CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,935 CVEs
1,728 on KEV
17,272 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-29
149,009 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2012-5932 EXP | Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allow… | Patch early | 10.0 high | 62.8% | 2012-12-24 |
| CVE-2009-4660 EXP | Stack-based buffer overflow in the AntServer Module (AntServer.exe) in BigAnt IM Server 2.50 allows remote attackers to execute arbitrary code via a l… | Patch early | 10.0 high | 62.7% | 2010-03-03 |
| CVE-2004-0964 EXP | Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via cer… | Patch early | 10.0 high | 62.7% | 2005-02-09 |
| CVE-2015-1171 EXP | Stack-based buffer overflow in GSM SIM Utility (aka SIM Card Editor) 6.6 allows remote attackers to execute arbitrary code via a long entry in a .sms… | Patch early | 10.0 high | 62.7% | 2015-08-28 |
| CVE-2011-1220 EXP | Stack-based buffer overflow in lcfd.exe in Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 allows remote authenticated… | Patch early | 9.0 high | 62.7% | 2011-06-02 |
| CVE-2017-11914 EXP | ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the cur… | Patch early | 7.5 high | 62.6% | 2017-12-12 |
| CVE-2017-11918 EXP | ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as t… | Patch early | 7.5 high | 62.6% | 2017-12-12 |
| CVE-2013-4822 EXP | Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent Management System Software Module (aka BIMS) allows… | Patch early | 10.0 high | 62.6% | 2013-10-13 |
| CVE-2013-4837 EXP | Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vector… | Patch early | 10.0 high | 62.6% | 2013-11-04 |
| CVE-2007-2708 EXP | PHP remote file inclusion vulnerability in newsadmin.php in Feindt Computerservice News (News-Script) 2.0 allows remote attackers to execute arbitrary… | Patch early | 7.5 high | 62.6% | 2007-05-16 |
| CVE-2004-0798 EXP | Buffer overflow in the _maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1 allows remote attackers to execute arbitrary code via a l… | Patch early | 7.5 high | 62.6% | 2004-10-20 |
| CVE-2009-0323 EXP | Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrary code via (1) a long type para… | Patch early | 10.0 high | 62.5% | 2009-01-28 |
| CVE-2018-8617 EXP | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scri… | Patch early | 7.5 high | 62.5% | 2018-12-12 |
| CVE-2014-8423 EXP | Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute arbitrary commands via unknown v… | Patch early | 10.0 high | 62.5% | 2014-11-28 |
| CVE-2010-1555 EXP | Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arb… | Patch early | 10.0 high | 62.4% | 2010-05-13 |
| CVE-2011-5003 EXP | Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier allows remote attackers to exec… | Patch early | 10.0 high | 62.4% | 2011-12-25 |
| CVE-2017-11839 EXP | Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to take control of… | Patch early | 7.5 high | 62.4% | 2017-11-15 |
| CVE-2009-3699 EXP | Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlie… | Patch early | 10.0 high | 62.3% | 2009-10-15 |
| CVE-2006-5780 EXP | Stack-based buffer overflow in nfsd.exe in XLink Omni-NFS Server 5.2 allows remote attackers to execute arbitrary code via a crafted TCP packet to por… | Patch early | 7.5 high | 62.3% | 2006-11-07 |
| CVE-2014-3888 EXP | Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc… | Patch early | 8.3 high | 62.3% | 2014-07-10 |
| CVE-2017-9080 EXP | PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed. sendfromfile.php has a combination of Unre… | Patch early | 8.8 high | 62.3% | 2017-05-19 |
| CVE-2012-0124 EXP | Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to ex… | Patch early | 10.0 high | 62.3% | 2012-03-14 |
| CVE-2018-9958 EXP | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is requi… | Patch early | 8.8 high | 62.3% | 2018-05-17 |
| CVE-2018-7422 EXP | A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the… | Patch early | 7.5 high | 62.3% | 2018-03-19 |
| CVE-2006-3252 EXP | Buffer overflow in the Online Registration Facility for Algorithmic Research PrivateWire VPN software up to 3.7 allows remote attackers to execute arb… | Patch early | 7.5 high | 62.2% | 2006-06-27 |
| CVE-2001-0779 EXP | Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username. | Patch early | 10.0 high | 62.2% | 2001-10-18 |
| CVE-2009-2532 EXP | Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process the command value in an SMB Mul… | Patch early | 10.0 high | 62.2% | 2009-10-14 |
| CVE-2018-8384 EXP | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scri… | Patch early | 7.5 high | 62.1% | 2018-08-15 |
| CVE-2004-0735 EXP | Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b and earlier, and (3) Spearhead 2.15 and earlier, when… | Patch early | 7.5 high | 62.1% | 2004-07-27 |
| CVE-2009-1136 EXP | The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, Office XP W… | Patch early | 9.3 high | 62% | 2009-07-15 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt