CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
424,700 CVEs
1,779 on KEV
17,541 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-12
196,901 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2025-61884 KEV | Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions that are affected are 12.2.3-… | Patch first | 7.5 high | 95.9% | 2025-10-12 |
| CVE-2021-26857 KEV | Microsoft Exchange Server Remote Code Execution Vulnerability | Patch first | 7.8 high | 95.8% | 2021-03-03 |
| CVE-2025-12480 KEV | Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after set… | Patch first | 9.1 critical | 95.7% | 2025-11-10 |
| CVE-2022-23131 KEV | In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user… | Patch first | 9.1 critical | 95.7% | 2022-01-13 |
| CVE-2026-0257 KEV | Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass sec… | Patch first | 9.1 critical | 95.6% | 2026-05-13 |
| CVE-2020-5410 KEV | Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrar… | Patch first | 7.5 high | 95.6% | 2020-06-02 |
| CVE-2025-54236 KEV | Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vul… | Patch first | 9.1 critical | 95.5% | 2025-09-09 |
| CVE-2022-41352 KEV | An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole (extra… | Patch first | 9.8 critical | 95.5% | 2022-09-26 |
| CVE-2024-1708 KEV | ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker the ability to execute remote c… | Patch first | 8.4 high | 95.4% | 2024-02-21 |
| CVE-2022-36537 KEV | ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the com… | Patch first | 7.5 high | 95.4% | 2022-08-26 |
| CVE-2024-1212 KEV | Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution. | Patch first | 10.0 critical | 95.4% | 2024-02-21 |
| CVE-2019-11580 KEV | Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Attackers who can send unauthentica… | Patch first | 9.8 critical | 95.4% | 2019-06-03 |
| CVE-2019-7609 KEV | Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion a… | Patch first | 10.0 critical | 95.3% | 2019-03-25 |
| CVE-2024-53704 KEV | An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication. | Patch first | 9.8 critical | 95.3% | 2025-01-09 |
| CVE-2018-0798 KEV | Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulne… | Patch first | 8.8 high | 95.1% | 2018-01-10 |
| CVE-2017-12637 KEV | Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver Application Server Java 7.5 allows remote at… | Patch first | 7.5 high | 95.1% | 2017-08-07 |
| CVE-2019-10068 KEV | An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10.0.52, and 9.x versions. Due to a failure to validate… | Patch first | 9.8 critical | 95.1% | 2019-03-26 |
| CVE-2023-36845 KEV | A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, ne… | Patch first | 9.8 critical | 95.1% | 2023-08-17 |
| CVE-2026-63077 KEV | In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol | Patch first | 9.8 critical | 94.9% | 2026-07-27 |
| CVE-2024-47575 KEV | A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager… | Patch first | 9.8 critical | 94.8% | 2024-10-23 |
| CVE-2025-30406 KEV | Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcode… | Patch first | 9.0 critical | 94.7% | 2025-04-03 |
| CVE-2020-6287 KEV | SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker… | Patch first | 10.0 critical | 94.7% | 2020-07-14 |
| CVE-2024-21413 KEV | Microsoft Outlook Remote Code Execution Vulnerability | Patch first | 9.8 critical | 94.7% | 2024-02-13 |
| CVE-2020-2883 KEV | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0… | Patch first | 9.8 critical | 94.6% | 2020-04-15 |
| CVE-2020-14644 KEV | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0… | Patch first | 9.8 critical | 94.5% | 2020-07-15 |
| CVE-2017-18368 KEV | The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability in the Remot… | Patch first | 9.8 critical | 94.5% | 2019-05-02 |
| CVE-2024-48248 KEV | NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to rem… | Patch first | 8.6 high | 94.4% | 2025-03-04 |
| CVE-2024-55591 KEV | An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy vers… | Patch first | 9.8 critical | 94.4% | 2025-01-14 |
| CVE-2025-8088 KEV | A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive fi… | Patch first | 8.8 high | 94.3% | 2025-08-08 |
| CVE-2026-35616 KEV | A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized c… | Patch first | 9.8 critical | 94% | 2026-04-04 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt