CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
425,632 CVEs
1,781 on KEV
17,555 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-13
179,205 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2006-2025 EXP | Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of servi… | Patch early | 6.5 medium | 10.8% | 2006-04-25 |
| CVE-2003-0125 EXP | Buffer overflow in the web interface for SOHO Routefinder 550 before firmware 4.63 allows remote attackers to cause a denial of service (reboot) and e… | Patch early | 5.0 medium | 10.8% | 2003-03-18 |
| CVE-2004-1392 EXP | PHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbitrary files via a file: URL argument to the curl_i… | Patch early | 5.0 medium | 10.8% | 2004-12-31 |
| CVE-2012-3236 EXP | fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed X… | Patch early | 4.3 medium | 10.7% | 2012-07-12 |
| CVE-2007-3806 EXP | The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an invalid valu… | Patch early | 6.8 medium | 10.7% | 2007-07-17 |
| CVE-2010-1299 EXP | Multiple PHP remote file inclusion vulnerabilities in DynPG CMS 4.1.0, and possibly earlier, when magic_quotes_gpc is disabled and register_globals is… | Patch early | 5.1 medium | 10.7% | 2010-04-07 |
| CVE-2020-8615 EXP | A CSRF vulnerability in the Tutor LMS plugin before 1.5.3 for WordPress can result in an attacker approving themselves as an instructor and performing… | Patch early | 6.5 medium | 10.7% | 2020-02-04 |
| CVE-2015-2682 EXP | Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via a direct request to conf/secur… | Patch early | 5.0 medium | 10.7% | 2015-03-26 |
| CVE-2004-2364 EXP | Cross-site request forgery (CSRF) vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary commands via URLs that are auto… | Patch early | 5.0 medium | 10.7% | 2004-12-31 |
| CVE-2024-27612 EXP | Numbas editor before 7.3 mishandles editing of themes and extensions. | Patch early | 6.2 medium | 10.7% | 2024-03-08 |
| CVE-2017-7461 EXP | Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows remote attac… | Patch early | 4.9 medium | 10.7% | 2017-04-11 |
| CVE-2021-24405 EXP | The Easy Cookies Policy WordPress plugin through 1.6.2 is lacking any capability and CSRF check when saving its settings, allowing any authenticated u… | Patch early | 6.5 medium | 10.7% | 2021-07-06 |
| CVE-2006-4438 EXP | Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote attackers to execute arbitrary co… | Patch early | 6.4 medium | 10.7% | 2006-09-20 |
| CVE-2013-2621 EXP | Open Redirection Vulnerability in the redir.php script in Telaen before 1.3.1 allows remote attackers to redirect victims to arbitrary websites via a… | Patch early | 6.1 medium | 10.7% | 2020-02-03 |
| CVE-2007-4924 EXP | The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial… | Patch early | 5.0 medium | 10.7% | 2007-10-08 |
| CVE-2017-3133 EXP | A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unauthorized code or commands via the… | Patch early | 6.1 medium | 10.7% | 2017-09-12 |
| CVE-2019-12922 EXP | A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page. | Patch early | 6.5 medium | 10.7% | 2019-09-13 |
| CVE-2002-1077 EXP | IPSwitch IMail Web Calendaring service (iwebcal) allows remote attackers to cause a denial of service (crash) via an HTTP POST request without a Conte… | Patch early | 5.0 medium | 10.7% | 2002-10-04 |
| CVE-2009-3115 EXP | SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service (service stop) via a crafted Option Acknowledgement… | Patch early | 5.0 medium | 10.7% | 2009-09-09 |
| CVE-2001-0253 EXP | Directory traversal vulnerability in hsx.cgi program in iWeb Hyperseek 2000 allows remote attackers to read arbitrary files and directories via a .. (… | Patch early | 5.0 medium | 10.6% | 2001-06-02 |
| CVE-2004-2442 EXP | Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earlier, MIMEs… | Patch early | 5.0 medium | 10.6% | 2004-12-31 |
| CVE-2008-6080 EXP | Directory traversal vulnerability in download.php in the ionFiles (com_ionfiles) 4.4.2 component for Joomla! allows remote attackers to read arbitrary… | Patch early | 5.0 medium | 10.6% | 2009-02-06 |
| CVE-2004-1986 EXP | Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileg… | Patch early | 5.0 medium | 10.6% | 2004-04-04 |
| CVE-2009-0369 EXP | Microsoft Internet Explorer 7 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted elemen… | Patch early | 4.3 medium | 10.6% | 2009-01-30 |
| CVE-2011-2522 EXP | Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attacke… | Patch early | 6.8 medium | 10.6% | 2011-07-29 |
| CVE-2003-0195 EXP | CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port (631), which does not time out. | Patch early | 5.0 medium | 10.6% | 2003-06-16 |
| CVE-2014-1889 EXP | The Group creation process in the Buddypress plugin before 1.9.2 for WordPress allows remote authenticated users to gain control of arbitrary groups b… | Patch early | 6.5 medium | 10.6% | 2018-04-10 |
| CVE-2006-4844 EXP | PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other products,… | Patch early | 5.1 medium | 10.6% | 2006-09-19 |
| CVE-2006-2224 EXP | RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify rout… | Patch early | 5.0 medium | 10.6% | 2006-05-05 |
| CVE-2013-7204 EXP | Cross-site request forgery (CSRF) vulnerability in set_users.cgi in Conceptronic CIPCAMPTIWL Camera 1.0 with firmware 21.37.2.49 allows remote attacke… | Patch early | 6.8 medium | 10.6% | 2014-01-17 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt