CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
407,357 CVEs
1,740 on KEV
17,302 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-13
37,227 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2017-9424 | IdeaBlade Breeze Breeze.Server.NET before 1.6.5 allows remote attackers to execute arbitrary code, related to use of TypeNameHandling in JSON deserial… | In your normal cycle | 9.8 critical | 2.7% | 2017-06-22 |
| CVE-2019-9039 | In Couchbase Sync Gateway 2.1.2, an attacker with access to the Sync Gateway’s public REST API was able to issue additional N1QL statements and extrac… | In your normal cycle | 9.8 critical | 2.7% | 2019-06-26 |
| CVE-2020-10255 | Modern DRAM chips (DDR4 and LPDDR4 after 2015) are affected by a vulnerability in deployment of internal mitigations against RowHammer attacks known a… | In your normal cycle | 9.0 critical | 2.7% | 2020-03-10 |
| CVE-2020-12268 | jbig2_image_compose in jbig2_image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow. | In your normal cycle | 9.8 critical | 2.7% | 2020-04-27 |
| CVE-2019-18316 | A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Ap… | In your normal cycle | 9.8 critical | 2.7% | 2019-12-12 |
| CVE-2019-8572 | A null pointer dereference was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Ba… | In your normal cycle | 9.8 critical | 2.7% | 2020-10-27 |
| CVE-2015-2020 | The MyScript SDK before 1.3 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that i… | In your normal cycle | 9.8 critical | 2.7% | 2018-03-29 |
| CVE-2017-17663 | The htpasswd implementation of mini_httpd before v1.28 and of thttpd before v2.28 is affected by a buffer overflow that can be exploited remotely to p… | In your normal cycle | 9.8 critical | 2.7% | 2018-02-06 |
| CVE-2021-46394 | There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10_CN. The v13 variable is directly ret… | In your normal cycle | 9.8 critical | 2.7% | 2022-03-04 |
| CVE-2016-5053 | OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 allows remote attackers to execute arbitrary commands via TCP port 4000. | In your normal cycle | 9.8 critical | 2.7% | 2017-04-10 |
| CVE-2015-1778 | The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authenticate any username and passw… | In your normal cycle | 9.8 critical | 2.7% | 2017-06-27 |
| CVE-2019-17137 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR AC1200 R6220 Firmware version 1.1.0… | In your normal cycle | 9.4 critical | 2.7% | 2020-02-10 |
| CVE-2019-19521 | libc in OpenBSD 6.6 allows authentication bypass via the -schallenge username, as demonstrated by smtpd, ldapd, or radiusd. This is related to gen/aut… | In your normal cycle | 9.8 critical | 2.7% | 2019-12-05 |
| CVE-2021-36385 | A SQL Injection vulnerability in Cerner Mobile Care 5.0.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via a Fullwidth Ap… | In your normal cycle | 9.8 critical | 2.7% | 2021-08-24 |
| CVE-2022-27404 | FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face. | In your normal cycle | 9.8 critical | 2.7% | 2022-04-22 |
| CVE-2022-22995 | The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combina… | In your normal cycle | 10.0 critical | 2.7% | 2022-03-25 |
| CVE-2018-1469 | IBM API Connect Developer Portal 5.0.0.0 through 5.0.8.2 could allow an unauthenticated attacker to execute system commands using specially crafted HT… | In your normal cycle | 9.8 critical | 2.7% | 2018-04-04 |
| CVE-2015-5951 | A file upload issue exists in the specid parameter in Thomson Reuters FATCH before 5.2, which allows malicious users to upload arbitrary PHP files to… | In your normal cycle | 9.9 critical | 2.7% | 2020-01-06 |
| CVE-2015-7271 | Dell Integrated Remote Access Controller (iDRAC) 7/8 before 2.21.21.21 has a format string issue in racadm getsystinfo. | In your normal cycle | 9.8 critical | 2.7% | 2017-04-10 |
| CVE-2020-1944 | There is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8.0.5 with a smuggling attack and Transfer-Encoding and… | In your normal cycle | 9.8 critical | 2.7% | 2020-03-23 |
| CVE-2019-6524 | Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to discover pass… | In your normal cycle | 9.8 critical | 2.7% | 2019-03-05 |
| CVE-2019-7316 | An issue was discovered in CSS-TRICKS Chat2 through 2015-05-05. The userid parameter in jumpin.php has a SQL injection vulnerability. | In your normal cycle | 9.8 critical | 2.7% | 2019-02-04 |
| CVE-2018-16613 | An issue was discovered in the update function in the wpForo Forum plugin before 1.5.2 for WordPress. A registered forum is able to escalate privilege… | In your normal cycle | 9.8 critical | 2.7% | 2019-06-19 |
| CVE-2021-35368 | OWASP ModSecurity Core Rule Set 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.2 is affected by a Request Body Bypass via a trailing pat… | In your normal cycle | 9.8 critical | 2.7% | 2021-11-05 |
| CVE-2014-3205 | backupmgt/pre_connect_check.php in Seagate BlackArmor NAS contains a hard-coded password of '!~@##$$%FREDESWWSED' for a backdoor user. | In your normal cycle | 9.8 critical | 2.7% | 2018-02-23 |
| CVE-2026-25555 | OpenBullet2 through version 0.3.2 contains an authentication bypass vulnerability in the API key authentication middleware that allows unauthenticated… | In your normal cycle | 9.8 critical | 2.7% | 2026-06-08 |
| CVE-2019-7736 | D-Link DIR-600M C1 3.04 devices allow authentication bypass via a direct request to the wan.htm page. NOTE: this may overlap CVE-2019-13101. | In your normal cycle | 9.8 critical | 2.7% | 2019-02-11 |
| CVE-2022-30767 | nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a… | In your normal cycle | 9.8 critical | 2.7% | 2022-05-16 |
| CVE-2021-46063 | MCMS v5.2.5 was discovered to contain a Server Side Template Injection (SSTI) vulnerability via the Template Management module. | In your normal cycle | 9.1 critical | 2.7% | 2022-02-18 |
| CVE-2026-86167 | A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formgponConf of the file /boaform/admin/formgponConf of the component… | In your normal cycle | 9.9 critical | 2.7% | 2026-09-06 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt