | Stack-based buffer overflow in the Anzio Web Print Object (WePO) ActiveX control 3.2.19 and 3.2.24, as used in Anzio Print Wizard, allows remote attac… | Patch early | 9.3 high | 11.2% | 2008-08-29 |
| CVE-2009-1031 EXP | Directory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1 through 7.4.0.1 allows remote attackers to create arb… | Patch early | 7.8 high | 11.2% | 2009-03-20 |
| CVE-2000-0697 EXP | The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metachara… | Patch early | 10.0 high | 11.2% | 2000-10-20 |
| CVE-2013-3586 EXP | Samsung Web Viewer for Samsung DVR devices allows remote attackers to bypass authentication via an arbitrary SessionID value in a cookie. | Patch early | 7.6 high | 11.2% | 2013-08-28 |
| CVE-2019-8929 EXP | An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/selectDevice.… | Patch early | 6.1 medium | 11.2% | 2019-05-17 |
| CVE-2012-2738 EXP | The VteTerminal in gnome-terminal (vte) before 0.32.2 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) v… | Patch early | 4.0 medium | 11.2% | 2012-07-22 |
| CVE-2010-1979 EXP | Directory traversal vulnerability in the Affiliate Datafeeds (com_datafeeds) component build 880 for Joomla! allows remote attackers to read arbitrary… | Patch early | 6.8 medium | 11.2% | 2010-05-19 |
| CVE-2014-1907 EXP | Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers… | Patch early | 6.4 medium | 11.1% | 2014-03-06 |
| CVE-2016-8655 EXP | Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-af… | Patch early | 7.8 high | 11.1% | 2016-12-08 |
| CVE-2002-1660 EXP | calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command parameter. | Patch early | 7.5 high | 11.1% | 2002-12-31 |
| CVE-2007-6262 EXP | A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to… | Patch early | 6.8 medium | 11.1% | 2007-12-06 |
| CVE-2006-2743 EXP | Drupal 4.6.x before 4.6.7 and 4.7.0, when running on Apache with mod_mime, does not properly handle files with multiple extensions, which allows remot… | Patch early | 5.1 medium | 11.1% | 2006-06-01 |
| CVE-2007-1687 EXP | Multiple buffer overflows in the Internet Pictures Corporation iPIX Image Well ActiveX control (iPIX-ImageWell-ipix.dll) allow remote attackers to exe… | Patch early | 10.0 high | 11.1% | 2007-04-10 |
| CVE-2008-5409 EXP | Unspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and Antivirus Standard 10, (2) BullGuard Internet Security 8.5, and… | Patch early | 9.3 high | 11.1% | 2008-12-10 |
| CVE-2017-2619 EXP | Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file sy… | Patch early | 7.5 high | 11.1% | 2018-03-12 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt