CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
425,729 CVEs
1,781 on KEV
17,555 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-14
217,813 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2008-1609 EXP | Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to execute arbitrary PHP code vi… | Patch early | 6.8 medium | 44.3% | 2008-04-01 |
| CVE-2000-0951 EXP | A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web root via a W… | Patch early | 5.0 medium | 44.1% | 2000-12-19 |
| CVE-2005-4145 EXP | The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space ("lyris"… | Patch early | 6.5 medium | 43.9% | 2005-12-10 |
| CVE-2000-0413 EXP | The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP,… | Patch early | 5.0 medium | 43.9% | 2000-05-06 |
| CVE-2020-13693 EXP | An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Registration is enabled. | Patch early | 9.8 critical | 43.9% | 2020-05-29 |
| CVE-2019-8341 EXP | An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the "source" paramet… | Patch early | 9.8 critical | 43.9% | 2019-02-15 |
| CVE-2014-8687 EXP | Seagate Business NAS devices with firmware before 2015.00322 allow remote attackers to execute arbitrary code with root privileges by leveraging use o… | Patch early | 9.8 critical | 43.8% | 2017-06-08 |
| CVE-2019-9618 EXP | The GraceMedia Media Player plugin 1.0 for WordPress allows Local File Inclusion via the "cfg" parameter. | Patch early | 9.8 critical | 43.8% | 2019-05-13 |
| CVE-2016-10074 EXP | The mail transport (aka Swift_Transport_MailTransport) in Swift Mailer before 5.4.5 might allow remote attackers to pass extra parameters to the mail… | Patch early | 9.8 critical | 43.8% | 2016-12-30 |
| CVE-2006-3637 EXP | Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle various HTML layout component combinations, which allows user-assisted remote atta… | Patch early | 5.1 medium | 43.8% | 2006-08-08 |
| CVE-2022-0482 EXP | Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository alextselegidis/easyappointments prior to 1.4.3. | Patch early | 9.1 critical | 43.7% | 2022-03-09 |
| CVE-2018-6317 EXP | The remote management interface in Claymore Dual Miner 10.5 and earlier is vulnerable to an unauthenticated format string vulnerability, allowing remo… | Patch early | 9.1 critical | 43.7% | 2018-02-02 |
| CVE-2021-31642 EXP | A denial of service condition exists after an integer overflow in several IoT devices from CHIYU Technology, including BIOSENSE, Webpass, and BF-630,… | Patch early | 6.5 medium | 43.7% | 2021-06-01 |
| CVE-2018-11510 EXP | The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/apis/aggrecate_js.cgi file by… | Patch early | 9.8 critical | 43.7% | 2018-06-28 |
| CVE-2017-0121 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT… | Patch early | 4.3 medium | 43.6% | 2017-03-17 |
| CVE-2017-10366 EXP | Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Performance Monitor). Supported versi… | Patch early | 9.8 critical | 43.5% | 2017-10-19 |
| CVE-2007-3314 EXP | Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 (English Trial), and 2.0 with Portabl… | Patch early | 6.8 medium | 43.4% | 2007-06-21 |
| CVE-2010-1205 EXP | Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to exe… | Patch early | 9.8 critical | 43.4% | 2010-06-30 |
| CVE-2010-0467 EXP | Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files v… | Patch early | 5.8 medium | 43.3% | 2010-02-02 |
| CVE-2017-11346 EXP | Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload of help desk… | Patch early | 9.8 critical | 43.3% | 2017-07-17 |
| CVE-2016-0169 EXP | GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, a… | Patch early | 6.5 medium | 43.2% | 2016-05-11 |
| CVE-2016-0168 EXP | GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, a… | Patch early | 6.5 medium | 43.2% | 2016-05-11 |
| CVE-2003-0226 EXP | Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request with a (1) PR… | Patch early | 5.0 medium | 43.2% | 2003-06-09 |
| CVE-2017-0061 EXP | The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SP1 allows r… | Patch early | 5.3 medium | 43.1% | 2017-03-17 |
| CVE-2011-1574 EXP | Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary code via a… | Patch early | 6.8 medium | 42.9% | 2011-05-09 |
| CVE-2025-68664 EXP | LangChain is a framework for building agents and LLM-powered applications. Prior to versions 0.3.81 and 1.2.5, a serialization injection vulnerability… | Patch early | 9.3 critical | 42.9% | 2025-12-23 |
| CVE-2014-1610 EXP | MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF file upload support is enabled, allows remote attack… | Patch early | 6.0 medium | 42.8% | 2014-01-30 |
| CVE-2023-2796 EXP | The EventON WordPress plugin before 2.1.2 lacks authentication and authorization in its eventon_ics_download ajax action, allowing unauthenticated vis… | Patch early | 5.3 medium | 42.7% | 2023-07-10 |
| CVE-2020-9374 EXP | On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends spec… | Patch early | 9.8 critical | 42.7% | 2020-02-24 |
| CVE-2009-3028 EXP | The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.… | Patch early | 6.8 medium | 42.6% | 2011-03-07 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt