CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,917 CVEs
1,728 on KEV
17,272 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-29
169,175 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2019-14750 EXP | An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It was observed that no input sani… | Patch early | 6.1 medium | 10.9% | 2019-08-07 |
| CVE-2009-5018 EXP | Stack-based buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to execute arbitrary code via a long com… | Patch early | 6.8 medium | 10.9% | 2011-01-14 |
| CVE-2011-5106 EXP | Cross-site scripting (XSS) vulnerability in edit-post.php in the Flexible Custom Post Type plugin before 0.1.7 for WordPress allows remote attackers t… | Patch early | 4.3 medium | 10.9% | 2012-08-23 |
| CVE-2007-4897 EXP | pwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service (application crash) via a long argumen… | Patch early | 5.0 medium | 10.9% | 2007-09-14 |
| CVE-2007-3406 EXP | Multiple absolute path traversal vulnerabilities in Microsoft Internet Explorer 6 on Windows XP SP2 allow remote attackers to access arbitrary local f… | Patch early | 4.3 medium | 10.9% | 2007-06-26 |
| CVE-2013-1670 EXP | The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderb… | Patch early | 4.3 medium | 10.9% | 2013-05-16 |
| CVE-2003-0619 EXP | Integer signedness error in the decode_fh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers to cause a denial of service (ke… | Patch early | 5.0 medium | 10.9% | 2003-08-27 |
| CVE-2010-4259 EXP | Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitra… | Patch early | 6.8 medium | 10.9% | 2010-12-07 |
| CVE-2000-1105 EXP | The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines t… | Patch early | 4.3 medium | 10.8% | 2001-01-09 |
| CVE-2008-3269 EXP | WRPCServer.exe in WinSoftMagic WinRemotePC (WRPC) Lite 2008 and Full 2008 allows remote attackers to cause a denial of service (CPU consumption) via a… | Patch early | 5.0 medium | 10.8% | 2008-07-24 |
| CVE-2012-5875 EXP | Firefly Media Server 1.0.0.1359 allows remote attackers to cause a denial of service (NULL pointer dereference) via a (1) crafted Connection HTTP head… | Patch early | 5.0 medium | 10.8% | 2013-01-18 |
| CVE-2006-2769 EXP | The HTTP Inspect preprocessor (http_inspect) in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent" rules via a carriage return (… | Patch early | 5.0 medium | 10.8% | 2006-06-02 |
| CVE-2010-0287 EXP | Directory traversal vulnerability in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to list the… | Patch early | 5.0 medium | 10.8% | 2010-02-15 |
| CVE-2009-0755 EXP | The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF file with… | Patch early | 5.0 medium | 10.8% | 2009-03-03 |
| CVE-2009-5022 EXP | Heap-based buffer overflow in tif_ojpeg.c in the OJPEG decoder in LibTIFF before 3.9.5 allows remote attackers to execute arbitrary code via a crafted… | Patch early | 6.8 medium | 10.8% | 2011-05-03 |
| CVE-2005-1278 EXP | The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop)… | Patch early | 5.0 medium | 10.8% | 2005-05-02 |
| CVE-2006-5826 EXP | Buffer overflow in Texas Imperial Software WFTPD Pro Server 3.23.1.1 allows remote authenticated users to execute arbitrary code or cause a denial of… | Patch early | 5.8 medium | 10.8% | 2006-11-10 |
| CVE-2001-0199 EXP | Directory traversal vulnerability in SEDUM HTTP Server 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the HTTP GET r… | Patch early | 5.0 medium | 10.8% | 2001-05-03 |
| CVE-2003-0125 EXP | Buffer overflow in the web interface for SOHO Routefinder 550 before firmware 4.63 allows remote attackers to cause a denial of service (reboot) and e… | Patch early | 5.0 medium | 10.8% | 2003-03-18 |
| CVE-2004-1392 EXP | PHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbitrary files via a file: URL argument to the curl_i… | Patch early | 5.0 medium | 10.8% | 2004-12-31 |
| CVE-2012-0056 EXP | The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, w… | Patch early | 6.9 medium | 10.8% | 2012-01-27 |
| CVE-2012-3236 EXP | fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed X… | Patch early | 4.3 medium | 10.7% | 2012-07-12 |
| CVE-2007-3806 EXP | The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an invalid valu… | Patch early | 6.8 medium | 10.7% | 2007-07-17 |
| CVE-2010-1299 EXP | Multiple PHP remote file inclusion vulnerabilities in DynPG CMS 4.1.0, and possibly earlier, when magic_quotes_gpc is disabled and register_globals is… | Patch early | 5.1 medium | 10.7% | 2010-04-07 |
| CVE-2014-9218 EXP | libraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.7, 4.1.x before 4.1.14.8, and 4.2.x before 4.2.13.1 allows remote attackers to cause a deni… | Patch early | 5.0 medium | 10.7% | 2014-12-08 |
| CVE-2015-2682 EXP | Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via a direct request to conf/secur… | Patch early | 5.0 medium | 10.7% | 2015-03-26 |
| CVE-2004-2364 EXP | Cross-site request forgery (CSRF) vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary commands via URLs that are auto… | Patch early | 5.0 medium | 10.7% | 2004-12-31 |
| CVE-2024-27612 EXP | Numbas editor before 7.3 mishandles editing of themes and extensions. | Patch early | 6.2 medium | 10.7% | 2024-03-08 |
| CVE-2017-7461 EXP | Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows remote attac… | Patch early | 4.9 medium | 10.7% | 2017-04-11 |
| CVE-2021-24405 EXP | The Easy Cookies Policy WordPress plugin through 1.6.2 is lacking any capability and CSRF check when saving its settings, allowing any authenticated u… | Patch early | 6.5 medium | 10.7% | 2021-07-06 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt