CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
424,684 CVEs
1,779 on KEV
17,541 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-12
196,901 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2021-42237 KEV | Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it is possible to achieve remote… | Patch first | 9.8 critical | 97.4% | 2021-11-05 |
| CVE-2026-85706 KEV | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 1… | Patch first | 10.0 critical | 97.4% | 2026-09-12 |
| CVE-2023-24489 KEV | A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated att… | Patch first | 9.8 critical | 97.3% | 2023-07-10 |
| CVE-2023-26360 KEV | Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that c… | Patch first | 8.6 high | 97.3% | 2023-03-23 |
| CVE-2015-1641 KEV | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Autom… | Patch first | 7.8 high | 97.2% | 2015-04-14 |
| CVE-2024-41713 KEV | A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated atta… | Patch first | 9.1 critical | 97.2% | 2024-10-21 |
| CVE-2021-41277 KEV | Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map (`admin->set… | Patch first | 10.0 critical | 97.2% | 2021-11-17 |
| CVE-2025-2747 KEV | An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for t… | Patch first | 9.8 critical | 97.2% | 2025-03-24 |
| CVE-2023-23397 KEV | Microsoft Outlook Elevation of Privilege Vulnerability | Patch first | 9.8 critical | 97.2% | 2023-03-14 |
| CVE-2025-5086 KEV | A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution… | Patch first | 9.0 critical | 97.2% | 2025-06-02 |
| CVE-2023-52163 KEV | Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This vulnerability only affects products that are no longer s… | Patch first | 8.8 high | 97.1% | 2025-02-03 |
| CVE-2024-20439 KEV | A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by using a stat… | Patch first | 9.8 critical | 97.1% | 2024-09-04 |
| CVE-2023-38203 KEV | Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by a Deserialization of Untrusted Data vul… | Patch first | 9.8 critical | 97.1% | 2023-07-20 |
| CVE-2018-1273 KEV | Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused b… | Patch first | 9.8 critical | 97% | 2018-04-11 |
| CVE-2026-20253 KEV | In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or truncate arbitrary files through… | Patch first | 9.8 critical | 96.9% | 2026-06-10 |
| CVE-2024-57727 KEV | SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attac… | Patch first | 7.5 high | 96.8% | 2025-01-15 |
| CVE-2020-25223 KEV | A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11 | Patch first | 9.8 critical | 96.8% | 2020-09-25 |
| CVE-2021-22502 KEV | Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploi… | Patch first | 9.8 critical | 96.7% | 2021-02-08 |
| CVE-2020-1350 KEV | A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server… | Patch first | 10.0 critical | 96.7% | 2020-07-14 |
| CVE-2023-46747 KEV | Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the manage… | Patch first | 9.8 critical | 96.7% | 2023-10-26 |
| CVE-2018-6530 KEV | OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions,… | Patch first | 9.8 critical | 96.7% | 2018-03-06 |
| CVE-2026-35273 KEV | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions th… | Patch first | 9.8 critical | 96.7% | 2026-06-11 |
| CVE-2023-33246 KEV | For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution. Several components of RocketMQ, includ… | Patch first | 9.8 critical | 96.6% | 2023-05-24 |
| CVE-2020-8260 KEV | A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary code execution u… | Patch first | 7.2 high | 96.5% | 2020-10-28 |
| CVE-2026-23760 KEV | SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-reset-passwo… | Patch first | 9.8 critical | 96.4% | 2026-01-22 |
| CVE-2025-54068 KEV | Livewire is a full-stack framework for Laravel. In Livewire v3 up to and including v3.6.3, a vulnerability allows unauthenticated attackers to achieve… | Patch first | 9.8 critical | 96.3% | 2025-07-17 |
| CVE-2021-35587 KEV | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent). Supported versions that are affected are 11… | Patch first | 9.8 critical | 96.3% | 2022-01-19 |
| CVE-2020-17530 KEV | Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0… | Patch first | 9.8 critical | 96.3% | 2020-12-11 |
| CVE-2017-3506 KEV | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected a… | Patch first | 7.4 high | 96% | 2017-04-24 |
| CVE-2021-20124 KEV | A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An unauthe… | Patch first | 7.5 high | 95.9% | 2021-10-13 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt