CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
424,700 CVEs
1,779 on KEV
17,541 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-12
196,916 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2025-11953 KEV | The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoi… | Patch first | 9.8 critical | 94% | 2025-11-03 |
| CVE-2024-55956 KEV | In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can import and execute arbitrary Bash… | Patch first | 9.8 critical | 94% | 2024-12-13 |
| CVE-2022-27924 KEV | Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance. These… | Patch first | 7.5 high | 93.9% | 2022-04-21 |
| CVE-2026-1731 KEV | BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code executi… | Patch first | 9.8 critical | 93.9% | 2026-02-06 |
| CVE-2025-24016 KEV | Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1, an… | Patch first | 9.9 critical | 93.8% | 2025-02-10 |
| CVE-2024-9474 KEV | A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface t… | Patch first | 7.2 high | 93.8% | 2024-11-18 |
| CVE-2021-26858 KEV | Microsoft Exchange Server Remote Code Execution Vulnerability | Patch first | 7.8 high | 93.7% | 2021-03-03 |
| CVE-2020-7796 KEV | Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled. | Patch first | 9.8 critical | 93.6% | 2020-02-18 |
| CVE-2021-44077 KEV | Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthentica… | Patch first | 9.8 critical | 93.5% | 2021-11-29 |
| CVE-2025-54309 KEV | CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation and consequently allows remote at… | Patch first | 9.0 critical | 93.5% | 2025-07-18 |
| CVE-2025-4008 KEV | The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system throu… | Patch first | 8.8 high | 93.4% | 2025-05-21 |
| CVE-2024-28987 KEV | The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access intern… | Patch first | 9.1 critical | 93.3% | 2024-08-21 |
| CVE-2018-0802 KEV | Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulner… | Patch first | 7.8 high | 93.3% | 2018-01-10 |
| CVE-2022-33891 KEV | The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks w… | Patch first | 8.8 high | 93.2% | 2022-07-18 |
| CVE-2025-34291 KEV | Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permiss… | Patch first | 8.8 high | 93.2% | 2025-12-05 |
| CVE-2026-39808 KEV | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.… | Patch first | 9.8 critical | 93.2% | 2026-04-14 |
| CVE-2021-40870 KEV | An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which allows… | Patch first | 9.8 critical | 93% | 2021-09-13 |
| CVE-2023-20273 KEV | A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of… | Patch first | 7.2 high | 92.9% | 2023-10-25 |
| CVE-2024-6670 KEV | In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted pa… | Patch first | 9.8 critical | 92.9% | 2024-08-29 |
| CVE-2020-2551 KEV | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected… | Patch first | 9.8 critical | 92.8% | 2020-01-15 |
| CVE-2023-38950 KEV | A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via supplying a cra… | Patch first | 7.5 high | 92.5% | 2023-08-03 |
| CVE-2016-3427 KEV | Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confid… | Patch first | 9.8 critical | 92.3% | 2016-04-21 |
| CVE-2025-9242 KEV | An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code.… | Patch first | 9.8 critical | 92.2% | 2025-09-17 |
| CVE-2025-11371 KEV | In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows u… | Patch first | 7.5 high | 92.1% | 2025-10-09 |
| CVE-2022-37042 KEV | Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing auth… | Patch first | 9.8 critical | 92.1% | 2022-08-12 |
| CVE-2020-10148 KEV | The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability coul… | Patch first | 9.8 critical | 92% | 2020-12-29 |
| CVE-2024-7399 KEV | Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to wri… | Patch first | 8.8 high | 91.9% | 2024-08-12 |
| CVE-2024-11680 KEV | ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Remote, unauthenticated attackers can exploit this flaw… | Patch first | 9.8 critical | 91.8% | 2024-11-26 |
| CVE-2026-20182 KEV | May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was disclosed i… | Patch first | 10.0 critical | 91.8% | 2026-05-14 |
| CVE-2021-42321 KEV | Microsoft Exchange Server Remote Code Execution Vulnerability | Patch first | 8.8 high | 91.7% | 2021-11-10 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt