CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,929 CVEs
1,728 on KEV
17,272 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-29
205,684 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2002-0325 EXP | Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the URL. | Patch early | 5.0 medium | 37.8% | 2002-06-25 |
| CVE-2007-1683 EXP | Stack-based buffer overflow in the DoWebMenuAction function in the IncrediMail IMMenuShellExt ActiveX control (ImShExt.dll) allows remote attackers to… | Patch early | 6.8 medium | 37.7% | 2007-04-26 |
| CVE-2002-1561 EXP | The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service) via a ma… | Patch early | 5.0 medium | 37.7% | 2003-04-02 |
| CVE-2008-1416 EXP | Multiple PHP remote file inclusion vulnerabilities in PHPauction GPL 2.51 allow remote attackers to execute arbitrary PHP code via a URL in the includ… | Patch early | 6.8 medium | 37.7% | 2008-03-20 |
| CVE-2008-1405 EXP | PHP remote file inclusion vulnerability in code/display.php in fuzzylime (cms) 3.01 allows remote attackers to execute arbitrary PHP code via a URL in… | Patch early | 6.8 medium | 37.7% | 2008-03-20 |
| CVE-2008-6829 EXP | VicFTPS 5.0 allows remote attackers to cause a denial of service (crash) via a LIST command that starts with a "/\/" (forward slash, backward slash, f… | Patch early | 5.0 medium | 37.6% | 2009-06-08 |
| CVE-2007-5457 EXP | Multiple PHP remote file inclusion vulnerabilities in Michael Dempfle Joomla Flash Uploader (com_jfu or com_joomla_flash_uploader) 2.5.1 component for… | Patch early | 6.8 medium | 37.6% | 2007-10-14 |
| CVE-2007-5412 EXP | Multiple PHP remote file inclusion vulnerabilities in the Quoc-Huy MP3 Allopass (com_mp3_allopass) 1.0 component for Joomla! allow remote attackers to… | Patch early | 6.8 medium | 37.5% | 2007-10-12 |
| CVE-2007-5843 EXP | PHP remote file inclusion vulnerability in includes/common.php in scWiki 1.0 Beta 2 allows remote attackers to execute arbitrary PHP code via a URL in… | Patch early | 6.8 medium | 37.5% | 2007-11-06 |
| CVE-2007-1232 EXP | Directory traversal vulnerability in SQLiteManager 1.2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in a SQLiteManager_current… | Patch early | 5.1 medium | 37.5% | 2007-03-03 |
| CVE-2011-1892 EXP | Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2007 SP2, Office Shar… | Patch early | 4.0 medium | 37.5% | 2011-09-15 |
| CVE-2007-3382 EXP | Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ("'") as delimiters in cookies… | Patch early | 4.3 medium | 37.5% | 2007-08-14 |
| CVE-2014-5007 EXP | Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop Central Managed Service Provid… | Patch early | 9.8 critical | 37.3% | 2020-01-17 |
| CVE-2022-25359 EXP | On ICL ScadaFlex II SCADA Controller SC-1 and SC-2 1.03.07 devices, unauthenticated remote attackers can overwrite, delete, or create files. | Patch early | 9.1 critical | 37.3% | 2022-02-26 |
| CVE-2022-24629 EXP | An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. Remote code execution can be achieved via directory traversal in… | Patch early | 9.8 critical | 37.2% | 2023-05-29 |
| CVE-2016-3074 EXP | Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or potentiall… | Patch early | 9.8 critical | 37.2% | 2016-04-26 |
| CVE-2014-8686 EXP | CodeIgniter before 2.2.0 makes it easier for attackers to decode session cookies by leveraging fallback to a custom XOR-based encryption scheme when t… | Patch early | 9.8 critical | 37.2% | 2017-09-19 |
| CVE-2004-0095 EXP | McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service (memory consumption and crash) and possibly execute arbitrary c… | Patch early | 5.0 medium | 37.2% | 2004-02-17 |
| CVE-2018-14064 EXP | The uc-http service 1.0.0 on VelotiSmart WiFi B-380 camera devices allows Directory Traversal, as demonstrated by /../../etc/passwd on TCP port 80. | Patch early | 9.8 critical | 37.2% | 2018-07-15 |
| CVE-2008-0423 EXP | Multiple PHP remote file inclusion vulnerabilities in Lama Software allow remote attackers to execute arbitrary PHP code via a URL in the MY_CONF[clas… | Patch early | 6.8 medium | 37.1% | 2008-01-23 |
| CVE-2015-8351 EXP | PHP remote file inclusion vulnerability in the Gwolle Guestbook plugin before 1.5.4 for WordPress, when allow_url_include is enabled, allows remote au… | Patch early | 9.0 critical | 37% | 2017-09-11 |
| CVE-2002-0023 EXP | Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetObject function, which bypass som… | Patch early | 5.0 medium | 37% | 2002-03-08 |
| CVE-2014-7883 EXP | HP Universal CMDB (UCMDB) Probe 9.05, 10.01, and 10.11 enables the HTTP TRACE method, which allows remote attackers to obtain sensitive information by… | Patch early | 5.0 medium | 37% | 2015-02-15 |
| CVE-2016-3115 EXP | Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command… | Patch early | 6.4 medium | 37% | 2016-03-22 |
| CVE-2007-1525 EXP | Direct static code injection vulnerability in postpost.php in Dayfox Blog (dfblog) 4 allows remote attackers to execute arbitrary PHP code via the cat… | Patch early | 6.8 medium | 37% | 2007-03-20 |
| CVE-2008-1074 EXP | PHP remote file inclusion vulnerability in lib/head_auth.php in GROUP-E 1.6.41 allows remote attackers to execute arbitrary PHP code via a URL in the… | Patch early | 6.8 medium | 36.9% | 2008-02-29 |
| CVE-2019-2588 EXP | Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported vers… | Patch early | 4.9 medium | 36.8% | 2019-04-23 |
| CVE-2016-0120 EXP | The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gol… | Patch early | 6.5 medium | 36.7% | 2016-03-09 |
| CVE-2019-6814 EXP | A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 which could cause impact to conf… | Patch early | 9.8 critical | 36.7% | 2019-05-22 |
| CVE-2017-16887 EXP | The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized… | Patch early | 9.8 critical | 36.6% | 2018-01-12 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt