CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,987 CVEs
1,728 on KEV
17,272 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-29
205,714 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2010-0817 EXP | Cross-site scripting (XSS) vulnerability in _layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and possibly earlier, and SharePoint Se… | Patch early | 4.3 medium | 28.7% | 2010-04-29 |
| CVE-2011-4642 EXP | mappy.py in Splunk Web in Splunk 4.2.x before 4.2.5 does not properly restrict use of the mappy command to access Python classes, which allows remote… | Patch early | 4.6 medium | 28.6% | 2012-01-03 |
| CVE-2013-6720 EXP | Directory traversal vulnerability in download.php in the Passive Capture Application (PCA) web console in IBM Tealeaf CX 7.x, 8.x through 8.6, 8.7 bef… | Patch early | 5.5 medium | 28.6% | 2014-03-06 |
| CVE-2007-2903 EXP | Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control (OUACTRL.OCX) 1.0.1.9 allows rem… | Patch early | 5.0 medium | 28.5% | 2007-05-30 |
| CVE-2010-0211 EXP | The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows rem… | Patch early | 9.8 critical | 28.5% | 2010-07-28 |
| CVE-2019-14974 EXP | SugarCRM Enterprise 9.0.0 allows mobile/error-not-supported-platform.html?desktop_url= XSS. | Patch early | 6.1 medium | 28.4% | 2019-08-14 |
| CVE-2022-31161 EXP | Roxy-WI is a Web interface for managing HAProxy, Nginx and Keepalived servers. Prior to version 6.1.1.0, the system command can be run remotely via th… | Patch early | 10.0 critical | 28.4% | 2022-07-15 |
| CVE-2010-4715 EXP | Multiple directory traversal vulnerabilities in the (1) WebAccess Agent and (2) Document Viewer Agent components in Novell GroupWise before 8.02HP all… | Patch early | 5.0 medium | 28.3% | 2011-01-31 |
| CVE-2009-3270 EXP | Microsoft Internet Explorer 7 through 7.0.6000.16711 allows remote attackers to cause a denial of service (unusable browser) by calling the window.pri… | Patch early | 5.0 medium | 28.2% | 2009-09-18 |
| CVE-2010-0696 EXP | Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos (Jw_allVideos) plugin 3.0 through 3.2 for Joomla! allows remot… | Patch early | 5.0 medium | 28.2% | 2010-02-23 |
| CVE-2003-1566 EXP | Microsoft Internet Information Services (IIS) 5.0 does not log requests that use the TRACK method, which allows remote attackers to obtain sensitive i… | Patch early | 5.0 medium | 28.1% | 2009-01-15 |
| CVE-2011-1137 EXP | Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service (memory consumpt… | Patch early | 5.0 medium | 28.1% | 2011-03-11 |
| CVE-2009-0689 EXP | Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as u… | Patch early | 6.8 medium | 28.1% | 2009-07-01 |
| CVE-2018-12327 EXP | Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges vi… | Patch early | 9.8 critical | 28% | 2018-06-20 |
| CVE-2019-8982 EXP | com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leading to discl… | Patch early | 9.6 critical | 28% | 2019-02-21 |
| CVE-2007-5056 EXP | Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAPID CMF, Jo… | Patch early | 6.8 medium | 27.9% | 2007-09-24 |
| CVE-2008-1145 EXP | Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, when running on systems that suppo… | Patch early | 5.0 medium | 27.8% | 2008-03-04 |
| CVE-2020-28976 EXP | The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and… | Patch early | 5.3 medium | 27.8% | 2020-11-30 |
| CVE-2007-5628 EXP | PHP remote file inclusion vulnerability in src/scripture.php in The Online Web Library Site (TOWels) 0.1 allows remote attackers to execute arbitrary… | Patch early | 6.8 medium | 27.8% | 2007-10-23 |
| CVE-2007-6038 EXP | PHP remote file inclusion vulnerability in xajax_functions.php in the JUser (com_juser) 1.0.14 component for Joomla! allows remote attackers to execut… | Patch early | 6.8 medium | 27.8% | 2007-11-20 |
| CVE-2013-7389 EXP | Multiple cross-site scripting (XSS) vulnerabilities in D-Link DIR-645 Router (Rev. A1) with firmware before 1.04B11 allow remote attackers to inject a… | Patch early | 4.3 medium | 27.8% | 2014-07-07 |
| CVE-2008-4033 EXP | Cross-domain vulnerability in Microsoft XML Core Services 3.0 through 6.0, as used in Microsoft Expression Web, Office, Internet Explorer, and other p… | Patch early | 4.3 medium | 27.7% | 2008-11-12 |
| CVE-2018-1189 EXP | Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a… | Patch early | 4.8 medium | 27.7% | 2018-03-26 |
| CVE-2018-9032 EXP | An authentication bypass vulnerability on D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router (Hardware Version : A1, B1; Firmware Version… | Patch early | 9.8 critical | 27.7% | 2018-03-27 |
| CVE-2007-2353 EXP | Apache Axis 1.0 allows remote attackers to obtain sensitive information by requesting a non-existent WSDL file, which reveals the installation path in… | Patch early | 5.0 medium | 27.7% | 2007-04-30 |
| CVE-2001-0722 EXP | Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript in an about: URL, aka the "First Cookie Handling… | Patch early | 6.4 medium | 27.6% | 2001-12-06 |
| CVE-2019-25024 EXP | OpenRepeater (ORP) before 2.2 allows unauthenticated command injection via shell metacharacters in the functions/ajax_system.php post_service paramete… | Patch early | 9.8 critical | 27.6% | 2021-02-19 |
| CVE-2008-1876 EXP | PHP remote file inclusion vulnerability in index.php in VisualPic 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the _CONFIG… | Patch early | 6.8 medium | 27.6% | 2008-04-17 |
| CVE-2007-5574 EXP | PHP remote file inclusion vulnerability in djpage.php in PHPDJ 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the page paramet… | Patch early | 6.8 medium | 27.6% | 2007-10-18 |
| CVE-2016-3388 EXP | Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain… | Patch early | 5.3 medium | 27.6% | 2016-10-14 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt