CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,603 CVEs
1,728 on KEV
17,267 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-28
148,920 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2018-1000115 EXP | Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UDP support o… | Patch early | 7.5 high | 88.1% | 2018-03-05 |
| CVE-2015-0240 EXP | The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5… | Patch early | 10.0 high | 88% | 2015-02-24 |
| CVE-2022-30781 EXP | Gitea before 1.16.7 does not escape git fetch remote. | Patch early | 7.5 high | 87.9% | 2022-05-16 |
| CVE-2009-0658 EXP | Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF docu… | Patch early | 7.8 high | 87.8% | 2009-02-20 |
| CVE-2020-8605 EXP | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute arbitrary code on affected installat… | Patch early | 8.8 high | 87.8% | 2020-05-27 |
| CVE-2009-1429 EXP | The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Se… | Patch early | 10.0 high | 87.7% | 2009-04-29 |
| CVE-2024-43425 EXP | A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requir… | Patch early | 8.1 high | 87.5% | 2024-11-07 |
| CVE-2019-11409 EXP | app/operator_panel/exec.php in the Operator Panel module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input vali… | Patch early | 8.8 high | 87.5% | 2019-06-17 |
| CVE-2013-2028 EXP | The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash)… | Patch early | 7.5 high | 87.5% | 2013-07-20 |
| CVE-2017-11610 EXP | The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to exe… | Patch early | 8.8 high | 87.4% | 2017-08-23 |
| CVE-2000-1209 EXP | The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, inclu… | Patch early | 10.0 high | 87.3% | 2002-08-12 |
| CVE-2013-1488 EXP | The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to execute arbitr… | Patch early | 10.0 high | 87.2% | 2013-03-08 |
| CVE-2021-24145 EXP | Arbitrary file upload in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly check the imported file, allowing… | Patch early | 7.2 high | 87.2% | 2021-03-18 |
| CVE-2015-3864 EXP | Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M all… | Patch early | 10.0 high | 87.1% | 2015-10-01 |
| CVE-2012-0779 EXP | Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and befo… | Patch early | 9.3 high | 87.1% | 2012-05-04 |
| CVE-2008-5416 EXP | Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SP4; SQL Se… | Patch early | 9.0 high | 87% | 2008-12-10 |
| CVE-2005-2611 EXP | VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4… | Patch early | 10.0 high | 87% | 2005-08-17 |
| CVE-2017-16894 EXP | In Laravel framework through 5.5.21, remote attackers can obtain sensitive information (such as externally usable passwords) via a direct request for… | Patch early | 7.5 high | 86.9% | 2017-11-20 |
| CVE-2004-2111 EXP | Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via a long fil… | Patch early | 8.5 high | 86.9% | 2004-12-31 |
| CVE-2005-4360 EXP | The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code v… | Patch early | 7.8 high | 86.7% | 2005-12-20 |
| CVE-2010-0483 EXP | vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, al… | Patch early | 7.6 high | 86.6% | 2010-03-03 |
| CVE-2015-2996 EXP | Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitrary files via a .. (dot dot) in… | Patch early | 8.5 high | 86.5% | 2015-06-08 |
| CVE-2018-1999002 EXP | A arbitrary file read vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in the Stapler web framework's org/kohsuke/stapler/Staple… | Patch early | 7.5 high | 86.5% | 2018-07-23 |
| CVE-2006-5444 EXP | Integer overflow in the get_input function in the Skinny channel driver (chan_skinny.c) in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as us… | Patch early | 7.5 high | 86.5% | 2006-10-23 |
| CVE-2003-0085 EXP | Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remot… | Patch early | 10.0 high | 86.4% | 2003-03-31 |
| CVE-2011-2110 EXP | Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android, allows remote attackers to exe… | Patch early | 10.0 high | 86.4% | 2011-06-16 |
| CVE-2005-0773 EXP | Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allows remote a… | Patch early | 7.5 high | 86.4% | 2005-06-18 |
| CVE-2020-14295 EXP | A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution b… | Patch early | 7.2 high | 86.3% | 2020-06-17 |
| CVE-2013-1493 EXP | The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and… | Patch early | 10.0 high | 86.2% | 2013-03-05 |
| CVE-2005-4560 EXP | The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a Windows Metafi… | Patch early | 7.5 high | 86.1% | 2005-12-28 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt