CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,509 CVEs
1,739 on KEV
17,299 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-12
37,058 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2021-23031 | On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.1, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11.6.x before 11.6.5.… | In your normal cycle | 9.9 critical | 2.8% | 2021-09-14 |
| CVE-2016-1000156 | Mailcwp remote file upload vulnerability incomplete fix v1.100 | In your normal cycle | 9.8 critical | 2.8% | 2016-12-14 |
| CVE-2025-59360 | The killProcesses mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this allows unauthen… | In your normal cycle | 9.8 critical | 2.8% | 2025-09-15 |
| CVE-2022-23124 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Authentication is not required to… | In your normal cycle | 9.8 critical | 2.8% | 2023-03-28 |
| CVE-2021-41110 | cwlviewer is a web application to view and share Common Workflow Language workflows. Versions prior to 1.3.1 contain a Deserialization of Untrusted Da… | In your normal cycle | 9.1 critical | 2.8% | 2021-10-01 |
| CVE-2019-13165 | Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the request parser of the IPP service… | In your normal cycle | 9.8 critical | 2.8% | 2020-03-13 |
| CVE-2019-13168 | Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the attributes parser of the IPP serv… | In your normal cycle | 9.8 critical | 2.8% | 2020-03-13 |
| CVE-2019-13171 | Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by one or more stack-based buffer overflow vulnerabilities in the Google Cl… | In your normal cycle | 9.8 critical | 2.8% | 2020-03-13 |
| CVE-2016-8649 | lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the… | In your normal cycle | 9.1 critical | 2.8% | 2017-05-01 |
| CVE-2017-10807 | JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous c2s.xml option is not enabled… | In your normal cycle | 9.8 critical | 2.8% | 2017-07-04 |
| CVE-2019-13649 | TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow externalPort OS Command Injection (issue 1 of 5). | In your normal cycle | 9.8 critical | 2.8% | 2019-10-24 |
| CVE-2019-13650 | TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow internalPort OS Command Injection (issue 2 of 5). | In your normal cycle | 9.8 critical | 2.8% | 2019-10-24 |
| CVE-2019-13652 | TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow serviceName OS Command Injection (issue 4 of 5). | In your normal cycle | 9.8 critical | 2.8% | 2019-10-24 |
| CVE-2014-10074 | Umbraco before 7.2.0 has a remote PHP code execution vulnerability because Umbraco.Web.UI/config/umbracoSettings.Release.config does not block the upl… | In your normal cycle | 9.8 critical | 2.8% | 2018-08-27 |
| CVE-2016-0360 | IBM Websphere MQ JMS 7.0.1, 7.1, 7.5, 8.0, and 9.0 client provides classes that deserialize objects from untrusted sources which could allow a malicio… | In your normal cycle | 9.8 critical | 2.8% | 2017-02-15 |
| CVE-2013-4462 | WordPress Portable phpMyAdmin Plugin has an authentication bypass vulnerability | In your normal cycle | 9.1 critical | 2.8% | 2020-01-27 |
| CVE-2020-8440 | controllers/page_apply.php in Simplejobscript.com SJS through 1.66 is prone to unauthenticated Remote Code Execution by uploading a PHP script as a re… | In your normal cycle | 9.8 critical | 2.8% | 2020-01-31 |
| CVE-2019-18823 | HTCondor up to and including stable series 8.8.6 and development series 8.9.4 has Incorrect Access Control. It is possible to use a different authenti… | In your normal cycle | 9.8 critical | 2.8% | 2020-04-27 |
| CVE-2020-6841 | D-Link DCH-M225 1.05b01 and earlier devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the spotifyConnect.php… | In your normal cycle | 9.8 critical | 2.8% | 2020-02-21 |
| CVE-2019-10780 | BibTeX-ruby before 5.1.0 allows shell command injection due to unsanitized user input being passed directly to the built-in Ruby Kernel.open method th… | In your normal cycle | 9.8 critical | 2.8% | 2020-01-22 |
| CVE-2023-43129 | D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection due to lax filtering of REMOTE_PORT parameters. | In your normal cycle | 9.8 critical | 2.8% | 2023-09-22 |
| CVE-2023-43130 | D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection. | In your normal cycle | 9.8 critical | 2.8% | 2023-09-22 |
| CVE-2019-8712 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in watchOS 6, iOS 13, tvOS 13. An application may be able t… | In your normal cycle | 9.8 critical | 2.8% | 2020-10-27 |
| CVE-2021-25812 | Command injection vulnerability in China Mobile An Lianbao WF-1 1.01 via the 'ip' parameter with a POST request to /api/ZRQos/set_online_client. | In your normal cycle | 9.8 critical | 2.8% | 2021-04-29 |
| CVE-2017-9265 | In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-util.c` in… | In your normal cycle | 9.8 critical | 2.8% | 2017-05-29 |
| CVE-2017-2968 | Adobe Campaign versions 16.4 Build 8724 and earlier have a code injection vulnerability. | In your normal cycle | 9.1 critical | 2.8% | 2017-02-15 |
| CVE-2020-9732 | The AEM Forms add-on for versions 6.5.5.0 (and below) and 6.4.8.2 (and below) are affected by a stored XSS vulnerability that allows users with 'Autho… | In your normal cycle | 9.0 critical | 2.8% | 2020-09-10 |
| CVE-2019-6519 | WebAccess/SCADA, Version 8.3. An improper authentication vulnerability exists that could allow a possible authentication bypass allowing an attacker t… | In your normal cycle | 9.8 critical | 2.8% | 2019-02-05 |
| CVE-2020-10921 | This vulnerability allows remote attackers to issue commands on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Au… | In your normal cycle | 9.8 critical | 2.8% | 2020-07-23 |
| CVE-2020-28073 | SourceCodester Library Management System 1.0 is affected by SQL Injection allowing an attacker to bypass the user authentication and impersonate any u… | In your normal cycle | 9.8 critical | 2.8% | 2020-12-23 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt