CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
399,105 CVEs
1,728 on KEV
17,272 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-29
205,725 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2007-1910 EXP | Buffer overflow in wwlib.dll in Microsoft Word 2007 allows remote attackers to cause a denial of service (application crash) and possibly execute arbi… | Patch early | 6.8 medium | 24.9% | 2007-04-10 |
| CVE-2020-35948 EXP | An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated attackers the ability to modify ar… | Patch early | 9.9 critical | 24.9% | 2021-01-01 |
| CVE-2018-19864 EXP | NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer ove… | Patch early | 9.8 critical | 24.8% | 2018-12-05 |
| CVE-2004-0728 EXP | The Remote Control Client service in Microsoft's Systems Management Server (SMS) 2.50.2726.0 allows remote attackers to cause a denial of service (cra… | Patch early | 5.0 medium | 24.8% | 2004-07-27 |
| CVE-2013-2121 EXP | Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users with permi… | Patch early | 6.0 medium | 24.8% | 2013-07-31 |
| CVE-2019-16119 EXP | SQL injection in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via the admin/controllers/Albumsgalleries.php album… | Patch early | 9.8 critical | 24.8% | 2019-09-08 |
| CVE-2016-5108 EXP | Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers to cause a… | Patch early | 9.8 critical | 24.7% | 2016-06-08 |
| CVE-2006-3880 EXP | Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cause a denial of service (IP sta… | Patch early | 5.0 medium | 24.7% | 2006-07-27 |
| CVE-2017-3061 EXP | Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the SWF parser. Successful exploitation coul… | Patch early | 9.8 critical | 24.7% | 2017-04-12 |
| CVE-2017-3076 EXP | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC module. Successful exploitati… | Patch early | 9.8 critical | 24.7% | 2017-06-20 |
| CVE-2019-5893 EXP | Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter. | Patch early | 9.8 critical | 24.7% | 2019-01-10 |
| CVE-2014-4650 EXP | The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remot… | Patch early | 9.8 critical | 24.7% | 2020-02-20 |
| CVE-2018-4936 EXP | Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Heap Overflow vulnerability. Successful exploitation could lead to information… | Patch early | 6.5 medium | 24.7% | 2018-05-19 |
| CVE-2013-7052 EXP | D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script | Patch early | 9.8 critical | 24.7% | 2020-02-04 |
| CVE-2006-0015 EXP | Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services… | Patch early | 6.8 medium | 24.6% | 2006-04-11 |
| CVE-2016-3645 EXP | Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:S… | Patch early | 9.8 critical | 24.6% | 2016-06-30 |
| CVE-1999-0448 EXP | IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request. | Patch early | 5.0 medium | 24.6% | 1999-01-01 |
| CVE-2017-12787 EXP | A network interface of the novi_process_manager_daemon service, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviS… | Patch early | 9.8 critical | 24.6% | 2017-08-22 |
| CVE-2006-0032 EXP | Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is set to Au… | Patch early | 4.3 medium | 24.6% | 2006-09-12 |
| CVE-2015-2790 EXP | Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a cra… | Patch early | 4.3 medium | 24.5% | 2015-03-30 |
| CVE-2008-5793 EXP | Multiple PHP remote file inclusion vulnerabilities in the Clickheat - Heatmap stats (com_clickheat) component 1.0.1 for Joomla! allow remote attackers… | Patch early | 6.8 medium | 24.5% | 2008-12-31 |
| CVE-2019-13360 EXP | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, remote attackers can bypass authentication in the login process by leveraging knowledge o… | Patch early | 9.8 critical | 24.5% | 2019-07-16 |
| CVE-2018-11652 EXP | CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP respons… | Patch early | 9.8 critical | 24.4% | 2018-06-01 |
| CVE-2013-1592 EXP | A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending specially crafted SAP Message Serve… | Patch early | 9.8 critical | 24.4% | 2020-01-23 |
| CVE-2019-13577 EXP | SnmpAdm.exe in MAPLE WBT SNMP Administrator v2.0.195.15 has an Unauthenticated Remote Buffer Overflow via a long string to the CE Remote feature liste… | Patch early | 9.8 critical | 24.4% | 2019-07-17 |
| CVE-2018-12584 EXP | The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cause a denia… | Patch early | 9.8 critical | 24.3% | 2018-07-16 |
| CVE-2018-6794 EXP | Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c. If a malicious server breaks a normal TCP flow… | Patch early | 5.3 medium | 24.3% | 2018-02-07 |
| CVE-2008-7182 EXP | Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote authenticated users to cause a d… | Patch early | 4.0 medium | 24.3% | 2009-09-08 |
| CVE-2006-3427 EXP | Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by declaring the sourceURL attribute on an uninitialized Di… | Patch early | 5.0 medium | 24.3% | 2006-07-07 |
| CVE-2006-3512 EXP | Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) by setting the Enabled property of a DXTFilter ActiveX… | Patch early | 5.0 medium | 24.3% | 2006-07-11 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt