CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
402,674 CVEs
1,734 on KEV
17,294 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-07
320,764 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-1999-0412 EXP | In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension. | Patch early | 7.5 high | 10.2% | 1999-02-19 |
| CVE-2007-5301 EXP | Buffer overflow in the vorbis_stream_info function in input/vorbis/vorbis_engine.c (aka the vorbis input plugin) in AlsaPlayer before 0.99.80-rc3 allo… | Patch early | 6.8 medium | 10.2% | 2007-10-09 |
| CVE-2005-4718 EXP | Opera 8.02 and earlier allows remote attackers to cause a denial of service (client crash) via (1) a crafted HTML file with a "content: url(0);" style… | Patch early | 5.0 medium | 10.2% | 2005-12-31 |
| CVE-1999-0267 EXP | Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution. | Patch early | 7.5 high | 10.2% | 1997-09-23 |
| CVE-2011-4191 EXP | Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitrary code or… | Patch early | 7.5 high | 10.2% | 2011-11-30 |
| CVE-2002-1823 EXP | Buffer overflow in the HttpGetRequest function in Zeroo HTTP server 1.5 allows remote attackers to execute arbitrary code via a long HTTP request. | Patch early | 7.5 high | 10.2% | 2002-12-31 |
| CVE-2004-2299 EXP | Buffer overflow in Omnicron OmniHTTPd 3.0a and earlier allows remote attackers to execute arbitrary code via an HTTP GET request with a long Range hea… | Patch early | 7.5 high | 10.2% | 2004-12-31 |
| CVE-2013-6023 EXP | Directory traversal vulnerability in the TVT TD-2308SS-B DVR with firmware 3.2.0.P-3520A-00 and earlier allows remote attackers to read arbitrary file… | Patch early | 7.8 high | 10.2% | 2013-11-02 |
| CVE-2004-1770 EXP | The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shell metacharacters in the user p… | Patch early | 10.0 high | 10.2% | 2004-03-11 |
| CVE-2016-4309 EXP | Session fixation vulnerability in Symphony CMS 2.6.7, when session.use_only_cookies is disabled, allows remote attackers to hijack web sessions via th… | Patch early | 7.5 high | 10.2% | 2016-06-30 |
| CVE-2008-6994 EXP | Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-assisted remo… | Patch early | 9.3 high | 10.2% | 2009-08-19 |
| CVE-2005-0634 EXP | Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long USER command. | Patch early | 7.5 high | 10.2% | 2005-05-02 |
| CVE-2012-0221 EXP | The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 does not… | Patch early | 5.0 medium | 10.2% | 2012-04-02 |
| CVE-2012-2577 EXP | Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to inje… | Patch early | 4.3 medium | 10.2% | 2012-08-12 |
| CVE-2013-4579 EXP | The ath9k_htc_set_bssid_mask function in drivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through 3.12 uses a BSSID masking approach… | Patch early | 4.3 medium | 10.2% | 2013-11-20 |
| CVE-2002-2281 EXP | Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute arbitrary Java commands via an… | Patch early | 10.0 high | 10.2% | 2002-12-31 |
| CVE-2016-4557 EXP | The replace_map_fd_with_map_ptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does not properly maintain an fd data structure, wh… | Patch early | 7.8 high | 10.2% | 2016-05-23 |
| CVE-2009-0350 EXP | Stack-based buffer overflow in Merak Media Player 3.2 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file, rel… | Patch early | 9.3 high | 10.2% | 2009-01-29 |
| CVE-2017-7117 EXP | An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected.… | Patch early | 8.8 high | 10.2% | 2017-10-23 |
| CVE-2013-0332 EXP | Multiple directory traversal vulnerabilities in ZoneMinder 1.24.x before 1.24.4 allow remote attackers to read arbitrary files via a .. (dot dot) in t… | Patch early | 5.0 medium | 10.2% | 2013-03-20 |
| CVE-2007-1327 EXP | The SILC_SERVER_CMD_FUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote attackers to cause a denial of service (NULL dereference… | Patch early | 7.8 high | 10.2% | 2007-03-07 |
| CVE-2006-1931 EXP | The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a lar… | Patch early | 5.0 medium | 10.2% | 2006-04-20 |
| CVE-2013-3429 EXP | Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) before 7.0.0 allow remote attackers to read system files via a… | Patch early | 7.8 high | 10.2% | 2013-07-25 |
| CVE-2005-1280 EXP | The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of… | Patch early | 5.0 medium | 10.2% | 2005-05-02 |
| CVE-2009-4490 EXP | mini_httpd 1.19 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title,… | Patch early | 5.0 medium | 10.2% | 2010-01-13 |
| CVE-2008-4582 EXP | Mozilla Firefox 3.0.1 through 3.0.3, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13, when running on Windows, do not properly identify t… | Patch early | 4.3 medium | 10.2% | 2008-10-15 |
| CVE-2007-1866 EXP | Stack-based buffer overflow in the dns_decode_reverse_name function in dns_decode.c in dproxy-nexgen allows remote attackers to execute arbitrary code… | Patch early | 10.0 high | 10.2% | 2007-04-04 |
| CVE-2009-2934 EXP | Multiple stack-based buffer overflows in xaudio.dll in Programmed Integration PIPL 2.5.0 and 2.5.0D allow remote attackers to execute arbitrary code v… | Patch early | 9.3 high | 10.2% | 2009-08-21 |
| CVE-2007-0646 EXP | Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through 10.4.10, allows remote user-assisted attackers to cause a de… | Patch early | 7.1 high | 10.2% | 2007-02-01 |
| CVE-2009-0819 EXP | sql/item_xmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denial of service (crash) via "an XP… | Patch early | 4.0 medium | 10.2% | 2009-03-05 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt