CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
405,413 CVEs
1,739 on KEV
17,301 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-13
171,774 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2002-1826 EXP | grsecurity 1.9.4 for Linux kernel 2.4.18 allows local users to bypass read-only permissions by using mmap to directly map /dev/mem or /dev/kmem to ker… | Patch early | 4.6 medium | 1% | 2002-12-31 |
| CVE-2008-6979 EXP | Cross-site scripting (XSS) vulnerability in as_archives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to inject arbitrary web scrip… | Patch early | 4.3 medium | 1% | 2009-08-19 |
| CVE-2007-4684 EXP | Integer overflow in the kernel in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a large num_sels argument to th… | Patch early | 6.9 medium | 1% | 2007-11-15 |
| CVE-2007-2749 EXP | SQL injection vulnerability in question.php in FAQEngine 4.16.03 and earlier allows remote attackers to execute arbitrary SQL commands via the questio… | Patch early | 5.0 medium | 1% | 2007-05-17 |
| CVE-2006-4072 EXP | Multiple SQL injection vulnerabilities in Club-Nuke [XP] 2.0 LCID 2048 allow remote attackers to execute arbitrary SQL commands via the (1) haber_id p… | Patch early | 6.5 medium | 1% | 2006-08-11 |
| CVE-2013-4679 EXP | Symantec Workspace Virtualization before 6.x before 6.4.1953.0, when a virtual application layer is configured, allows local users to gain privileges… | Patch early | 6.6 medium | 1% | 2013-08-05 |
| CVE-2001-1177 EXP | ml85p in Samsung ML-85G GDI printer driver before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files. | Patch early | 6.2 medium | 1% | 2001-07-17 |
| CVE-2009-4120 EXP | Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.Cart 3.4 allow remote attackers to hijack the authentication of the administrator… | Patch early | 6.8 medium | 1% | 2009-12-01 |
| CVE-2005-1372 EXP | nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges vi… | Patch early | 4.6 medium | 1% | 2005-05-03 |
| CVE-2004-2093 EXP | Buffer overflow in the open_socket_out function in socket.c for rsync 2.5.7 and earlier allows local users to cause a denial of service (crash) and po… | Patch early | 4.6 medium | 1% | 2004-02-09 |
| CVE-2008-1554 EXP | SQL injection vulnerability in account/index.php in TopperMod 2.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL… | Patch early | 6.8 medium | 1% | 2008-03-31 |
| CVE-2008-2029 EXP | Multiple SQL injection vulnerabilities in (1) setup_mysql.php and (2) setup_options.php in miniBB 2.2 and possibly earlier, when register_globals is e… | Patch early | 6.8 medium | 1% | 2008-04-30 |
| CVE-2008-3761 EXP | hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x before 1.0.9… | Patch early | 4.9 medium | 1% | 2008-08-21 |
| CVE-2003-0396 EXP | Buffer overflow in les for ATM on Linux (linux-atm) before 2.4.1, if used setuid, allows local users to gain privileges via a long -f command line arg… | Patch early | 4.6 medium | 1% | 2003-07-02 |
| CVE-2006-2359 EXP | Cross-site scripting (XSS) vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to inject arbitrary web script or HTML via t… | Patch early | 4.3 medium | 1% | 2006-05-15 |
| CVE-2007-1254 EXP | SQL injection vulnerability in part.userprofile.php in Connectix Boards 0.7 and earlier allows remote authenticated users to execute arbitrary SQL com… | Patch early | 6.5 medium | 1% | 2007-03-03 |
| CVE-2006-5550 EXP | The kernel in FreeBSD 6.1 and OpenBSD 4.0 allows local users to cause a denial of service via unspecified vectors involving certain ioctl requests to… | Patch early | 4.9 medium | 1% | 2006-10-26 |
| CVE-2008-5565 EXP | Cross-site request forgery (CSRF) vulnerability in admin/settings.php in DL PayCart 1.34 and earlier allows remote attackers to change the admin passw… | Patch early | 6.8 medium | 1% | 2008-12-15 |
| CVE-2008-5567 EXP | Cross-site request forgery (CSRF) vulnerability in admin/ad_settings.php in Bonza Cart 1.10 and earlier allows remote attackers to change the admin pa… | Patch early | 6.8 medium | 1% | 2008-12-15 |
| CVE-2012-5380 EXP | Untrusted search path vulnerability in the installation functionality in Ruby 1.9.3-p194, when installed in the top-level C:\ directory, might allow l… | Patch early | 6.7 medium | 1% | 2012-10-11 |
| CVE-2006-1853 EXP | Multiple SQL injection vulnerabilities in ModernBill 4.3.2 and earlier allow remote attackers or administrators to execute arbitrary SQL commands via… | Patch early | 6.5 medium | 1% | 2006-04-19 |
| CVE-2008-2936 EXP | Postfix before 2.3.15, 2.4 before 2.4.8, 2.5 before 2.5.4, and 2.6 before 2.6-20080814, when the operating system supports hard links to symlinks, all… | Patch early | 6.2 medium | 1% | 2008-08-18 |
| CVE-2012-3480 EXP | Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified "related functions" in stdlib in GNU C Libr… | Patch early | 4.6 medium | 1% | 2012-08-25 |
| CVE-2004-0074 EXP | Multiple buffer overflows in xsok 1.02 allows local users to gain privileges via (1) a long LANG environment variable, or (2) a long -xsokdir command… | Patch early | 4.6 medium | 1% | 2004-02-17 |
| CVE-2008-6729 EXP | Multiple cross-site request forgery (CSRF) vulnerabilities in password.php in PHPmotion 2.1 and earlier allow remote attackers to hijack the authentic… | Patch early | 6.8 medium | 1% | 2009-04-20 |
| CVE-2024-36424 EXP | K7RKScan.sys in K7 Ultimate Security before 17.0.2019 allows local users to cause a denial of service (BSOD) because of a NULL pointer dereference. | Patch early | 5.5 medium | 1% | 2024-08-06 |
| CVE-2005-2709 EXP | The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (kernel oops) and possibly execute… | Patch early | 4.6 medium | 1% | 2005-11-20 |
| CVE-2011-5074 EXP | Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow remote attackers to hijack the aut… | Patch early | 6.8 medium | 1% | 2012-01-29 |
| CVE-2013-1651 EXP | OXUpdater in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 does not verify X.509 certificates from SSL servers… | Patch early | 5.8 medium | 1% | 2013-09-05 |
| CVE-2012-1220 EXP | Cross-site request forgery (CSRF) vulnerability in modules/config/admin_utente.php in GAzie 5.20 and earlier allows remote attackers to hijack the aut… | Patch early | 6.8 medium | 1% | 2012-02-21 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt