CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
425,729 CVEs
1,781 on KEV
17,555 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-14
338,128 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2013-1081 EXP | Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management (ZMM) 2.6.1 and 2.7.0 allows remote attackers to include and execute… | Patch early | 7.5 high | 68.1% | 2013-03-11 |
| CVE-2006-1652 EXP | Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-assisted remote attackers to exec… | Patch early | 9.0 high | 68% | 2006-04-06 |
| CVE-2017-11809 EXP | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in… | Patch early | 7.5 high | 68% | 2017-10-13 |
| CVE-2007-3358 EXP | PHP remote file inclusion vulnerability in html/load_lang.php in SerWeb 0.9.6 and earlier allows remote attackers to execute arbitrary PHP code via a… | Patch early | 6.8 medium | 68% | 2007-06-22 |
| CVE-2008-5180 EXP | Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service (memory consumption) via… | Patch early | 5.3 medium | 68% | 2008-11-20 |
| CVE-2006-2086 EXP | Buffer overflow in JuniperSetupDLL.dll, loaded from JuniperSetup.ocx by the Juniper SSL-VPN Client when accessing a Juniper NetScreen IVE device runni… | Patch early | 7.5 high | 68% | 2006-04-29 |
| CVE-2013-7409 EXP | Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via… | Patch early | 7.5 high | 67.9% | 2014-10-30 |
| CVE-2018-8355 EXP | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Me… | Patch early | 7.5 high | 67.9% | 2018-08-15 |
| CVE-2010-0480 EXP | Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1… | Patch early | 9.3 high | 67.9% | 2010-04-14 |
| CVE-2001-0151 EXP | IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests. | Patch early | 5.0 medium | 67.9% | 2001-06-02 |
| CVE-2018-0775 EXP | Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine han… | Patch early | 7.5 high | 67.9% | 2018-01-04 |
| CVE-2018-0774 EXP | Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine han… | Patch early | 7.5 high | 67.9% | 2018-01-04 |
| CVE-2007-3230 EXP | PHP remote file inclusion vulnerability in phphtml.php in Idan Sofer PHP::HTML 0.6.4 allows remote attackers to execute arbitrary PHP code via a URL i… | Patch early | 6.8 medium | 67.9% | 2007-06-14 |
| CVE-2004-0574 EXP | The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server… | Patch early | 10.0 high | 67.8% | 2004-11-03 |
| CVE-2007-3221 EXP | PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the XT-Conteudo module for XOOPS allows remote attackers to execute ar… | Patch early | 6.8 medium | 67.8% | 2007-06-14 |
| CVE-2011-4051 EXP | CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows rem… | Patch early | 10.0 high | 67.8% | 2011-12-05 |
| CVE-2014-8799 EXP | Directory traversal vulnerability in the dp_img_resize function in php/dp-functions.php in the DukaPress plugin before 2.5.4 for WordPress allows remo… | Patch early | 5.0 medium | 67.7% | 2014-11-28 |
| CVE-2005-0803 EXP | The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service (application crash) via a craft… | Patch early | 5.0 medium | 67.7% | 2005-05-02 |
| CVE-2010-3970 EXP | Stack-based buffer overflow in the CreateSizedDIBSECTION function in shimgvw.dll in the Windows Shell graphics processor (aka graphics rendering engin… | Patch early | 9.3 high | 67.7% | 2010-12-22 |
| CVE-2011-0654 EXP | Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System (CIFS) browser service in Mrxsmb.sys or bowser.sys in Ac… | Patch early | 10.0 high | 67.7% | 2011-02-16 |
| CVE-2005-1099 EXP | Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is listening on a network interfac… | Patch early | 10.0 high | 67.7% | 2005-04-12 |
| CVE-2007-3237 EXP | PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the TinyContent 1.5 module for XOOPS allows remote attackers to execut… | Patch early | 6.8 medium | 67.7% | 2007-06-15 |
| CVE-2008-1611 EXP | Stack-based buffer overflow in TFTP Server SP 1.4 for Windows allows remote attackers to cause a denial of service or execute arbitrary code via a lon… | Patch early | 10.0 high | 67.6% | 2008-04-01 |
| CVE-2006-6251 EXP | Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long string in an M3U file, aka an "M… | Patch early | 7.5 high | 67.6% | 2006-12-04 |
| CVE-2012-4957 EXP | Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD req… | Patch early | 7.8 high | 67.6% | 2012-11-18 |
| CVE-2014-0783 EXP | Stack-based buffer overflow in BKHOdeq.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a cra… | Patch early | 9.0 high | 67.6% | 2014-03-14 |
| CVE-2017-8548 EXP | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to further comprom… | Patch early | 7.5 high | 67.6% | 2017-06-15 |
| CVE-2013-5014 EXP | The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protecti… | Patch early | 7.5 high | 67.6% | 2014-02-14 |
| CVE-2004-0396 EXP | Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute a… | Patch early | 7.5 high | 67.5% | 2004-06-14 |
| CVE-2006-3524 EXP | Buffer overflow in SIPfoundry sipXtapi released before 20060324 allows remote attackers to execute arbitrary code via a long CSeq field value in an IN… | Patch early | 7.5 high | 67.5% | 2006-07-12 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt