CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
408,465 CVEs
1,745 on KEV
17,306 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-15
152,735 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2012-6643 EXP | Multiple SQL injection vulnerabilities in the update_counter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute ar… | Patch early | 7.5 high | 1.5% | 2014-04-08 |
| CVE-2014-9226 EXP | The management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0… | Patch early | 7.2 high | 1.5% | 2015-01-21 |
| CVE-2017-3561 EXP | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5… | Patch early | 8.8 high | 1.5% | 2017-04-24 |
| CVE-2017-3576 EXP | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5… | Patch early | 8.8 high | 1.5% | 2017-04-24 |
| CVE-2014-9322 EXP | arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register,… | Patch early | 7.8 high | 1.5% | 2014-12-17 |
| CVE-2000-0194 EXP | buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters. | Patch early | 7.2 high | 1.5% | 2000-02-24 |
| CVE-2000-0195 EXP | setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file. | Patch early | 7.2 high | 1.5% | 2000-02-24 |
| CVE-2007-2810 EXP | SQL injection vulnerability in down_indir.asp in Gazi Download Portal allows remote attackers to execute arbitrary SQL commands via the id parameter.… | Patch early | 10.0 high | 1.5% | 2007-05-22 |
| CVE-2016-7390 EXP | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability… | Patch early | 7.8 high | 1.5% | 2016-11-08 |
| CVE-2016-8805 EXP | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability… | Patch early | 7.8 high | 1.5% | 2016-11-08 |
| CVE-2016-8810 EXP | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability… | Patch early | 7.8 high | 1.5% | 2016-11-08 |
| CVE-2014-2934 EXP | Multiple SQL injection vulnerabilities in Caldera 9.20 allow remote attackers to execute arbitrary SQL commands via the tr parameter to (1) costview2/… | Patch early | 7.5 high | 1.5% | 2014-05-08 |
| CVE-2001-1015 EXP | Buffer overflow in Snes9x 1.37, when installed setuid root, allows local users to gain root privileges via a long command line argument. | Patch early | 7.2 high | 1.5% | 2001-10-16 |
| CVE-2003-1461 EXP | Buffer overflow in rwrite for HP-UX 11.0 could allow local users to execute arbitrary code via a long argument. NOTE: the vendor was unable to reprod… | Patch early | 7.2 high | 1.5% | 2003-12-31 |
| CVE-2002-0542 EXP | mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is not in interactive mode, which could allow local users… | Patch early | 7.2 high | 1.5% | 2002-07-03 |
| CVE-2015-3643 EXP | usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14.10, and be… | Patch early | 7.8 high | 1.5% | 2017-09-28 |
| CVE-2015-6009 EXP | Multiple SQL injection vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 allow remote attackers to execute arbitrary SQL commands… | Patch early | 7.5 high | 1.5% | 2015-09-28 |
| CVE-2017-14961 EXP | In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8300… | Patch early | 7.8 high | 1.5% | 2017-11-15 |
| CVE-2025-55912 EXP | An issue in ClipBucket 5.5.0 and prior versions allows an unauthenticated attacker can exploit the plupload endpoint in photo_uploader.php to upload a… | Patch early | 7.3 high | 1.5% | 2025-09-18 |
| CVE-2013-5656 EXP | FuzeZip 1.0.0.131625 has a Local Buffer Overflow vulnerability | Patch early | 7.8 high | 1.5% | 2020-01-07 |
| CVE-2016-7084 EXP | tpview.dll in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual pr… | Patch early | 7.8 high | 1.5% | 2016-12-29 |
| CVE-2012-4951 EXP | Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36 allow remote attackers to exe… | Patch early | 7.5 high | 1.5% | 2012-11-15 |
| CVE-2012-1665 EXP | Multiple SQL injection vulnerabilities in the admin panel in osCMax before 2.5.1 allow (1) remote attackers to execute arbitrary SQL commands via the… | Patch early | 7.5 high | 1.5% | 2015-05-20 |
| CVE-2006-1327 EXP | SQL injection vulnerability in reg.php in SoftBB 0.1 allows remote attackers to execute arbitrary SQL commands via the mail parameter. | Patch early | 7.5 high | 1.5% | 2006-03-21 |
| CVE-2006-1708 EXP | SQL injection vulnerability in member.php in Clansys 1.1 allows remote attackers to execute arbitrary SQL commands via the showid parameter in the mem… | Patch early | 7.5 high | 1.5% | 2006-04-11 |
| CVE-2018-0437 EXP | A vulnerability in the Cisco Umbrella Enterprise Roaming Client (ERC) could allow an authenticated, local attacker to elevate privileges to Administra… | Patch early | 7.8 high | 1.5% | 2018-10-05 |
| CVE-2015-5602 EXP | sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcard… | Patch early | 7.2 high | 1.5% | 2015-11-17 |
| CVE-2017-16237 EXP | In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file (VIAGLT64.SYS) contains an Arbitrary Write vulnerability because of not validating input… | Patch early | 7.8 high | 1.5% | 2017-11-03 |
| CVE-2024-4007 EXP | Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly co… | Patch early | 8.8 high | 1.5% | 2024-07-01 |
| CVE-2006-5675 EXP | Multiple unspecified vulnerabilities in Pentaho Business Intelligence (BI) Suite before 1.2 RC3 (1.2.0.470-RC3) have unknown impact and attack vectors… | Patch early | 10.0 high | 1.5% | 2006-11-03 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt