CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,373 CVEs
1,739 on KEV
17,299 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-11
37,054 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2021-3028 | git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution. | In your normal cycle | 9.8 critical | 2.9% | 2021-01-13 |
| CVE-2021-37353 | Nagios XI Docker Wizard before version 1.1.3 is vulnerable to SSRF due to improper sanitation in table_population.php. | In your normal cycle | 9.8 critical | 2.9% | 2021-08-13 |
| CVE-2013-1437 | Eval injection vulnerability in the Module-Metadata module before 1.000015 for Perl allows remote attackers to execute arbitrary Perl code via the $Ve… | In your normal cycle | 9.8 critical | 2.9% | 2020-01-28 |
| CVE-2016-10188 | Use-after-free vulnerability in bitlbee-libpurple before 3.5 allows remote servers to cause a denial of service (crash) or possibly execute arbitrary… | In your normal cycle | 9.8 critical | 2.9% | 2017-03-14 |
| CVE-2022-28347 | A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. This occurs by passin… | In your normal cycle | 9.8 critical | 2.9% | 2022-04-12 |
| CVE-2022-0992 | The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative user… | In your normal cycle | 9.8 critical | 2.9% | 2022-04-19 |
| CVE-2019-12017 | A remote code execution vulnerability exists in MapR CLDB code, specifically in the JSON framework that is used in the CLDB code that handles login an… | In your normal cycle | 9.8 critical | 2.9% | 2019-10-24 |
| CVE-2019-12144 | An issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1. Attackers have the ability to abuse a path traversal… | In your normal cycle | 9.8 critical | 2.9% | 2019-06-11 |
| CVE-2020-2501 | A stack-based buffer overflow vulnerability has been reported to affect QNAP NAS devices running Surveillance Station. If exploited, this vulnerabilit… | In your normal cycle | 9.8 critical | 2.9% | 2021-02-17 |
| CVE-2026-94097 | A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. This affects an unknown part of the file /www/cgi-bin/network_tools of the compo… | In your normal cycle | 10.0 critical | 2.9% | 2026-09-21 |
| CVE-2015-2909 | Dedicated Micros DV-IP Express, SD Advanced, SD, EcoSense, and DS2 devices rely on a GUI warning to help ensure that the administrator configures logi… | In your normal cycle | 9.8 critical | 2.9% | 2020-02-06 |
| CVE-2026-19188 | A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vulnerability exists in the Net… | In your normal cycle | 10.0 critical | 2.9% | 2026-08-14 |
| CVE-2026-37751 | An OS command injection vulnerability in the killSessionSync function (lib/agent-runtime.ts) of 23blocks-OS ai-maestro v0.24.17 allows attackers to ex… | In your normal cycle | 9.8 critical | 2.9% | 2026-08-28 |
| CVE-2026-52102 | An OS command injection vulnerability in the openmediavault-md plugin of OpenMediaVault v8.0.4-1 allows attackers to execute arbitrary commands as roo… | In your normal cycle | 9.8 critical | 2.9% | 2026-08-03 |
| CVE-2026-58457 | Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) contains an unauthenticated OS command injection vulnerability that allows network-adjacent… | In your normal cycle | 9.8 critical | 2.9% | 2026-07-01 |
| CVE-2020-25782 | An issue was discovered on Accfly Wireless Security IR Camera 720P System with software versions v3.10.73 through v4.15.77. There is an unauthenticate… | In your normal cycle | 9.8 critical | 2.9% | 2021-01-28 |
| CVE-2017-7465 | It was found that the JAXP implementation used in JBoss EAP 7.0 for XSLT processing is vulnerable to code injection. An attacker could use this flaw t… | In your normal cycle | 9.0 critical | 2.9% | 2018-06-27 |
| CVE-2019-19977 | libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based… | In your normal cycle | 9.8 critical | 2.9% | 2019-12-26 |
| CVE-2023-0754 | The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely execute ar… | In your normal cycle | 9.8 critical | 2.9% | 2023-02-23 |
| CVE-2015-7326 | XML External Entity (XXE) vulnerability in Milton Webdav before 2.7.0.3. | In your normal cycle | 9.8 critical | 2.9% | 2017-06-07 |
| CVE-2020-4561 | IBM Cognos Analytics 11.0 and 11.1 DQM API allows submitting of all control requests in unauthenticated sessions. This allows a remote attacker who ca… | In your normal cycle | 10.0 critical | 2.9% | 2021-06-01 |
| CVE-2020-8637 | A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in dragdroptreenodes.php via the node_id parameter… | In your normal cycle | 9.8 critical | 2.9% | 2020-04-03 |
| CVE-2017-10966 | An issue was discovered in Irssi before 1.0.4. While updating the internal nick list, Irssi could incorrectly use the GHashTable interface and free th… | In your normal cycle | 9.8 critical | 2.9% | 2017-07-07 |
| CVE-2005-0496 | Arkeia Network Backup Client 5.x contains hard-coded credentials that effectively serve as a back door, which allows remote attackers to access the fi… | In your normal cycle | 9.8 critical | 2.9% | 2005-02-21 |
| CVE-2015-1401 | Improper Authentication vulnerability in the "LDAP / SSO Authentication" (ig_ldap_sso_auth) extension 2.0.0 for TYPO3. | In your normal cycle | 9.8 critical | 2.9% | 2017-08-28 |
| CVE-2017-5538 | The kbase_dispatch function in arm/t7xx/r5p0/mali_kbase_core_linux.c in the GPU driver on Samsung devices with M(6.0) and N(7.0) software and Exynos A… | In your normal cycle | 9.8 critical | 2.9% | 2017-03-23 |
| CVE-2018-1000076 | RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 an… | In your normal cycle | 9.8 critical | 2.9% | 2018-03-13 |
| CVE-2022-25135 | A command injection vulnerability in the function recv_mesh_info_sync of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows… | In your normal cycle | 9.8 critical | 2.9% | 2022-02-19 |
| CVE-2022-29520 | An OS command injection vulnerability exists in the console_main_loop :sys functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z. A s… | In your normal cycle | 9.8 critical | 2.9% | 2022-10-25 |
| CVE-2024-29864 | Distrobox before 1.7.0.1 allows attackers to execute arbitrary code via command injection into exported executables. | In your normal cycle | 9.8 critical | 2.9% | 2024-03-21 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt