CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,935 CVEs
1,728 on KEV
17,272 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-29
169,186 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2006-0647 EXP | LDAP service in Sun Java System Directory Server 5.2, running on Linux and possibly other platforms, allows remote attackers to cause a denial of serv… | Patch early | 5.0 medium | 9.9% | 2006-02-13 |
| CVE-2000-0594 EXP | BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a… | Patch early | 5.0 medium | 9.9% | 2000-07-04 |
| CVE-2015-5161 EXP | The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when running under PH… | Patch early | 6.8 medium | 9.9% | 2015-08-25 |
| CVE-2004-1389 EXP | Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4… | Patch early | 6.0 medium | 9.9% | 2004-12-31 |
| CVE-2010-3879 EXP | FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a s… | Patch early | 5.8 medium | 9.8% | 2011-01-22 |
| CVE-2006-2323 EXP | Multiple PHP remote file inclusion vulnerabilities in SmartISoft phpListPro 2.01 and earlier allow remote attackers to execute arbitrary PHP code via… | Patch early | 5.1 medium | 9.8% | 2006-05-12 |
| CVE-2019-8390 EXP | qdPM 9.1 suffers from Cross-site Scripting (XSS) in the search[keywords] parameter. | Patch early | 6.1 medium | 9.8% | 2019-05-14 |
| CVE-2011-0708 EXP | exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of se… | Patch early | 4.3 medium | 9.8% | 2011-03-20 |
| CVE-2006-2894 EXP | Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and other versions before 1.1.5, and Netscape 8.1 and ear… | Patch early | 4.0 medium | 9.8% | 2006-06-07 |
| CVE-1999-1110 EXP | Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error code when a file does not exist, which allows remote mal… | Patch early | 5.0 medium | 9.8% | 1999-11-14 |
| CVE-2020-24609 EXP | TechKshetra Info Solutions Pvt. Ltd Savsoft Quiz 5.5 and earlier has XSS which can result in an attacker injecting the XSS payload in the User Registr… | Patch early | 6.1 medium | 9.8% | 2020-08-25 |
| CVE-2008-3680 EXP | The decryption function in Flagship Industries Ventrilo 3.0.2 and earlier allows remote attackers to cause a denial of service (NULL pointer dereferen… | Patch early | 5.0 medium | 9.8% | 2008-08-14 |
| CVE-2009-4489 EXP | header.c in Cherokee before 0.99.32 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modif… | Patch early | 5.0 medium | 9.8% | 2010-01-13 |
| CVE-2012-0996 EXP | Multiple directory traversal vulnerabilities in 11in1 1.2.1 stable 12-31-2011 allow remote attackers to read arbitrary files via a .. (dot dot) in the… | Patch early | 5.0 medium | 9.8% | 2012-02-24 |
| CVE-2015-6830 EXP | libraries/plugins/auth/AuthenticationCookie.class.php in phpMyAdmin 4.3.x before 4.3.13.2 and 4.4.x before 4.4.14.1 allows remote attackers to bypass… | Patch early | 5.0 medium | 9.8% | 2015-09-14 |
| CVE-2002-0543 EXP | Directory traversal vulnerability in Aprelium Abyss Web Server (abyssws) before 1.0.0.2 allows remote attackers to read files outside the web root, in… | Patch early | 5.0 medium | 9.8% | 2002-07-03 |
| CVE-2014-4663 EXP | TimThumb 2.8.13 and WordThumb 1.07, when Webshot (aka Webshots) is enabled, allows remote attackers to execute arbitrary commands via shell metacharac… | Patch early | 6.8 medium | 9.8% | 2014-07-15 |
| CVE-2006-2026 EXP | Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service (crash) and possibly e… | Patch early | 6.5 medium | 9.7% | 2006-04-25 |
| CVE-2000-0908 EXP | BrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long Authorization or Referer MIME he… | Patch early | 5.0 medium | 9.7% | 2000-12-19 |
| CVE-2004-0958 EXP | php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that… | Patch early | 5.0 medium | 9.7% | 2004-11-03 |
| CVE-2006-3682 EXP | awstats.pl in AWStats 6.5 build 1.857 and earlier allows remote attackers to obtain the installation path via the (1) year, (2) pluginmode or (3) mont… | Patch early | 5.0 medium | 9.7% | 2006-07-21 |
| CVE-2021-40352 EXP | OpenEMR 6.0.0 has a pnotes_print.php?noteid= Insecure Direct Object Reference vulnerability via which an attacker can read the messages of all users. | Patch early | 6.5 medium | 9.7% | 2021-09-01 |
| CVE-2012-4514 EXP | rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a c… | Patch early | 5.0 medium | 9.7% | 2012-11-11 |
| CVE-2000-0179 EXP | HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555. | Patch early | 5.0 medium | 9.7% | 2000-02-28 |
| CVE-2010-1316 EXP | Multiple stack-based buffer overflows in Tembria Server Monitor before 5.6.1 allow remote attackers to cause a denial of service (daemon crash) or pos… | Patch early | 5.0 medium | 9.7% | 2010-04-14 |
| CVE-2010-1813 EXP | WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (memory cor… | Patch early | 6.8 medium | 9.7% | 2010-09-09 |
| CVE-2016-3542 EXP | Unspecified vulnerability in the Oracle Knowledge Management component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 a… | Patch early | 6.5 medium | 9.7% | 2016-07-21 |
| CVE-2019-1943 EXP | A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Switches software could allow an unauthenticated, remote attacke… | Patch early | 4.7 medium | 9.7% | 2019-07-17 |
| CVE-2003-0169 EXP | hpnst.exe in the GoAhead-Webs webserver for HP Instant TopTools before 5.55 allows remote attackers to cause a denial of service (CPU consumption) via… | Patch early | 5.0 medium | 9.7% | 2003-04-11 |
| CVE-2008-3408 EXP | Stack-based buffer overflow in CoolPlayer 2.18, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a cra… | Patch early | 6.8 medium | 9.7% | 2008-07-31 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt