CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
407,410 CVEs
1,741 on KEV
17,302 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-14
324,697 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2002-0454 EXP | Qpopper (aka in.qpopper or popper) 4.0.3 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a very large string, w… | Patch early | 5.0 medium | 5.2% | 2002-08-12 |
| CVE-2007-4535 EXP | The VStr::Resize function in str.cpp in Vavoom 1.24 and earlier allows remote attackers to cause a denial of service (daemon crash) via a string with… | Patch early | 4.3 medium | 5.2% | 2007-08-25 |
| CVE-2004-1883 EXP | Multiple buffer overflows in Ipswitch WS_FTP Server 4.0.2 (1) allow remote authenticated users to execute arbitrary code by causing a large error stri… | Patch early | 7.2 high | 5.2% | 2004-12-31 |
| CVE-2018-12981 EXP | An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerability can be exploited by authenti… | Patch early | 5.4 medium | 5.2% | 2018-07-12 |
| CVE-2017-6098 EXP | A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/campaign_save.php (Requires authen… | Patch early | 7.2 high | 5.2% | 2017-02-21 |
| CVE-2004-0300 EXP | SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthorized access via (1) the cat param… | Patch early | 10.0 high | 5.2% | 2004-11-23 |
| CVE-2013-7030 EXP | The TFTP service in Cisco Unified Communications Manager (aka CUCM or Unified CM) allows remote attackers to obtain sensitive information from a phone… | Patch early | 7.3 high | 5.2% | 2013-12-12 |
| CVE-2010-4297 EXP | The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548; VMware Player 2.5.x bef… | Patch early | 7.2 high | 5.2% | 2010-12-06 |
| CVE-2016-0007 EXP | The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2… | Patch early | 7.8 high | 5.2% | 2016-01-13 |
| CVE-2018-16517 EXP | asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted fi… | Patch early | 5.5 medium | 5.2% | 2018-09-06 |
| CVE-2008-3239 EXP | Unrestricted file upload vulnerability in the writeLogEntry function in system/v_cron_proc.php in PHPizabi 0.848b C1 HFP1, when register_globals is en… | Patch early | 9.3 high | 5.2% | 2008-07-21 |
| CVE-2008-4586 EXP | Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control (isusweb.dll 6.1.100.61372) in Macrovision FLEXnet Connect 6.1 al… | Patch early | 9.3 high | 5.2% | 2008-10-15 |
| CVE-2008-1247 EXP | The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts, which allows remote attackers… | Patch early | 10.0 high | 5.2% | 2008-03-10 |
| CVE-2006-7012 EXP | scart.cgi in SCart 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter of a show_text action. | Patch early | 10.0 high | 5.2% | 2007-02-15 |
| CVE-2007-2753 EXP | RunawaySoft Haber portal 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to downlo… | Patch early | 5.0 medium | 5.2% | 2007-05-17 |
| CVE-2008-5562 EXP | ASPPortal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database fil… | Patch early | 5.0 medium | 5.2% | 2008-12-15 |
| CVE-2009-2022 EXP | fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the data… | Patch early | 5.0 medium | 5.2% | 2009-06-09 |
| CVE-2007-5508 EXP | Multiple SQL injection vulnerabilities in the CTXSYS Intermedia application for the Oracle Text component (CTX_DOC) in Oracle Database 10.1.0.5 and 10… | Patch early | 6.5 medium | 5.2% | 2007-10-17 |
| CVE-2004-0238 EXP | Multiple buffer overflows in Overkill (0verkill) 0.15pre3 might allow local users to execute arbitrary code in the client via a long HOME environment… | Patch early | 7.2 high | 5.2% | 2004-11-23 |
| CVE-2011-2165 EXP | The STARTTLS implementation in WatchGuard XCS 9.0 and 9.1 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert… | Patch early | 6.8 medium | 5.2% | 2011-05-23 |
| CVE-1999-1190 EXP | Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long "From" header in an… | Patch early | 10.0 high | 5.2% | 1999-11-15 |
| CVE-2004-1405 EXP | MediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, such as .php.rar, which allows r… | Patch early | 7.5 high | 5.2% | 2004-12-31 |
| CVE-2011-0961 EXP | Cross-site scripting (XSS) vulnerability in cwhp/device.center.do in the Help servlet in Cisco CiscoWorks Common Services 3.3 and earlier allows remot… | Patch early | 4.3 medium | 5.2% | 2011-05-20 |
| CVE-2015-1368 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Ansible Tower (aka Ansible UI) before 2.0.5 allow remote attackers to inject arbitrary web scri… | Patch early | 4.3 medium | 5.2% | 2015-01-27 |
| CVE-2008-3824 EXP | Cross-site scripting (XSS) vulnerability in (1) Text_Filter/Filter/xss.php in Horde 3.1.x before 3.1.9 and 3.2.x before 3.2.2 and (2) externalinput.ph… | Patch early | 4.3 medium | 5.2% | 2008-09-12 |
| CVE-2007-2757 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Redoable 1.2 allow remote attackers to inject arbitrary web script or HTML via the s parameter… | Patch early | 6.8 medium | 5.1% | 2007-05-18 |
| CVE-2017-5124 EXP | Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject arbitrary scripts or HTML (UXS… | Patch early | 6.1 medium | 5.1% | 2018-02-07 |
| CVE-2016-4793 EXP | The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header. | Patch early | 7.5 high | 5.1% | 2017-01-23 |
| CVE-2010-2549 EXP | Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2 and Server 2008 Gold and SP2 allows local users to gain… | Patch early | 7.2 high | 5.1% | 2010-07-02 |
| CVE-2010-1687 EXP | Stack-based buffer overflow in lpd.exe in Mocha W32 LPD 1.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrar… | Patch early | 5.0 medium | 5.1% | 2010-05-04 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt