CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,692 CVEs
1,728 on KEV
17,267 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-28
205,558 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2018-6328 EXP | It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, which then could allow an unaut… | Patch early | 9.8 critical | 64.4% | 2018-03-14 |
| CVE-2016-2296 EXP | Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pages, which allows remote attack… | Patch early | 9.4 critical | 64.3% | 2016-05-14 |
| CVE-2018-7297 EXP | Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to obtain read/write access a… | Patch early | 9.8 critical | 64.3% | 2018-02-22 |
| CVE-2007-3524 EXP | Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote attackers to execute arbitrary PHP code via… | Patch early | 6.8 medium | 64.2% | 2007-07-03 |
| CVE-2007-2939 EXP | Multiple PHP remote file inclusion vulnerabilities in Mazen's PHP Chat 3.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the bas… | Patch early | 6.8 medium | 64% | 2007-05-31 |
| CVE-2017-9417 EXP | Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpwn" issue. | Patch early | 9.8 critical | 64% | 2017-06-04 |
| CVE-2012-5067 EXP | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect c… | Patch early | 5.0 medium | 64% | 2012-10-16 |
| CVE-2014-5350 EXP | Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via a (1) ..… | Patch early | 5.0 medium | 63.9% | 2014-08-19 |
| CVE-2017-11165 EXP | dataTaker DT80 dEX 1.50.012 allows remote attackers to obtain sensitive credential and configuration information via a direct request for the /service… | Patch early | 9.8 critical | 63.9% | 2017-07-12 |
| CVE-2006-3726 EXP | Buffer overflow in FileCOPA FTP Server before 1.01 released on 18th July 2006, allows remote authenticated attackers to execute arbitrary code via a l… | Patch early | 6.5 medium | 63.7% | 2006-07-21 |
| CVE-2005-1939 EXP | Directory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers to read arbitrary files via ".." (dot dot) sequences… | Patch early | 5.0 medium | 63.6% | 2005-12-31 |
| CVE-2003-0245 EXP | Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.45 allows remote attackers to ca… | Patch early | 5.0 medium | 63.5% | 2003-06-09 |
| CVE-2018-9948 EXP | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction… | Patch early | 6.5 medium | 63.1% | 2018-05-17 |
| CVE-2018-16283 EXP | The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter. | Patch early | 9.8 critical | 63.1% | 2018-09-24 |
| CVE-2012-0911 EXP | TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the (1)… | Patch early | 9.8 critical | 63% | 2012-07-12 |
| CVE-2026-0740 EXP | The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'NF_FU_AJAX_Con… | Patch early | 9.8 critical | 62.9% | 2026-04-07 |
| CVE-2024-8522 EXP | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_only_fields' parameter of the /wp-json/learnpress… | Patch early | 10.0 critical | 62.9% | 2024-09-12 |
| CVE-2007-3220 EXP | PHP remote file inclusion vulnerability in admin/editor2/spaw_control.class.php in the Cjay Content 3 module for XOOPS allows remote attackers to exec… | Patch early | 6.8 medium | 62.7% | 2007-06-14 |
| CVE-2023-34096 EXP | Thruk is a multibackend monitoring webinterface which currently supports Naemon, Icinga, Shinken and Nagios as backends. In versions 3.06 and prior, t… | Patch early | 6.5 medium | 62.7% | 2023-06-08 |
| CVE-2007-5333 EXP | Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (") characters or (2) %5C… | Patch early | 5.0 medium | 62.6% | 2008-02-12 |
| CVE-2019-13396 EXP | FlightPath 4.x and 5.0-x allows directory traversal and Local File Inclusion through the form_include parameter in an index.php?q=system-handle-form-s… | Patch early | 5.3 medium | 62.6% | 2019-07-10 |
| CVE-2000-0760 EXP | The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL wi… | Patch early | 6.4 medium | 62.5% | 2000-10-20 |
| CVE-2015-1793 EXP | The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraint… | Patch early | 6.5 medium | 62.4% | 2015-07-09 |
| CVE-2012-2329 EXP | Buffer overflow in the apache_request_headers function in sapi/cgi/cgi_main.c in PHP 5.4.x before 5.4.3 allows remote attackers to cause a denial of s… | Patch early | 5.0 medium | 62.3% | 2012-05-11 |
| CVE-2006-4446 EXP | Heap-based buffer overflow in DirectAnimation.PathControl COM object (daxctle.ocx) in Microsoft Internet Explorer 6.0 SP1 allows remote attackers to c… | Patch early | 5.0 medium | 62.2% | 2006-08-30 |
| CVE-2012-2982 EXP | file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as d… | Patch early | 6.5 medium | 62.2% | 2012-09-11 |
| CVE-2017-6622 EXP | A vulnerability in the web interface for Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to bypass authenticati… | Patch early | 9.8 critical | 62.2% | 2017-05-18 |
| CVE-2006-4318 EXP | Buffer overflow in WFTPD Server 3.23 allows remote attackers to execute arbitrary code via long SIZE commands. | Patch early | 6.5 medium | 62.1% | 2006-08-24 |
| CVE-2005-2120 EXP | Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or loca… | Patch early | 6.5 medium | 62% | 2005-10-13 |
| CVE-2022-24223 EXP | AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php. | Patch early | 9.8 critical | 62% | 2022-02-01 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt