CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
408,510 CVEs
1,746 on KEV
17,309 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-15
152,756 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2003-0089 EXP | Buffer overflow in the Software Distributor utilities for HP-UX B.11.00 and B.11.11 allows local users to execute arbitrary code via a long LANG envir… | Patch early | 7.2 high | 1.5% | 2003-12-15 |
| CVE-2007-6125 EXP | SQL injection vulnerability in search_form.php in Softbiz Freelancers Script 1 allows remote attackers to execute arbitrary SQL commands via the sb_pr… | Patch early | 7.5 high | 1.5% | 2007-11-26 |
| CVE-2012-5244 EXP | Multiple SQL injection vulnerabilities in Banana Dance B.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) return,… | Patch early | 7.5 high | 1.5% | 2014-10-20 |
| CVE-2016-7083 EXP | VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enab… | Patch early | 7.8 high | 1.5% | 2016-12-29 |
| CVE-2016-7385 EXP | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability… | Patch early | 7.8 high | 1.5% | 2016-11-08 |
| CVE-2016-7387 EXP | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability… | Patch early | 7.8 high | 1.5% | 2016-11-08 |
| CVE-2018-18629 EXP | An issue was discovered in the Keybase command-line client before 2.8.0-20181023124437 for Linux. An untrusted search path vulnerability in the keybas… | Patch early | 7.8 high | 1.5% | 2018-12-20 |
| CVE-2008-0383 EXP | Multiple SQL injection vulnerabilities in MyBB 1.2.10 and earlier allow remote moderators and administrators to execute arbitrary SQL commands via (1)… | Patch early | 7.5 high | 1.5% | 2008-01-22 |
| CVE-2018-14533 EXP | read_tmp and write_tmp in Inteno IOPSYS allow attackers to gain privileges after writing to /tmp/etc/smb.conf because /var is a symlink to /tmp. | Patch early | 7.8 high | 1.5% | 2018-07-31 |
| CVE-2017-1297 EXP | IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a stack-based buffer overflow, caused by… | Patch early | 7.3 high | 1.5% | 2017-06-27 |
| CVE-2006-3065 EXP | SQL injection vulnerability in engine/shards/blog.php in blur6ex 0.3.462 allows remote attackers to execute arbitrary SQL commands via the ID paramete… | Patch early | 7.5 high | 1.5% | 2006-06-19 |
| CVE-2000-1028 EXP | Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument. | Patch early | 7.2 high | 1.5% | 2000-12-11 |
| CVE-2004-0510 EXP | Multiple buffer overflows in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to execute arbitrary code,… | Patch early | 7.2 high | 1.5% | 2004-12-23 |
| CVE-2019-18915 EXP | A potential security vulnerability has been identified with certain versions of HP System Event Utility prior to version 1.4.33. This vulnerability ma… | Patch early | 7.8 high | 1.5% | 2020-02-13 |
| CVE-2018-10576 EXP | An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Improper authentication handling by the native Ac… | Patch early | 7.8 high | 1.5% | 2018-04-30 |
| CVE-2015-7382 EXP | SQL injection vulnerability in install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary SQL comm… | Patch early | 7.5 high | 1.5% | 2015-09-28 |
| CVE-2002-0740 EXP | Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argu… | Patch early | 7.2 high | 1.5% | 2002-08-12 |
| CVE-2017-12579 EXP | An insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 4.0.24 and earlier allows a non-root user to… | Patch early | 7.8 high | 1.5% | 2017-10-19 |
| CVE-2024-51546 EXP | Credentials Disclosure vulnerabilities allow access to on board project back-up bundles. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXU… | Patch early | 7.5 high | 1.5% | 2024-12-05 |
| CVE-2007-3629 EXP | SQL injection vulnerability in oku.asp in Levent Veysi Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOT… | Patch early | 10.0 high | 1.5% | 2007-07-09 |
| CVE-2016-7384 EXP | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability… | Patch early | 7.8 high | 1.5% | 2016-11-08 |
| CVE-2006-6861 EXP | Multiple SQL injection vulnerabilities in Outfront Spooky Login 2.7 allow remote attackers to execute arbitrary SQL commands via (1) the UserUpdate pa… | Patch early | 10.0 high | 1.5% | 2006-12-31 |
| CVE-2015-2023 EXP | Buffer overflow in IBM i Access 7.1 on Windows allows local users to gain privileges via unspecified vectors. | Patch early | 8.8 high | 1.5% | 2016-01-02 |
| CVE-2012-0289 EXP | Buffer overflow in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.710x and Symantec Network Access Control (SNAC) 11.0.600x through 11.0.71… | Patch early | 7.2 high | 1.5% | 2012-05-23 |
| CVE-2017-3587 EXP | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared Folder). Supported versions that are affected are P… | Patch early | 8.4 high | 1.5% | 2017-04-24 |
| CVE-2005-3838 EXP | Multiple SQL injection vulnerabilities in search.php in IsolSoft Support Center 2.2 and earlier allow remote attackers to execute arbitrary SQL comman… | Patch early | 7.5 high | 1.5% | 2005-11-26 |
| CVE-2002-1447 EXP | Buffer overflow in the vpnclient program for UNIX VPN Client before 3.5.2 allows local users to gain administrative privileges via a long profile name… | Patch early | 7.2 high | 1.5% | 2002-05-28 |
| CVE-2006-3507 EXP | Multiple stack-based buffer overflows in the AirPort wireless driver on Apple Mac OS X 10.3.9 and 10.4.7 allow physically proximate attackers to execu… | Patch early | 7.2 high | 1.5% | 2006-09-21 |
| CVE-2014-9632 EXP | The TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495 Hot Fix 18 and 2015.x before 2015.5315 and Protection before 2015.5315 allows l… | Patch early | 7.2 high | 1.5% | 2015-02-06 |
| CVE-2006-1917 EXP | SQL injection vulnerability in member.php in Blackorpheus ClanMemberSkript 1.0 allows remote attackers to execute arbitrary SQL commands via the userI… | Patch early | 7.5 high | 1.5% | 2006-04-20 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt