CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
425,729 CVEs
1,781 on KEV
17,555 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-14
197,459 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2011-3923 EXP | Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands. | Patch early | 9.8 critical | 89.5% | 2019-11-01 |
| CVE-2016-2776 EXP | buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which all… | Patch early | 7.5 high | 89.5% | 2016-09-28 |
| CVE-2018-15708 EXP | Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request. | Patch early | 9.8 critical | 89.5% | 2018-11-14 |
| CVE-2018-14417 EXP | A command injection vulnerability was found in the web administration console in SoftNAS Cloud before 4.0.3. In particular, the snserv script did not… | Patch early | 9.8 critical | 89.4% | 2018-08-04 |
| CVE-2013-1359 EXP | An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Ma… | Patch early | 9.8 critical | 89.4% | 2020-02-11 |
| CVE-2022-24716 EXP | Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of… | Patch early | 7.5 high | 89.4% | 2022-03-08 |
| CVE-2019-5420 EXP | A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess the automatically generated deve… | Patch early | 9.8 critical | 89.3% | 2019-03-27 |
| CVE-2015-2342 EXP | The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans… | Patch early | 10.0 high | 89% | 2015-10-12 |
| CVE-2011-1865 EXP | Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute ar… | Patch early | 10.0 high | 88.9% | 2011-07-01 |
| CVE-2020-8794 EXP | OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies. Although this… | Patch early | 9.8 critical | 88.9% | 2020-02-25 |
| CVE-2018-1000006 EXP | GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically El… | Patch early | 8.8 high | 88.8% | 2018-01-24 |
| CVE-2019-2729 EXP | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected a… | Patch early | 9.8 critical | 88.8% | 2019-06-19 |
| CVE-2003-0722 EXP | The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSui… | Patch early | 10.0 high | 88.8% | 2003-09-22 |
| CVE-2011-1653 EXP | Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote attackers to e… | Patch early | 10.0 high | 88.7% | 2011-04-18 |
| CVE-2015-0240 EXP | The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5… | Patch early | 10.0 high | 88.2% | 2015-02-24 |
| CVE-2021-24145 EXP | Arbitrary file upload in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly check the imported file, allowing… | Patch early | 7.2 high | 88.2% | 2021-03-18 |
| CVE-2021-20837 EXP | Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.5002 and… | Patch early | 9.8 critical | 88.1% | 2021-10-26 |
| CVE-2020-35729 EXP | KLog Server 2.4.1 allows OS command injection via shell metacharacters in the actions/authenticate.php user parameter. | Patch early | 9.8 critical | 88.1% | 2020-12-27 |
| CVE-2018-1000115 EXP | Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UDP support o… | Patch early | 7.5 high | 88% | 2018-03-05 |
| CVE-2022-30781 EXP | Gitea before 1.16.7 does not escape git fetch remote. | Patch early | 7.5 high | 87.9% | 2022-05-16 |
| CVE-2017-17411 EXP | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0. Authentication is not required to e… | Patch early | 9.8 critical | 87.9% | 2017-12-21 |
| CVE-2009-0658 EXP | Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF docu… | Patch early | 7.8 high | 87.8% | 2009-02-20 |
| CVE-2020-8605 EXP | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute arbitrary code on affected installat… | Patch early | 8.8 high | 87.8% | 2020-05-27 |
| CVE-2009-1429 EXP | The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Se… | Patch early | 10.0 high | 87.7% | 2009-04-29 |
| CVE-2017-11610 EXP | The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to exe… | Patch early | 8.8 high | 87.5% | 2017-08-23 |
| CVE-2024-43425 EXP | A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requir… | Patch early | 8.1 high | 87.5% | 2024-11-07 |
| CVE-2018-5999 EXP | An issue was discovered in AsusWRT before 3.0.0.4.384_10007. In the handle_request function in router/httpd/httpd.c, processing of POST requests conti… | Patch early | 9.8 critical | 87.5% | 2018-01-22 |
| CVE-2019-11409 EXP | app/operator_panel/exec.php in the Operator Panel module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input vali… | Patch early | 8.8 high | 87.5% | 2019-06-17 |
| CVE-2013-2028 EXP | The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash)… | Patch early | 7.5 high | 87.5% | 2013-07-20 |
| CVE-2004-2687 EXP | distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary c… | Patch early | 9.3 high | 87.4% | 2004-12-31 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt