CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,587 CVEs
1,728 on KEV
17,267 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-28
169,028 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2002-1712 EXP | Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of empty TCP/IP packets with the A… | Patch early | 5.0 medium | 25.8% | 2002-12-31 |
| CVE-2004-0479 EXP | Internet Explorer 6 allows remote attackers to cause a denial of service (crash) via Javascript that creates a new popup window and disables the image… | Patch early | 5.0 medium | 25.8% | 2004-07-07 |
| CVE-2005-3745 EXP | Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 25.7% | 2005-11-22 |
| CVE-2005-4703 EXP | Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS… | Patch early | 5.0 medium | 25.7% | 2005-12-31 |
| CVE-2000-0759 EXP | Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error… | Patch early | 6.4 medium | 25.7% | 2000-10-20 |
| CVE-2004-1560 EXP | Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long request to TCP port 1433, possibly… | Patch early | 5.0 medium | 25.6% | 2004-12-31 |
| CVE-2005-2307 EXP | netman.dll in Microsoft Windows Connections Manager Library allows local users to cause a denial of service (Network Connections Service crash) via a… | Patch early | 5.0 medium | 25.6% | 2005-07-19 |
| CVE-2015-6086 EXP | Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Inte… | Patch early | 4.3 medium | 25.6% | 2015-11-11 |
| CVE-2005-0420 EXP | Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the o… | Patch early | 5.8 medium | 25.6% | 2005-04-27 |
| CVE-2006-1626 EXP | Internet Explorer 6 for Windows XP SP2 and earlier allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-openin… | Patch early | 4.3 medium | 25.5% | 2006-04-05 |
| CVE-2008-2948 EXP | Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location property of a frame via the Object da… | Patch early | 6.8 medium | 25.4% | 2008-06-30 |
| CVE-2008-0095 EXP | The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer… | Patch early | 5.0 medium | 25.4% | 2008-01-08 |
| CVE-2015-2746 EXP | The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON 7.8.3 and V-Series appliances… | Patch early | 6.5 medium | 25.4% | 2015-03-26 |
| CVE-2006-7210 EXP | Microsoft Windows 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (cpu consumption) via a PNG image with crafted (1) Wi… | Patch early | 5.0 medium | 25.1% | 2007-06-27 |
| CVE-2017-11906 EXP | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows… | Patch early | 5.3 medium | 25.1% | 2017-12-12 |
| CVE-2010-3324 EXP | The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2, SharePoint Fou… | Patch early | 4.3 medium | 25% | 2010-09-17 |
| CVE-2016-3216 EXP | GDI32.dll in the Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 201… | Patch early | 4.3 medium | 25% | 2016-06-16 |
| CVE-2007-1910 EXP | Buffer overflow in wwlib.dll in Microsoft Word 2007 allows remote attackers to cause a denial of service (application crash) and possibly execute arbi… | Patch early | 6.8 medium | 24.9% | 2007-04-10 |
| CVE-2004-0728 EXP | The Remote Control Client service in Microsoft's Systems Management Server (SMS) 2.50.2726.0 allows remote attackers to cause a denial of service (cra… | Patch early | 5.0 medium | 24.8% | 2004-07-27 |
| CVE-2013-2121 EXP | Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users with permi… | Patch early | 6.0 medium | 24.8% | 2013-07-31 |
| CVE-2006-3880 EXP | Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cause a denial of service (IP sta… | Patch early | 5.0 medium | 24.7% | 2006-07-27 |
| CVE-2018-4936 EXP | Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Heap Overflow vulnerability. Successful exploitation could lead to information… | Patch early | 6.5 medium | 24.7% | 2018-05-19 |
| CVE-1999-0448 EXP | IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request. | Patch early | 5.0 medium | 24.6% | 1999-01-01 |
| CVE-2006-0032 EXP | Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is set to Au… | Patch early | 4.3 medium | 24.6% | 2006-09-12 |
| CVE-2015-2790 EXP | Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a cra… | Patch early | 4.3 medium | 24.5% | 2015-03-30 |
| CVE-2008-5793 EXP | Multiple PHP remote file inclusion vulnerabilities in the Clickheat - Heatmap stats (com_clickheat) component 1.0.1 for Joomla! allow remote attackers… | Patch early | 6.8 medium | 24.5% | 2008-12-31 |
| CVE-2006-0015 EXP | Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services… | Patch early | 6.8 medium | 24.4% | 2006-04-11 |
| CVE-2018-6794 EXP | Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c. If a malicious server breaks a normal TCP flow… | Patch early | 5.3 medium | 24.3% | 2018-02-07 |
| CVE-2008-7182 EXP | Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote authenticated users to cause a d… | Patch early | 4.0 medium | 24.3% | 2009-09-08 |
| CVE-2006-3427 EXP | Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by declaring the sourceURL attribute on an uninitialized Di… | Patch early | 5.0 medium | 24.3% | 2006-07-07 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt