CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
403,041 CVEs
1,734 on KEV
17,293 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-08
187,284 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2006-3698 EXP | Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB01 for Change Data Cap… | Patch early | 10.0 high | 7% | 2006-07-21 |
| CVE-2013-4776 EXP | NETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier, GS748Tv4 5.4.1.14, and GS510TP 5.0.4.4 allows remote attackers to cause a de… | Patch early | 7.8 high | 7% | 2013-12-19 |
| CVE-2011-1974 EXP | NDISTAPI.sys in the NDISTAPI driver in Remote Access Service (RAS) in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly v… | Patch early | 7.2 high | 7% | 2011-08-10 |
| CVE-2013-7420 EXP | Buffer overflow in Hancom Office 2010 SE allows remote attackers to execute arbitrary via a long string in the Text attribute in a TEXTART XML element… | Patch early | 7.5 high | 7% | 2015-01-12 |
| CVE-2016-4997 EXP | The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow loc… | Patch early | 7.8 high | 7% | 2016-07-03 |
| CVE-2002-0923 EXP | CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the (1) pheader or (2) pfooter p… | Patch early | 7.5 high | 7% | 2002-10-04 |
| CVE-2013-1668 EXP | The uploadFile function in upload/index.php in CosCMS before 1.822 allows remote administrators to execute arbitrary commands via shell metacharacters… | Patch early | 8.5 high | 7% | 2014-05-23 |
| CVE-2023-37759 EXP | Incorrect access control in the User Registration page of Crypto Currency Tracker (CCT) before v9.5 allows unauthenticated attackers to register as an… | Patch early | 9.8 critical | 7% | 2023-09-08 |
| CVE-2007-2526 EXP | Heap-based buffer overflow in the ConnectAsyncEx function in VNC Viewer ActiveX control (scvncctrl.dll) in the SmartCode VNC Manager 3.6 allows remote… | Patch early | 9.3 high | 7% | 2007-05-08 |
| CVE-2007-2648 EXP | Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control (comparerax.ocx) allows remote attackers to execute arbitrary code via… | Patch early | 9.3 high | 7% | 2007-05-14 |
| CVE-2015-6763 EXP | Multiple unspecified vulnerabilities in Google Chrome before 46.0.2490.71 allow attackers to cause a denial of service or possibly have other impact v… | Patch early | 7.5 high | 7% | 2015-10-15 |
| CVE-2013-4859 EXP | INSTEON Hub 2242-222 lacks Web and API authentication | Patch early | 8.1 high | 7% | 2019-12-27 |
| CVE-2001-1104 EXP | SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions. | Patch early | 7.5 high | 7% | 2001-07-25 |
| CVE-2007-4067 EXP | Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Internet ActiveX Suite 6.2 allows r… | Patch early | 9.3 high | 7% | 2007-07-30 |
| CVE-2017-3316 EXP | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: GUI). Supported versions that are affected are VirtualBox… | Patch early | 8.4 high | 7% | 2017-01-27 |
| CVE-2019-10652 EXP | An issue was discovered in flatCore 1.4.7. acp/acp.php allows remote authenticated administrators to upload arbitrary .php files, related to the addon… | Patch early | 7.2 high | 7% | 2019-03-30 |
| CVE-2018-10255 EXP | A CSV Injection vulnerability was discovered in clustercoding Blog Master Pro v1.0 that allows a user with low level privileges to inject a command th… | Patch early | 8.8 high | 7% | 2018-05-01 |
| CVE-2006-4885 EXP | PHP remote file inclusion vulnerability in Shadowed Portal 5.599 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ro… | Patch early | 7.5 high | 7% | 2006-09-19 |
| CVE-2006-4904 EXP | Dynamic variable evaluation vulnerability in cmpi.php in Qualiteam X-Cart 4.1.3 and earlier allows remote attackers to overwrite arbitrary program var… | Patch early | 7.5 high | 7% | 2006-09-21 |
| CVE-2006-4921 EXP | PHP remote file inclusion vulnerability in Site@School (S@S) 2.4.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the… | Patch early | 7.5 high | 7% | 2006-09-21 |
| CVE-2010-4332 EXP | Pointter PHP Content Management System 1.0 allows remote attackers to bypass authentication and obtain administrative privileges via arbitrary values… | Patch early | 7.5 high | 7% | 2010-12-22 |
| CVE-2003-0765 EXP | The IN_MIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Track… | Patch early | 7.5 high | 7% | 2003-09-17 |
| CVE-2001-0838 EXP | Format string vulnerability in Network Solutions Rwhoisd 1.5.x allows remote attackers to execute arbitrary code via format string specifiers in the -… | Patch early | 7.5 high | 7% | 2001-12-06 |
| CVE-2017-17097 EXP | gps-server.net GPS Tracking Software (self hosted) 2.x has a password reset procedure that immediately resets passwords upon an unauthenticated reques… | Patch early | 9.8 critical | 6.9% | 2018-01-02 |
| CVE-2007-1041 EXP | Multiple stack-based buffer overflows in S&H Computer Systems News Rover 12.1 Rev 1 allow remote attackers to execute arbitrary code via a .nzb file w… | Patch early | 9.3 high | 6.9% | 2007-02-21 |
| CVE-2023-2636 EXP | The AN_GradeBook WordPress plugin through 5.0.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL… | Patch early | 8.8 high | 6.9% | 2023-07-17 |
| CVE-2001-1044 EXP | Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which cou… | Patch early | 7.5 high | 6.9% | 2001-01-11 |
| CVE-2002-1427 EXP | The print_html_to_file function in edit.cgi for Easy Homepage Creator 1.0 does not check user credentials, which allows remote attackers to modify hom… | Patch early | 7.5 high | 6.9% | 2003-04-11 |
| CVE-2004-1724 EXP | The ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the fusion_admin/db_backups directory to world read/write/execut… | Patch early | 7.5 high | 6.9% | 2004-08-18 |
| CVE-2005-1366 EXP | Pico Server (pServ) 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via "dirname/../cgi-bin" in a URL. | Patch early | 7.5 high | 6.9% | 2005-05-16 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt