CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
405,413 CVEs
1,739 on KEV
17,301 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-13
171,774 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2003-0390 EXP | Multiple buffer overflows in Options Parsing Tool (OPT) shared library 3.18 and earlier, when used in setuid programs, may allow local users to execut… | Patch early | 4.6 medium | 1% | 2003-07-02 |
| CVE-2007-1861 EXP | The nl_fib_lookup function in net/ipv4/fib_frontend.c in Linux Kernel before 2.6.20.8 allows attackers to cause a denial of service (kernel panic) via… | Patch early | 4.9 medium | 1% | 2007-05-07 |
| CVE-2012-5667 EXP | Multiple integer overflows in GNU Grep before 2.11 might allow context-dependent attackers to execute arbitrary code via vectors involving a long inpu… | Patch early | 4.4 medium | 1% | 2013-01-03 |
| CVE-2010-4750 EXP | Cross-site request forgery (CSRF) vulnerability in admin/libs/ADMIN.php in BLOG:CMS 4.2.1.e, and possibly earlier, allows remote attackers to hijack t… | Patch early | 6.8 medium | 1% | 2011-03-01 |
| CVE-2006-6220 EXP | Multiple SQL injection vulnerabilities in Recipes Website (Recipes Complete Website) 1.1.14 allow remote attackers to execute arbitrary SQL commands v… | Patch early | 6.8 medium | 1% | 2006-12-01 |
| CVE-2009-3001 EXP | The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does not initialize a certain data structure, which allows… | Patch early | 4.9 medium | 1% | 2009-08-28 |
| CVE-2006-1481 EXP | SQL injection vulnerability in search.php in PHP Ticket 0.71 allows remote authenticated users to execute arbitrary SQL commands and obtain usernames… | Patch early | 6.5 medium | 1% | 2006-03-29 |
| CVE-2006-1269 EXP | Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long filename command line argument… | Patch early | 6.2 medium | 1% | 2006-03-19 |
| CVE-1999-0400 EXP | Denial of service in Linux 2.2.0 running the ldd command on a core file. | Patch early | 4.6 medium | 1% | 1999-01-26 |
| CVE-2013-2852 EXP | Format string vulnerability in the b43_request_firmware function in drivers/net/wireless/b43/main.c in the Broadcom B43 wireless driver in the Linux k… | Patch early | 6.9 medium | 1% | 2013-06-07 |
| CVE-2005-4076 EXP | Buffer overflow in Appfluent Technology Database IDS 2.0 allows local users to execute arbitrary code via a long APPFLUENT_HOME environment variable. | Patch early | 4.6 medium | 1% | 2005-12-08 |
| CVE-2010-1611 EXP | Cross-site request forgery (CSRF) vulnerability in AlegroCart 1.1 allows remote attackers to hijack the authentication of the administrator for reques… | Patch early | 6.8 medium | 1% | 2010-04-29 |
| CVE-2012-3375 EXP | The epoll_ctl system call in fs/eventpoll.c in the Linux kernel before 3.2.24 does not properly handle ELOOP errors in EPOLL_CTL_ADD operations, which… | Patch early | 4.9 medium | 1% | 2012-10-03 |
| CVE-2010-5236 EXP | Untrusted search path vulnerability in Roxio Easy Media Creator Home 9.0.136 allows local users to gain privileges via a Trojan horse homeutils9.dll f… | Patch early | 6.9 medium | 1% | 2012-09-07 |
| CVE-2007-4386 EXP | SQL injection vulnerability in search.php in GetMyOwnArcade allows remote attackers to execute arbitrary SQL commands via the query parameter. | Patch early | 6.0 medium | 1% | 2007-08-17 |
| CVE-2013-1828 EXP | The sctp_getsockopt_assoc_stats function in net/sctp/socket.c in the Linux kernel before 3.8.4 does not validate a size value before proceeding to a c… | Patch early | 6.9 medium | 1% | 2013-03-22 |
| CVE-2005-0475 EXP | SQL injection vulnerability in paFAQ Beta4, and possibly other versions, allows remote attackers to execute arbitrary SQL code via the (1) offset, (2)… | Patch early | 6.4 medium | 1% | 2005-03-30 |
| CVE-2007-6359 EXP | The cs_validate_page function in bsd/kern/ubc_subr.c in the xnu kernel 1228.0 and earlier in Apple Mac OS X 10.5.1 allows local users to cause a denia… | Patch early | 4.9 medium | 1% | 2007-12-15 |
| CVE-2005-3358 EXP | Linux kernel before 2.6.15 allows local users to cause a denial of service (panic) via a set_mempolicy call with a 0 bitmask, which causes a panic whe… | Patch early | 4.9 medium | 1% | 2005-12-14 |
| CVE-2012-0045 EXP | The em_syscall function in arch/x86/kvm/emulate.c in the KVM implementation in the Linux kernel before 3.2.14 does not properly handle the 0f05 (aka s… | Patch early | 4.7 medium | 1% | 2012-07-03 |
| CVE-2005-4262 EXP | Cross-site scripting (XSS) vulnerability in the News module in Envolution allows remote attackers to inject arbitrary web script or HTML via the (1) s… | Patch early | 4.3 medium | 1% | 2005-12-15 |
| CVE-2014-0621 EXP | Multiple cross-site request forgery (CSRF) vulnerabilities in Technicolor (formerly Thomson) TC7200 STD6.01.12 allow remote attackers to hijack the au… | Patch early | 6.8 medium | 1% | 2014-01-08 |
| CVE-2006-5446 EXP | SQL injection vulnerability in lobby/config.php in Casinosoft Casino Script (aka Masvet) 3.2 allows remote attackers to execute arbitrary SQL commands… | Patch early | 5.1 medium | 1% | 2006-10-23 |
| CVE-2003-0281 EXP | Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to ex… | Patch early | 4.6 medium | 1% | 2003-06-16 |
| CVE-2014-8727 EXP | Multiple directory traversal vulnerabilities in F5 BIG-IP before 10.2.2 allow local users with the "Resource Administrator" or "Administrator" role to… | Patch early | 6.2 medium | 1% | 2014-11-17 |
| CVE-2026-42568 EXP | Yamcs is a mission control framework. Prior to versions 5.13.0 and 5.12.7, an LDAP injection vulnerability exists in `org.yamcs.security.LdapAuthModul… | Patch early | 4.3 medium | 1% | 2026-06-10 |
| CVE-2008-0920 EXP | SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management (OSSIM) 0.9.9 rc5 allows remote authenticated us… | Patch early | 6.5 medium | 1% | 2008-02-22 |
| CVE-1999-1014 EXP | Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument. | Patch early | 4.6 medium | 1% | 1999-09-13 |
| CVE-2002-1766 EXP | Buffer overflow in Composer in Netscape 4.77 allows local users to overwrite process memory and execute arbitrary code via a font tag with a long face… | Patch early | 4.6 medium | 1% | 2002-12-31 |
| CVE-2008-0310 EXP | Directory traversal vulnerability in pkgadd in SCO UnixWare 7.1.4 before p534589 allows local users to create or append to arbitrary files via ".." se… | Patch early | 6.9 medium | 1% | 2008-04-07 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt