CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,929 CVEs
1,728 on KEV
17,272 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-29
205,684 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2016-6435 EXP | The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files via crafted parameters, aka Bug I… | Patch early | 6.5 medium | 36.6% | 2016-10-06 |
| CVE-2008-6504 EXP | ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not properly… | Patch early | 5.0 medium | 36.6% | 2009-03-23 |
| CVE-2011-5130 EXP | dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers to execute arbitrary commands v… | Patch early | 6.8 medium | 36.6% | 2012-08-30 |
| CVE-2007-5800 EXP | Multiple PHP remote file inclusion vulnerabilities in the BackUpWordPress 0.4.2b and earlier plugin for WordPress allow remote attackers to execute ar… | Patch early | 6.8 medium | 36.5% | 2007-11-03 |
| CVE-2007-5362 EXP | Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite (com_mosmedia) 4.5.1 component for Mambo and Joomla! all… | Patch early | 6.8 medium | 36.5% | 2007-10-11 |
| CVE-2017-14322 EXP | The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior to 6.1.6 allows remote attacke… | Patch early | 9.8 critical | 36.5% | 2017-10-18 |
| CVE-2019-17671 EXP | In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled. | Patch early | 5.3 medium | 36.5% | 2019-10-17 |
| CVE-2021-46424 EXP | Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system int… | Patch early | 9.1 critical | 36.5% | 2022-04-27 |
| CVE-2014-8499 EXP | Multiple SQL injection vulnerabilities in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition bef… | Patch early | 6.5 medium | 36.4% | 2014-11-17 |
| CVE-2012-0393 EXP | The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to cr… | Patch early | 6.4 medium | 36.3% | 2012-01-08 |
| CVE-2018-6580 EXP | Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! via a view=upload&task=upload&pop=true&tmpl=component request. | Patch early | 9.8 critical | 36.3% | 2018-02-02 |
| CVE-2014-6036 EXP | Directory traversal vulnerability in the multipartRequest servlet in ZOHO ManageEngine OpManager 11.3 and earlier, Social IT Plus 11.0, and IT360 10.3… | Patch early | 6.4 medium | 36.3% | 2014-12-04 |
| CVE-2007-2581 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoint Server… | Patch early | 4.3 medium | 36.2% | 2007-05-09 |
| CVE-2002-0659 EXP | The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encoding… | Patch early | 5.0 medium | 36.2% | 2002-08-12 |
| CVE-2003-0231 EXP | Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long request to a… | Patch early | 5.0 medium | 36.2% | 2003-08-27 |
| CVE-2015-6835 EXP | The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, which allow… | Patch early | 9.8 critical | 36.2% | 2016-05-16 |
| CVE-2013-4976 EXP | Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials | Patch early | 9.8 critical | 36.1% | 2019-12-27 |
| CVE-1999-1412 EXP | A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash) via a flo… | Patch early | 5.0 medium | 35.9% | 1999-06-03 |
| CVE-2006-5162 EXP | wininet.dll in Microsoft Internet Explorer 6.0 SP2 and earlier allows remote attackers to cause a denial of service (unhandled exception and crash) vi… | Patch early | 5.0 medium | 35.9% | 2006-10-05 |
| CVE-2014-8998 EXP | lib/message.php in X7 Chat 2.0.0 through 2.0.5.1 allows remote authenticated users to execute arbitrary PHP code via a crafted HTTP header to index.ph… | Patch early | 6.5 medium | 35.9% | 2014-11-20 |
| CVE-2000-0097 EXP | The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vuln… | Patch early | 5.0 medium | 35.9% | 2000-01-26 |
| CVE-2008-5626 EXP | XM Easy Personal FTP Server 5.6.0 allows remote authenticated users to cause a denial of service via a crafted argument to the NLST command, as demons… | Patch early | 4.0 medium | 35.9% | 2008-12-17 |
| CVE-2021-43936 EXP | The software allows the attacker to upload or transfer files of dangerous types to the WebHMI portal, that may be automatically processed within the p… | Patch early | 10.0 critical | 35.8% | 2021-12-06 |
| CVE-2004-2074 EXP | Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string specifiers in the (1) PASS or… | Patch early | 5.0 medium | 35.8% | 2004-12-31 |
| CVE-2006-1516 EXP | The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to read… | Patch early | 5.0 medium | 35.8% | 2006-05-05 |
| CVE-2021-31251 EXP | An authentication bypass in telnet server in BF-430 and BF431 232/422 TCP/IP Converter, BF-450M and SEMAC from CHIYU Technology Inc allows obtaining a… | Patch early | 9.8 critical | 35.7% | 2021-06-04 |
| CVE-2012-6330 EXP | The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows remote attackers to cause a den… | Patch early | 5.0 medium | 35.7% | 2013-01-04 |
| CVE-1999-1575 EXP | The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb.ocx), (5)… | Patch early | 5.1 medium | 35.6% | 1999-09-10 |
| CVE-2005-2119 EXP | The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) allocates a 4K page of memory regard… | Patch early | 5.0 medium | 35.5% | 2005-10-12 |
| CVE-2014-0038 EXP | The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privile… | Patch early | 6.9 medium | 35.5% | 2014-02-06 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt