CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,373 CVEs
1,739 on KEV
17,299 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-11
322,115 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2009-0250 EXP | Ryneezy phoSheezy 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the… | Patch early | 5.0 medium | 6.3% | 2009-01-22 |
| CVE-2020-25453 EXP | An issue was discovered in BlackCat CMS before 1.4. There is a CSRF vulnerability (bypass csrf_token) that allows remote arbitrary code execution. | Patch early | 8.8 high | 6.3% | 2020-09-15 |
| CVE-2012-4865 EXP | Buffer overflow in Oreans Themida 2.1.8.0 allows remote attackers to execute arbitrary code via a crafted .TMD file. | Patch early | 9.3 high | 6.3% | 2012-09-06 |
| CVE-2012-5324 EXP | Multiple buffer overflows in the Pdf Printer Preferences ActiveX Control in pdfxctrl.dll in Tracker Software PDF-XChange 3.60.0128 allow remote attack… | Patch early | 9.3 high | 6.3% | 2012-10-08 |
| CVE-2006-4898 EXP | PHP remote file inclusion vulnerability in include/phpxd/phpXD.php in guanxiCRM 0.9.1 and earlier allows remote attackers to execute arbitrary PHP cod… | Patch early | 7.5 high | 6.3% | 2006-09-19 |
| CVE-2006-4912 EXP | PHP remote file inclusion vulnerability in PHP DocWriter 0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the script… | Patch early | 7.5 high | 6.3% | 2006-09-21 |
| CVE-2006-5292 EXP | PHP remote file inclusion vulnerability in photo_comment.php in Exhibit Engine 1.5 RC 4 and earlier allows remote attackers to execute arbitrary PHP c… | Patch early | 7.5 high | 6.3% | 2006-10-16 |
| CVE-2008-5885 EXP | The Net Guys ASPired2Quote stores sensitive information under the web root with insufficient access control, which allows remote attackers to download… | Patch early | 5.0 medium | 6.3% | 2009-01-12 |
| CVE-2009-0645 EXP | Directory traversal vulnerability in index.php in Jaws 0.8.8 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the (1) l… | Patch early | 6.5 medium | 6.3% | 2009-02-18 |
| CVE-2009-0858 EXP | The response_addname function in response.c in Daniel J. Bernstein djbdns 1.05 and earlier does not constrain offsets in the required manner, which al… | Patch early | 5.8 medium | 6.3% | 2009-03-09 |
| CVE-2005-3550 EXP | Directory traversal vulnerability in admin.php in toendaCMS before 0.6.2 allows remote attackers to access arbitrary files via a .. (dot dot) in the i… | Patch early | 5.0 medium | 6.3% | 2005-11-16 |
| CVE-2006-0125 EXP | Unspecified vulnerability in appserv/main.php in AppServ 2.4.5 allows remote attackers to include arbitrary files via the appserv_root parameter. NOT… | Patch early | 5.0 medium | 6.3% | 2006-01-09 |
| CVE-2008-3150 EXP | Directory traversal vulnerability in index.php in Neutrino Atomic Edition 0.8.4 allows remote attackers to read and modify files, as demonstrated by m… | Patch early | 10.0 high | 6.3% | 2008-07-11 |
| CVE-2008-6537 EXP | LightNEasy/lightneasy.php in LightNEasy No database version 1.2 allows remote attackers to obtain the hash of the administrator password via the setup… | Patch early | 5.0 medium | 6.3% | 2009-03-30 |
| CVE-2016-1531 EXP | Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument. | Patch early | 7.0 high | 6.3% | 2016-04-07 |
| CVE-2008-5663 EXP | Multiple unrestricted file upload vulnerabilities in Kusaba 1.0.4 and earlier allow remote authenticated users to execute arbitrary code by uploading… | Patch early | 9.0 high | 6.3% | 2008-12-19 |
| CVE-2007-5620 EXP | Directory traversal vulnerability in admin/inc/help.php in ZZ:FlashChat 3.1 and earlier allows remote attackers to include and execute arbitrary local… | Patch early | 7.5 high | 6.3% | 2007-10-22 |
| CVE-2012-2994 EXP | The CoSoSys Endpoint Protector 4 appliance establishes an EPProot password based entirely on the appliance serial number, which makes it easier for re… | Patch early | 7.5 high | 6.3% | 2012-09-18 |
| CVE-2017-2457 EXP | An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" compon… | Patch early | 8.8 high | 6.3% | 2017-04-02 |
| CVE-2017-2469 EXP | An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issu… | Patch early | 8.8 high | 6.3% | 2017-04-02 |
| CVE-2017-2470 EXP | An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issu… | Patch early | 8.8 high | 6.3% | 2017-04-02 |
| CVE-2011-0745 EXP | SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which allows remo… | Patch early | 4.0 medium | 6.3% | 2011-03-16 |
| CVE-2008-7245 EXP | Opera 9.52 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a "… | Patch early | 5.0 medium | 6.3% | 2009-09-18 |
| CVE-2010-0496 EXP | FreeBit ServersMan 3.1.5 on Apple iPhone OS 3.1.2, and iPhone OS for iPod touch, allows remote attackers to cause a denial of service (daemon crash) v… | Patch early | 5.0 medium | 6.3% | 2010-02-03 |
| CVE-2015-1480 EXP | ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to obtain sensitive ticket information via a (1) getT… | Patch early | 4.0 medium | 6.3% | 2015-02-04 |
| CVE-2014-5115 EXP | Absolute path traversal vulnerability in DirPHP 1.0 allows remote attackers to read arbitrary files via a full pathname in the phpfile parameter to in… | Patch early | 5.0 medium | 6.3% | 2014-07-29 |
| CVE-2007-6230 EXP | Directory traversal vulnerability in common/classes/class_HeaderHandler.lib.php in Rayzz Script 2.0 allows remote attackers to include and execute arb… | Patch early | 7.5 high | 6.3% | 2007-12-04 |
| CVE-2009-2334 EXP | wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access the configuration of a plugin,… | Patch early | 4.9 medium | 6.3% | 2009-07-10 |
| CVE-2016-3220 EXP | atmfd.dll in the Adobe Type Manager Font Driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Window… | Patch early | 7.8 high | 6.3% | 2016-06-16 |
| CVE-2004-1267 EXP | Buffer overflow in the ParseCommand function in hpgl-input.c in the hpgltops program for CUPS 1.1.22 allows remote attackers to execute arbitrary code… | Patch early | 6.5 medium | 6.3% | 2005-01-10 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt