CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
408,394 CVEs
1,745 on KEV
17,306 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-15
152,706 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2017-10129 EXP | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to… | Patch early | 8.8 high | 1.6% | 2017-08-08 |
| CVE-2006-6177 EXP | SQL injection vulnerability in system/core/users/users.profile.inc.php in Neocrome Seditio 1.10 and earlier allows remote authenticated users to execu… | Patch early | 7.5 high | 1.6% | 2006-11-30 |
| CVE-2017-14355 EXP | A potential security vulnerability has been identified in HPE Connected Backup versions 8.6 and 8.8.6. The vulnerability could be exploited locally to… | Patch early | 7.8 high | 1.6% | 2017-12-05 |
| CVE-2001-0735 EXP | Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a long line… | Patch early | 7.2 high | 1.6% | 2001-10-18 |
| CVE-2011-4066 EXP | SQL injection vulnerability in bbs/tb.php in Gnuboard 4.33.02 and earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO. | Patch early | 7.5 high | 1.6% | 2011-11-04 |
| CVE-2016-8806 EXP | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability… | Patch early | 7.8 high | 1.6% | 2016-11-08 |
| CVE-2007-4918 EXP | SQL injection vulnerability in classes/gelato.class.php in Gelato allows remote attackers to execute arbitrary SQL commands via the post parameter to… | Patch early | 7.5 high | 1.6% | 2007-09-17 |
| CVE-2017-10204 EXP | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to… | Patch early | 8.8 high | 1.6% | 2017-08-08 |
| CVE-2010-1591 EXP | Beijing Rising International Rising Antivirus 2008 through 2010 does not properly validate input to certain IOCTLs, including 0x83003C07, which allows… | Patch early | 7.2 high | 1.6% | 2010-04-28 |
| CVE-2006-3304 EXP | SQL injection vulnerability in cp.php in DeluxeBB 1.07 and earlier allows remote attackers to execute arbitrary SQL commands via the xmsn parameter. | Patch early | 7.5 high | 1.6% | 2006-06-29 |
| CVE-2016-8812 EXP | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before GFE 3.1.0.52 contains a vulnera… | Patch early | 8.8 high | 1.6% | 2016-11-08 |
| CVE-2000-0048 EXP | get_it program in Corel Linux Update allows local users to gain root access by specifying an alternate PATH for the cp program. | Patch early | 7.2 high | 1.6% | 2000-01-12 |
| CVE-2018-18856 EXP | Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can communicate w… | Patch early | 7.8 high | 1.6% | 2018-11-20 |
| CVE-2002-1506 EXP | Buffer overflow in Linuxconf before 1.28r4 allows local users to execute arbitrary code via a long LINUXCONF_LANG environment variable, which overflow… | Patch early | 7.2 high | 1.6% | 2003-04-02 |
| CVE-2006-0320 EXP | SQL injection vulnerability in admin/processlogin.php in Bit 5 Blog 8.01 allows remote attackers to execute arbitrary SQL commands and bypass authenti… | Patch early | 7.5 high | 1.6% | 2006-01-19 |
| CVE-2009-4628 EXP | SQL injection vulnerability in the TemplatePlaza.com TPDugg (com_tpdugg) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL co… | Patch early | 7.5 high | 1.6% | 2010-01-18 |
| CVE-1999-1384 EXP | Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows local users to gain root privileges via a Trojan hor… | Patch early | 7.2 high | 1.6% | 1996-10-30 |
| CVE-2016-8808 EXP | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability… | Patch early | 7.8 high | 1.6% | 2016-11-08 |
| CVE-2016-8809 EXP | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability… | Patch early | 7.8 high | 1.6% | 2016-11-08 |
| CVE-2016-8811 EXP | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability… | Patch early | 7.8 high | 1.6% | 2016-11-08 |
| CVE-2018-18857 EXP | Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can communicate w… | Patch early | 7.8 high | 1.6% | 2018-11-20 |
| CVE-2016-7508 EXP | Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a certain char… | Patch early | 7.5 high | 1.6% | 2017-06-21 |
| CVE-2004-0186 EXP | smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that contains a… | Patch early | 7.2 high | 1.6% | 2004-03-15 |
| CVE-2018-5410 EXP | Dokan, versions between 1.0.0.5000 and 1.2.0.1000, are vulnerable to a stack-based buffer overflow in the dokan1.sys driver. An attacker can create a… | Patch early | 7.8 high | 1.6% | 2019-01-07 |
| CVE-2006-6367 EXP | Multiple SQL injection vulnerabilities in detail.asp in DUware DUdownload 1.1, and possibly earlier, allow remote attackers to execute arbitrary SQL c… | Patch early | 7.5 high | 1.6% | 2006-12-07 |
| CVE-2010-1338 EXP | SQL injection vulnerability in ts_other.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allows remote attackers to execute a… | Patch early | 7.5 high | 1.6% | 2010-04-09 |
| CVE-2010-1855 EXP | SQL injection vulnerability in auktion.php in Pay Per Watch & Bid Auktions System allows remote attackers to execute arbitrary SQL commands via the id… | Patch early | 7.5 high | 1.6% | 2010-05-07 |
| CVE-2010-4780 EXP | SQL injection vulnerability in the check_banlist function in includes/sessions.php in Enano CMS 1.1.7pl1; 1.0.6pl2; and possibly other versions before… | Patch early | 7.5 high | 1.6% | 2011-04-07 |
| CVE-2010-5003 EXP | SQL injection vulnerability in the AutarTimonial (com_autartimonial) component 1.0.8 for Joomla! allows remote attackers to execute arbitrary SQL comm… | Patch early | 7.5 high | 1.6% | 2011-11-01 |
| CVE-2002-1896 EXP | Buffer overflow in Alsaplayer 0.99.71, when installed setuid root, allows local users to execute arbitrary code via a long (1) -f or (2) -o command li… | Patch early | 7.2 high | 1.6% | 2002-12-31 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt