CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
425,729 CVEs
1,781 on KEV
17,555 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-14
217,813 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2007-5217 EXP | Stack-based buffer overflow in the ADM4 ActiveX control in adm4.dll in Altnet Download Manager 4.0.0.6, as used in (1) Kazaa 3.2.7 and (2) Grokster, a… | Patch early | 6.8 medium | 30% | 2007-10-05 |
| CVE-2018-1189 EXP | Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a… | Patch early | 4.8 medium | 30% | 2018-03-26 |
| CVE-2007-1499 EXP | Microsoft Internet Explorer 7.0 on Windows XP and Vista allows remote attackers to conduct phishing attacks and possibly execute arbitrary code via a… | Patch early | 4.3 medium | 30% | 2007-03-17 |
| CVE-2007-4955 EXP | PHP remote file inclusion vulnerability in admin.joomlaflashfun.php in the Flash Fun! (com_joomlaflashfun) 1.0 component for Joomla! allows remote att… | Patch early | 6.8 medium | 30% | 2007-09-18 |
| CVE-2017-0561 EXP | A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the context of th… | Patch early | 9.8 critical | 29.8% | 2017-04-07 |
| CVE-2011-5052 EXP | Stack-based buffer overflow in CoCSoft Stream Down 6.8.0 allows remote web servers to execute arbitrary code via a long response to a download request… | Patch early | 6.8 medium | 29.7% | 2012-01-04 |
| CVE-1999-0070 EXP | test-cgi program allows an attacker to list files on the server. | Patch early | 5.0 medium | 29.6% | 1996-04-01 |
| CVE-2017-5173 EXP | An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An im… | Patch early | 9.8 critical | 29.6% | 2017-05-19 |
| CVE-2012-6664 EXP | Multiple directory traversal vulnerabilities in the TFTP Server in Distinct Intranet Servers 3.10 and earlier allow remote attackers to read or write… | Patch early | 9.1 critical | 29.5% | 2024-06-21 |
| CVE-2004-1856 EXP | devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to upload arbitrary files to the pr… | Patch early | 5.0 medium | 29.5% | 2004-03-24 |
| CVE-2008-0492 EXP | Stack-based buffer overflow in the Persits.XUpload.2 ActiveX control in XUpload.ocx 3.0.0.4 and earlier in Persits XUpload 3.0 allows remote attackers… | Patch early | 6.8 medium | 29.5% | 2008-01-30 |
| CVE-2018-16059 EXP | Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename parameter. | Patch early | 5.3 medium | 29.5% | 2018-09-07 |
| CVE-2020-14011 EXP | Lansweeper 6.0.x through 7.2.x has a default installation in which the admin password is configured for the admin account, unless "Built-in admin" is… | Patch early | 9.8 critical | 29.5% | 2020-06-15 |
| CVE-2009-0689 EXP | Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as u… | Patch early | 6.8 medium | 29.4% | 2009-07-01 |
| CVE-2007-5775 EXP | Unspecified vulnerability in BitDefender allows attackers to execute arbitrary code via unspecified vectors, aka EEYEB-20071024. NOTE: as of 20071029… | Patch early | 9.8 critical | 29.4% | 2007-11-01 |
| CVE-2007-3670 EXP | Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered, allows re… | Patch early | 4.3 medium | 29.4% | 2007-07-10 |
| CVE-2016-2385 EXP | Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER and SER) before 4.3.5 allows re… | Patch early | 9.8 critical | 29.2% | 2016-04-11 |
| CVE-2017-1130 EXP | IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it would open up many file select dia… | Patch early | 6.5 medium | 29.2% | 2017-09-05 |
| CVE-2017-11517 EXP | Stack-based buffer overflow in GCoreServer.exe in the server in Geutebrueck Gcore 1.3.8.42 and 1.4.2.37 allows remote attackers to execute arbitrary c… | Patch early | 9.8 critical | 29.1% | 2017-07-21 |
| CVE-2013-6720 EXP | Directory traversal vulnerability in download.php in the Passive Capture Application (PCA) web console in IBM Tealeaf CX 7.x, 8.x through 8.6, 8.7 bef… | Patch early | 5.5 medium | 29.1% | 2014-03-06 |
| CVE-2019-7274 EXP | Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root. | Patch early | 9.8 critical | 29% | 2019-07-01 |
| CVE-2002-0191 EXP | Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to view arbitrary files that contain the "{" character via script containing the… | Patch early | 5.0 medium | 29% | 2002-05-29 |
| CVE-2007-5387 EXP | PHP remote file inclusion vulnerability in active/components/xmlrpc/client.php in Pindorama 0.1 allows remote attackers to execute arbitrary PHP code… | Patch early | 6.8 medium | 28.9% | 2007-10-12 |
| CVE-2008-1069 EXP | Multiple PHP remote file inclusion vulnerabilities in Quantum Game Library 0.7.2c allow remote attackers to execute arbitrary PHP code via a URL in th… | Patch early | 6.8 medium | 28.9% | 2008-02-28 |
| CVE-2013-3238 EXP | phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a /e\x00 sequence, which is not… | Patch early | 6.0 medium | 28.9% | 2013-04-26 |
| CVE-2016-6897 EXP | Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 al… | Patch early | 6.5 medium | 28.8% | 2017-01-18 |
| CVE-2022-31161 EXP | Roxy-WI is a Web interface for managing HAProxy, Nginx and Keepalived servers. Prior to version 6.1.1.0, the system command can be run remotely via th… | Patch early | 10.0 critical | 28.8% | 2022-07-15 |
| CVE-2008-0533 EXP | Multiple cross-site scripting (XSS) vulnerabilities in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access… | Patch early | 4.3 medium | 28.8% | 2008-03-14 |
| CVE-2013-5015 EXP | SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4… | Patch early | 6.5 medium | 28.8% | 2014-02-14 |
| CVE-2007-4954 EXP | PHP remote file inclusion vulnerability in admin.joom12pic.php in the joom12Pic (com_joom12pic) 1.0 component for Joomla! allows remote attackers to e… | Patch early | 6.8 medium | 28.7% | 2007-09-18 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt