CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,648 CVEs
1,728 on KEV
17,267 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-28
169,072 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2010-5278 EXP | Directory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx Revolution 2.0.2-pl, and possibly earlier, when magic_quotes… | Patch early | 4.3 medium | 18.6% | 2012-10-07 |
| CVE-2012-0007 EXP | The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate characters after the detection of a Cascading Style S… | Patch early | 4.3 medium | 18.6% | 2012-01-10 |
| CVE-2007-6236 EXP | Microsoft Windows Media Player (WMP) allows remote attackers to cause a denial of service (application crash) via a certain AIFF file that triggers a… | Patch early | 5.0 medium | 18.6% | 2007-12-04 |
| CVE-2010-0520 EXP | Heap-based buffer overflow in QuickTimeAuthoring.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or… | Patch early | 6.8 medium | 18.6% | 2010-03-30 |
| CVE-2018-19877 EXP | login.php in Adiscon LogAnalyzer before 4.1.7 has XSS via the Login Button Referer field. | Patch early | 6.1 medium | 18.6% | 2018-12-05 |
| CVE-2004-1623 EXP | The WAV file property handler in Windows XP SP1 allows remote attackers to cause a denial of service (infinite loop in Explorer) via a WAV file with a… | Patch early | 5.0 medium | 18.6% | 2004-10-22 |
| CVE-2013-1600 EXP | An Authentication Bypass vulnerability exists in upnp/asf-mp4.asf when streaming live video in D-Link TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_T… | Patch early | 5.3 medium | 18.5% | 2020-01-28 |
| CVE-2005-0709 EXP | MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by usi… | Patch early | 4.6 medium | 18.4% | 2005-05-02 |
| CVE-2008-4071 EXP | A certain ActiveX control in Adobe Acrobat 9, when used with Microsoft Windows Vista and Internet Explorer 7, allows remote attackers to cause a denia… | Patch early | 5.0 medium | 18.4% | 2008-09-15 |
| CVE-2008-2905 EXP | PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite package in Mambo 4.6.4 and earlier, when register_globals… | Patch early | 6.8 medium | 18.4% | 2008-06-30 |
| CVE-2025-60689 EXP | An unauthenticated command injection vulnerability exists in the Start_EPI function of the httpd binary on Linksys E1200 v2 routers (Firmware E1200_v2… | Patch early | 5.4 medium | 18.3% | 2025-11-13 |
| CVE-2006-7031 EXP | Microsoft Internet Explorer 6.0.2900 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a table element with a CSS attri… | Patch early | 6.5 medium | 18.3% | 2007-02-23 |
| CVE-2009-1379 EXP | Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to caus… | Patch early | 5.0 medium | 18.2% | 2009-05-19 |
| CVE-2005-3774 EXP | Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP packets that cause the PIX to cre… | Patch early | 5.0 medium | 18.2% | 2005-11-23 |
| CVE-2007-2788 EXP | Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun… | Patch early | 6.8 medium | 18.2% | 2007-05-22 |
| CVE-2021-24275 EXP | The Popup by Supsystic WordPress plugin before 1.10.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, lea… | Patch early | 6.1 medium | 18.2% | 2021-05-05 |
| CVE-2005-0701 EXP | Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via "\\.\\.." (modifi… | Patch early | 5.0 medium | 18.1% | 2005-03-07 |
| CVE-2013-5979 EXP | Directory traversal vulnerability in Spring Signage Xibo 1.2.x before 1.2.3 and 1.4.x before 1.4.2 allows remote attackers to read arbitrary files via… | Patch early | 5.0 medium | 18.1% | 2013-10-02 |
| CVE-2001-0328 EXP | TCP implementations that use random increments for initial sequence numbers (ISN) can allow remote attackers to perform session hijacking or disruptio… | Patch early | 5.0 medium | 18.1% | 2001-06-27 |
| CVE-2006-6601 EXP | Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service via a .MID (MIDI) fi… | Patch early | 4.3 medium | 18.1% | 2006-12-15 |
| CVE-2007-0811 EXP | Microsoft Internet Explorer 6.0 SP1 on Windows 2000, and 6.0 SP2 on Windows XP, allows remote attackers to cause a denial of service (NULL pointer der… | Patch early | 4.3 medium | 18.1% | 2007-02-07 |
| CVE-2014-8801 EXP | Directory traversal vulnerability in services/getfile.php in the Paid Memberships Pro plugin before 1.7.15 for WordPress allows remote attackers to re… | Patch early | 5.0 medium | 18% | 2014-11-28 |
| CVE-2009-0038 EXP | Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow re… | Patch early | 4.3 medium | 18% | 2009-04-17 |
| CVE-2006-2881 EXP | Multiple PHP remote file inclusion vulnerabilities in DreamAccount 3.1 and earlier, when register_globals is enabled, allow remote attackers to execut… | Patch early | 5.1 medium | 18% | 2006-06-07 |
| CVE-2006-3266 EXP | Multiple PHP remote file inclusion vulnerabilities in Bee-hive Lite 1.2 and earlier, when register_globals is enabled, allow remote attackers to execu… | Patch early | 5.1 medium | 18% | 2006-06-27 |
| CVE-2004-0633 EXP | The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abort) via an integer overflow. | Patch early | 5.0 medium | 18% | 2004-12-06 |
| CVE-2021-40651 EXP | OS4Ed OpenSIS Community 8.0 is vulnerable to a local file inclusion vulnerability in Modules.php (modname parameter), which can disclose arbitrary fil… | Patch early | 6.5 medium | 17.9% | 2021-09-29 |
| CVE-2010-2091 EXP | Microsoft Outlook Web Access (OWA) 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id parameter in a… | Patch early | 4.3 medium | 17.9% | 2010-05-27 |
| CVE-2006-5646 EXP | Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.1… | Patch early | 5.0 medium | 17.9% | 2006-11-01 |
| CVE-2017-0062 EXP | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 201… | Patch early | 4.7 medium | 17.8% | 2017-03-17 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt