CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,621 CVEs
1,739 on KEV
17,301 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-12
322,433 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2004-1793 EXP | Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code via a long m… | Patch early | 7.5 high | 5.8% | 2004-12-31 |
| CVE-2007-1501 EXP | Stack-based buffer overflow in Avant Browser 11.0 build 26 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary… | Patch early | 9.3 high | 5.8% | 2007-03-19 |
| CVE-2009-1660 EXP | Stack-based buffer overflow in URUWorks ViPlay3 3.0 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbi… | Patch early | 9.3 high | 5.8% | 2009-05-18 |
| CVE-2014-2341 EXP | Session fixation vulnerability in CubeCart before 5.2.9 allows remote attackers to hijack web sessions via the PHPSESSID parameter. | Patch early | 6.8 medium | 5.8% | 2014-04-22 |
| CVE-2010-2315 EXP | PHP remote file inclusion vulnerability in picturelib.php in SmartISoft phpBazar 2.1.1 allows remote attackers to execute arbitrary PHP code via a URL… | Patch early | 7.5 high | 5.8% | 2010-06-17 |
| CVE-2000-1174 EXP | Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a packet with a… | Patch early | 7.5 high | 5.8% | 2001-01-09 |
| CVE-2005-2639 EXP | Buffer overflow in Chris Moneymaker's World Poker Championship 1.0 allows remote attackers to cause a denial of service (application crash) and possib… | Patch early | 7.5 high | 5.8% | 2005-08-23 |
| CVE-2005-3485 EXP | Buffer overflow in Glider Collect'n kill 1.0.0.0 allows remote attackers to execute arbitrary code via a gl_playerEnter command with a long player nam… | Patch early | 7.5 high | 5.8% | 2005-11-03 |
| CVE-2018-10832 EXP | ModbusPal 1.6b is vulnerable to an XML External Entity (XXE) attack. Projects are saved as .xmpp files and automations can be exported as .xmpa files,… | Patch early | 5.5 medium | 5.8% | 2018-05-11 |
| CVE-2017-13783 EXP | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affe… | Patch early | 8.8 high | 5.8% | 2017-11-13 |
| CVE-2017-13791 EXP | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affe… | Patch early | 8.8 high | 5.8% | 2017-11-13 |
| CVE-2017-13796 EXP | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affe… | Patch early | 8.8 high | 5.8% | 2017-11-13 |
| CVE-2009-2108 EXP | git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request contain… | Patch early | 5.0 medium | 5.8% | 2009-06-18 |
| CVE-2019-10887 EXP | A reflected HTML injection vulnerability on Salicru SLC-20-cube3(5) devices running firmware version cs121-SNMP v4.54.82.130611 allows remote attacker… | Patch early | 6.1 medium | 5.8% | 2019-04-05 |
| CVE-2009-1643 EXP | Stack-based buffer overflow in Sorinara Soritong MP3 Player 1.0 allows remote attackers to execute arbitrary code via a crafted .m3u file. | Patch early | 9.3 high | 5.8% | 2009-05-15 |
| CVE-2009-1644 EXP | Stack-based buffer overflow in Sorinara Streaming Audio Player 0.9 allows remote attackers to execute arbitrary code via a crafted .pla file. | Patch early | 9.3 high | 5.8% | 2009-05-15 |
| CVE-2008-6447 EXP | Buffer overflow in emmailstore.dll 6.5.0.3 in the QuikSoft EasyMail MailStore ActiveX control allows remote attackers to execute arbitrary code via a… | Patch early | 9.3 high | 5.8% | 2009-03-09 |
| CVE-2010-2439 EXP | Stack-based buffer overflow in MoreAmp allows remote attackers to execute arbitrary code via a long line in a song list (.maf file). | Patch early | 9.3 high | 5.8% | 2010-06-24 |
| CVE-2006-3750 EXP | PHP remote file inclusion vulnerability in server.php in the Hashcash Component (com_hashcash) 1.2.1 for Joomla! allows remote attackers to execute ar… | Patch early | 6.8 medium | 5.8% | 2006-07-21 |
| CVE-2006-4195 EXP | PHP remote file inclusion vulnerability in param.peoplebook.php in the Peoplebook Component for Mambo (com_peoplebook) 1.0 and earlier, and possibly 1… | Patch early | 6.8 medium | 5.8% | 2006-08-17 |
| CVE-2006-4288 EXP | PHP remote file inclusion vulnerability in admin.a6mambocredits.php in the a6mambocredits component (com_a6mambocredits) 2.0.0 and earlier for Mambo a… | Patch early | 6.8 medium | 5.8% | 2006-08-22 |
| CVE-2015-3673 EXP | Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obtain root p… | Patch early | 7.2 high | 5.8% | 2015-07-03 |
| CVE-2009-3221 EXP | Stack-based buffer overflow in Audio Lib Player (ALP) allows remote attackers to execute arbitrary code via a long URL in a .m3u playlist file. | Patch early | 9.3 high | 5.8% | 2009-09-16 |
| CVE-2006-6261 EXP | Buffer overflow in Quintessential Player 4.50.1.82 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbit… | Patch early | 9.3 high | 5.8% | 2006-12-04 |
| CVE-2010-3125 EXP | Untrusted search path vulnerability in TeamMate Audit Management Software Suite 8.0 patch 2 allows local users, and possibly remote attackers, to exec… | Patch early | 9.3 high | 5.8% | 2010-08-26 |
| CVE-2020-5509 EXP | PHPGurukul Car Rental Project v1.0 allows Remote Code Execution via an executable file in an upload of a new profile image. | Patch early | 7.2 high | 5.8% | 2020-01-14 |
| CVE-2008-5752 EXP | Directory traversal vulnerability in getConfig.php in the Page Flip Image Gallery plugin 0.2.2 and earlier for WordPress, when magic_quotes_gpc is dis… | Patch early | 4.3 medium | 5.8% | 2008-12-30 |
| CVE-2007-6402 EXP | Stack-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers… | Patch early | 9.3 high | 5.8% | 2007-12-17 |
| CVE-2014-5083 EXP | A Command Execution vulnerability exists in Sphider before 1.3.6 due to insufficient sanitization of fwrite to conf.php, which could let a remote mali… | Patch early | 8.8 high | 5.8% | 2020-02-10 |
| CVE-2014-5085 EXP | A Command Execution vulnerability exists in Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which could let a remote maliciou… | Patch early | 8.8 high | 5.8% | 2020-02-10 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt