CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
407,543 CVEs
1,741 on KEV
17,302 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-14
152,376 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2010-0976 EXP | Acidcat CMS 3.5.x does not prevent access to install.asp after installation finishes, which might allow remote attackers to restart the installation p… | Patch early | 7.5 high | 2.3% | 2010-03-16 |
| CVE-2008-5966 EXP | globsy_edit.php in Globsy 1.0 and earlier allows remote attackers to create or overwrite arbitrary files via a filename in the file parameter and file… | Patch early | 7.5 high | 2.3% | 2009-01-26 |
| CVE-2008-6882 EXP | Live Chat (com_livechat) component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTTP proxy to hide network scannin… | Patch early | 7.5 high | 2.3% | 2009-07-30 |
| CVE-2008-7027 EXP | Libra File Manager 1.18 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user and pass cookies to 1. | Patch early | 7.5 high | 2.3% | 2009-08-21 |
| CVE-2008-7172 EXP | Lightweight news portal (LNP) 1.0b does not properly restrict access to administrator functionality, which allows remote attackers to gain administrat… | Patch early | 7.5 high | 2.3% | 2009-09-08 |
| CVE-2008-7179 EXP | OTManager CMS 2.4 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMIN_Hora, ADMIN_Logado, and ADMI… | Patch early | 7.5 high | 2.3% | 2009-09-08 |
| CVE-2008-7181 EXP | Butterfly Organizer 2.0.0 allows remote attackers to (1) delete arbitrary categories via a modified tablehere parameter to category-delete.php with th… | Patch early | 7.5 high | 2.3% | 2009-09-08 |
| CVE-2008-6407 EXP | Directory traversal vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to include and execute arbitrary local files via… | Patch early | 7.5 high | 2.3% | 2009-03-06 |
| CVE-2008-6410 EXP | Directory traversal vulnerability in show.php in ol'bookmarks manager 0.7.5 and earlier allows remote attackers to include and execute arbitrary local… | Patch early | 7.5 high | 2.3% | 2009-03-06 |
| CVE-2008-2695 EXP | Directory traversal vulnerability in entry.php in phpInv 0.8.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot)… | Patch early | 7.5 high | 2.3% | 2008-06-13 |
| CVE-2008-2699 EXP | Multiple directory traversal vulnerabilities in Galatolo WebManager (GWM) 1.0 allow remote attackers to include and execute arbitrary local files via… | Patch early | 7.5 high | 2.3% | 2008-06-13 |
| CVE-2008-2818 EXP | Directory traversal vulnerability in Easy-Clanpage 3.0 b1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in t… | Patch early | 7.5 high | 2.3% | 2008-06-23 |
| CVE-2008-2896 EXP | Directory traversal vulnerability in index.php in FireAnt 1.3 allows remote attackers to include and execute arbitrary local files via a .. (dot dot)… | Patch early | 7.5 high | 2.3% | 2008-06-27 |
| CVE-2008-4330 EXP | Directory traversal vulnerability in index.php in LanSuite 3.3.2 allows remote attackers to include and execute arbitrary local files via a .. (dot do… | Patch early | 7.5 high | 2.3% | 2008-09-30 |
| CVE-2008-4331 EXP | Directory traversal vulnerability in library/pagefunctions.inc.php in phpOCS 0.1 beta3 and earlier allows remote attackers to include and execute arbi… | Patch early | 7.5 high | 2.3% | 2008-09-30 |
| CVE-2008-4351 EXP | Directory traversal vulnerability in index.php in phpSmartCom 0.2 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in… | Patch early | 7.5 high | 2.3% | 2008-09-30 |
| CVE-2008-6167 EXP | Directory traversal vulnerability in search.php in miniPortail 2.2 and earlier allows remote attackers to include and execute arbitrary local files vi… | Patch early | 7.5 high | 2.3% | 2009-02-19 |
| CVE-2010-1537 EXP | Multiple directory traversal vulnerabilities in phpCDB 1.0 and earlier allow remote attackers to include and execute arbitrary local files via a .. (d… | Patch early | 7.5 high | 2.3% | 2010-04-26 |
| CVE-2008-0545 EXP | Multiple directory traversal vulnerabilities in Bubbling Library 1.32 allow remote attackers to include and execute arbitrary local files via a .. (do… | Patch early | 7.5 high | 2.3% | 2008-02-01 |
| CVE-2008-0742 EXP | Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include arbitrary files via a .. (dot… | Patch early | 7.5 high | 2.3% | 2008-02-13 |
| CVE-2008-1645 EXP | Directory traversal vulnerability in body.php in phpSpamManager (phpSM) 0.53 beta allows remote attackers to read arbitrary local files via a .. (dot… | Patch early | 7.5 high | 2.3% | 2008-04-02 |
| CVE-2008-1798 EXP | Directory traversal vulnerability in forum/kietu/libs/calendrier.php in Dragoon 0.1 allows remote attackers to include and execute arbitrary local fil… | Patch early | 7.5 high | 2.3% | 2008-04-15 |
| CVE-2008-2091 EXP | Directory traversal vulnerability in ipn.php in KubeLabs Kubelance 1.6.4 allows remote attackers to include and execute arbitrary local files via the… | Patch early | 7.5 high | 2.3% | 2008-05-06 |
| CVE-2007-1438 EXP | SQL injection vulnerability in devami.asp in X-Ice News System 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. | Patch early | 7.5 high | 2.3% | 2007-03-13 |
| CVE-2008-3250 EXP | SQL injection vulnerability in index.php in Arctic Issue Tracker 2.0.0 allows remote attackers to execute arbitrary SQL commands via the filter parame… | Patch early | 7.5 high | 2.3% | 2008-07-21 |
| CVE-2008-5776 EXP | Multiple directory traversal vulnerabilities in Aperto Blog 0.1.1 allow remote attackers to include and execute arbitrary local files via directory tr… | Patch early | 7.5 high | 2.3% | 2008-12-30 |
| CVE-2025-60751 EXP | GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode. | Patch early | 7.5 high | 2.3% | 2025-10-21 |
| CVE-2005-1308 EXP | SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter followed by the desired script o… | Patch early | 7.5 high | 2.3% | 2005-04-15 |
| CVE-1999-0768 EXP | Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable. | Patch early | 7.5 high | 2.3% | 1999-08-25 |
| CVE-2008-2074 EXP | Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when register_globals is enabled, allow remote attackers t… | Patch early | 7.5 high | 2.3% | 2008-05-05 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt