CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
402,984 CVEs
1,734 on KEV
17,293 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-08
36,885 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2020-26829 | SAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because… | In your normal cycle | 10.0 critical | 4.8% | 2020-12-09 |
| CVE-2020-28334 | Barco wePresent WiPG-1600W devices use Hard-coded Credentials (issue 2 of 2). Affected Version(s): 2.5.1.8, 2.5.0.25, 2.5.0.24, 2.4.1.19. The Barco we… | In your normal cycle | 9.8 critical | 4.8% | 2020-11-24 |
| CVE-2016-5745 | F5 BIG-IP LTM systems 11.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF11, 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.… | In your normal cycle | 9.8 critical | 4.8% | 2016-10-05 |
| CVE-2021-36440 | Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'file_url' parameter in the component AdminUpdate… | In your normal cycle | 9.8 critical | 4.8% | 2021-09-08 |
| CVE-2021-43350 | An unauthenticated Apache Traffic Control Traffic Ops user can send a request with a specially-crafted username to the POST /login endpoint of any API… | In your normal cycle | 9.8 critical | 4.8% | 2021-11-11 |
| CVE-2017-11496 | Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote at… | In your normal cycle | 9.8 critical | 4.8% | 2017-10-03 |
| CVE-2017-11497 | Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote at… | In your normal cycle | 9.8 critical | 4.8% | 2017-10-03 |
| CVE-2017-5522 | Stack-based buffer overflow in MapServer before 6.0.6, 6.2.x before 6.2.4, 6.4.x before 6.4.5, and 7.0.x before 7.0.4 allows remote attackers to cause… | In your normal cycle | 9.8 critical | 4.8% | 2017-03-15 |
| CVE-2022-4049 | The WP User WordPress plugin through 7.0 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL inject… | In your normal cycle | 9.8 critical | 4.8% | 2023-01-02 |
| CVE-2022-4447 | The Fontsy WordPress plugin through 1.8.6 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action avai… | In your normal cycle | 9.8 critical | 4.8% | 2023-01-16 |
| CVE-2018-9919 | A web-accessible backdoor, with resultant SSRF, exists in Tp-shop 2.0.5 through 2.0.8, which allows remote attackers to obtain sensitive information,… | In your normal cycle | 9.8 critical | 4.8% | 2018-05-02 |
| CVE-2021-37417 | Zoho ManageEngine ADSelfService Plus version 6103 and prior allows CAPTCHA bypass due to improper parameter validation. | In your normal cycle | 9.8 critical | 4.8% | 2021-08-30 |
| CVE-2016-8670 | Integer signedness error in the dynamicGetbuf function in gd_io_dp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP before 5.6.2… | In your normal cycle | 9.8 critical | 4.7% | 2017-01-04 |
| CVE-2016-2396 | The GMS ViewPoint (GMSVP) web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote authent… | In your normal cycle | 9.9 critical | 4.7% | 2016-02-17 |
| CVE-2014-6310 | Buffer overflow in CHICKEN 4.9.0 and 4.9.0.1 may allow remote attackers to execute arbitrary code via the 'select' function. | In your normal cycle | 9.8 critical | 4.7% | 2019-11-22 |
| CVE-2020-15929 | In Ortus TestBox 2.4.0 through 4.1.0, unvalidated query string parameters passed to system/runners/HTMLRunner.cfm allow an attacker to write an arbitr… | In your normal cycle | 9.8 critical | 4.7% | 2020-11-24 |
| CVE-2020-12823 | OpenConnect 8.09 has a buffer overflow, causing a denial of service (application crash) or possibly unspecified other impact, via crafted certificate… | In your normal cycle | 9.8 critical | 4.7% | 2020-05-12 |
| CVE-2025-50201 | WeGIA is a web manager for charitable institutions. Prior to version 3.4.2, an OS Command Injection vulnerability was identified in the /html/configur… | In your normal cycle | 9.8 critical | 4.7% | 2025-06-19 |
| CVE-2017-14002 | GE Infinia/Infinia with Hawkeye 4 medical imaging systems all current versions are affected these devices use default or hard-coded credentials. Succe… | In your normal cycle | 9.8 critical | 4.7% | 2018-03-20 |
| CVE-2018-14442 | Foxit Reader before 9.2 and PhantomPDF before 9.2 have a Use-After-Free that leads to Remote Code Execution, aka V-88f4smlocs. | In your normal cycle | 9.8 critical | 4.7% | 2018-07-20 |
| CVE-2021-40373 | playSMS before 1.4.5 allows Arbitrary Code Execution by entering PHP code at the #tabs-information-page of core_main_config, and then executing that c… | In your normal cycle | 9.8 critical | 4.7% | 2021-09-10 |
| CVE-2016-4368 | HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 allow remot… | In your normal cycle | 9.8 critical | 4.7% | 2016-06-08 |
| CVE-2017-12939 | A Remote Code Execution vulnerability was identified in all Windows versions of Unity Editor, e.g., before 5.3.8p2, 5.4.x before 5.4.5p5, 5.5.x before… | In your normal cycle | 9.8 critical | 4.7% | 2017-08-18 |
| CVE-2019-9169 | In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-i… | In your normal cycle | 9.8 critical | 4.7% | 2019-02-26 |
| CVE-2026-15511 | A vulnerability was determined in Comfast CF-WR631AX V3 up to 2.7.0.8. Affected by this vulnerability is the function system_wl_upload_pic_file of the… | In your normal cycle | 9.8 critical | 4.7% | 2026-07-12 |
| CVE-2026-18686 | A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function nas-web.add_user of the file /cgi-bin/glc of the c… | In your normal cycle | 9.8 critical | 4.7% | 2026-08-04 |
| CVE-2026-6516 | Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API. | In your normal cycle | 10.0 critical | 4.7% | 2026-07-23 |
| CVE-2017-1000004 | ATutor version 2.2.1 and earlier are vulnerable to a SQL injection in the Assignment Dropbox, BasicLTI, Blog Post, Blog, Group Course Email, Course Al… | In your normal cycle | 9.8 critical | 4.7% | 2017-07-17 |
| CVE-2021-42668 | A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter in the my_classmates.php web page.. As a re… | In your normal cycle | 9.8 critical | 4.7% | 2021-11-05 |
| CVE-2018-4841 | A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1). A remote attacker with network access to port 80/tcp or port 443/tcp could… | In your normal cycle | 9.8 critical | 4.7% | 2018-03-29 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt