CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,406 CVEs
1,739 on KEV
17,299 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-12
37,055 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2022-27004 | Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command injection vulnerability in the… | In your normal cycle | 9.8 critical | 2.9% | 2022-03-15 |
| CVE-2021-3311 | An issue was discovered in October through build 471. It reactivates an old session ID (which had been invalid after a logout) once a new login occurs… | In your normal cycle | 9.8 critical | 2.9% | 2021-02-05 |
| CVE-2021-31522 | Kylin can receive user input and load any class through Class.forName(...). This issue affects Apache Kylin 2 version 2.6.6 and prior versions; Apache… | In your normal cycle | 9.8 critical | 2.9% | 2022-01-06 |
| CVE-2016-6567 | SHDesigns' Resident Download Manager provides firmware update capabilities for Rabbit 2000/3000 CPU boards, which according to the reporter may be use… | In your normal cycle | 9.8 critical | 2.9% | 2018-07-13 |
| CVE-2020-28601 | A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_2/P… | In your normal cycle | 9.8 critical | 2.9% | 2021-03-04 |
| CVE-2021-32829 | ZStack is open source IaaS(infrastructure as a service) software aiming to automate datacenters, managing resources of compute, storage, and networkin… | In your normal cycle | 9.6 critical | 2.9% | 2021-08-17 |
| CVE-2017-18067 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation while proces… | In your normal cycle | 9.8 critical | 2.9% | 2018-03-15 |
| CVE-2001-1481 | Xitami 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file, whose default permissions are world-readable, which… | In your normal cycle | 9.8 critical | 2.9% | 2001-12-31 |
| CVE-2026-61560 | `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Prior to version 2.1.27, the SSE transport mode (`SSE=true`) exposes all MCP too… | In your normal cycle | 9.8 critical | 2.9% | 2026-09-15 |
| CVE-2022-27479 | Apache Superset before 1.4.2 is vulnerable to SQL injection in chart data requests. Users should update to 1.4.2 or higher which addresses this issue. | In your normal cycle | 9.8 critical | 2.9% | 2022-04-13 |
| CVE-2020-7007 | In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the attacker may execute arbitrary codes or target the device, causing it to go out of servic… | In your normal cycle | 9.8 critical | 2.9% | 2020-03-24 |
| CVE-2026-53753 | Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.7, the _safe_eval_expression() function in the computed fields feature use… | In your normal cycle | 9.8 critical | 2.9% | 2026-06-23 |
| CVE-2019-11006 | In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadMIFFImage of coders/miff.c, which allows attack… | In your normal cycle | 9.1 critical | 2.9% | 2019-04-08 |
| CVE-2020-35427 | SQL injection vulnerability in PHPGurukul Employee Record Management System 1.1 allows remote attackers to execute arbitrary SQL commands and bypass a… | In your normal cycle | 9.8 critical | 2.9% | 2021-07-20 |
| CVE-2020-4001 | The SD-WAN Orchestrator 3.3.2, 3.4.x, and 4.0.x has default passwords allowing for a Pass-the-Hash Attack. SD-WAN Orchestrator ships with default pass… | In your normal cycle | 9.8 critical | 2.9% | 2020-11-24 |
| CVE-2017-18197 | In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert() is missing flags to prevent XML External Entity (XX… | In your normal cycle | 9.8 critical | 2.9% | 2018-02-24 |
| CVE-2021-30502 | The unofficial vscode-ghc-simple (aka Simple Glasgow Haskell Compiler) extension before 0.2.3 for Visual Studio Code allows remote code execution via… | In your normal cycle | 9.8 critical | 2.9% | 2021-04-25 |
| CVE-2017-5402 | A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been destroyed while working with fonts. Th… | In your normal cycle | 9.8 critical | 2.9% | 2018-06-11 |
| CVE-2023-28614 | Freewill iFIS (aka SMART Trade) 20.01.01.04 allows OS Command Injection via shell metacharacters to a report page. | In your normal cycle | 9.8 critical | 2.9% | 2023-09-15 |
| CVE-2022-34913 | md2roff 1.7 has a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to be processed. NOTE: the vendo… | In your normal cycle | 9.8 critical | 2.9% | 2022-07-02 |
| CVE-2018-5487 | NetApp OnCommand Unified Manager for Linux versions 7.2 through 7.3 ship with the Java Management Extension Remote Method Invocation (JMX RMI) service… | In your normal cycle | 9.8 critical | 2.9% | 2018-05-24 |
| CVE-2018-5492 | NetApp E-Series SANtricity OS Controller Software 11.30 and later version 11.30.5 is susceptible to unauthenticated remote code execution. | In your normal cycle | 9.8 critical | 2.9% | 2018-10-04 |
| CVE-2019-3476 | Remote arbitrary code execution in Micro Focus Data Protector, version 10.03 this vulnerability could allow remote arbitrary code execution. | In your normal cycle | 9.8 critical | 2.9% | 2019-03-25 |
| CVE-2019-13578 | A SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for WordPress. Successful exploitation of this vulnerability woul… | In your normal cycle | 9.8 critical | 2.9% | 2019-08-15 |
| CVE-2020-27227 | An exploitable unatuhenticated command injection exists in the OpenClinic GA 5.173.3. Specially crafted web requests can cause commands to be executed… | In your normal cycle | 9.8 critical | 2.9% | 2021-04-13 |
| CVE-2021-40394 | An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) an… | In your normal cycle | 9.8 critical | 2.9% | 2021-12-22 |
| CVE-2021-36024 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an Improper Neutralization of Special El… | In your normal cycle | 9.1 critical | 2.9% | 2021-09-01 |
| CVE-2021-36028 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability when savi… | In your normal cycle | 9.1 critical | 2.9% | 2021-09-01 |
| CVE-2025-42944 | Due to a deserialization vulnerability in SAP NetWeaver, an unauthenticated attacker could exploit the system through the RMI-P4 module by submitting… | In your normal cycle | 10.0 critical | 2.9% | 2025-09-09 |
| CVE-2021-40643 | EyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail options configuration page. In the location of the "sendmail" ap… | In your normal cycle | 9.8 critical | 2.9% | 2022-06-30 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt