CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
425,729 CVEs
1,781 on KEV
17,555 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-14
338,128 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2019-12181 EXP | A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux. | Patch early | 8.8 high | 65.4% | 2019-06-17 |
| CVE-2014-2624 EXP | Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vecto… | Patch early | 10.0 high | 65.4% | 2014-09-11 |
| CVE-2008-3558 EXP | Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before 20.2008.2606.4919 allows remot… | Patch early | 9.3 high | 65.4% | 2008-08-08 |
| CVE-2009-3869 EXP | Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK an… | Patch early | 9.3 high | 65.4% | 2009-11-05 |
| CVE-2012-3399 EXP | Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter. | Patch early | 7.5 high | 65.3% | 2012-07-12 |
| CVE-2018-0835 EXP | Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how t… | Patch early | 7.5 high | 65.3% | 2018-02-15 |
| CVE-2018-0837 EXP | Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how t… | Patch early | 7.5 high | 65.3% | 2018-02-15 |
| CVE-2018-0838 EXP | Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how t… | Patch early | 7.5 high | 65.3% | 2018-02-15 |
| CVE-2008-2161 EXP | Buffer overflow in TFTP Server SP 1.4 and 1.5 on Windows, and possibly other versions, allows remote attackers to execute arbitrary code via a long TF… | Patch early | 10.0 high | 65.3% | 2008-05-12 |
| CVE-2011-4040 EXP | Buffer overflow in MiniSmtp 3.0.11818 in NJStar Communicator allows remote attackers to execute arbitrary code via a crafted packet. | Patch early | 10.0 high | 65.3% | 2011-11-21 |
| CVE-2002-1744 EXP | Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbi… | Patch early | 5.0 medium | 65.2% | 2002-12-31 |
| CVE-2008-0935 EXP | Stack-based buffer overflow in the Novell iPrint Control ActiveX control in ienipp.ocx in Novell iPrint Client before 4.34 allows remote attackers to… | Patch early | 10.0 high | 65.1% | 2008-02-25 |
| CVE-2003-1200 EXP | Stack-based buffer overflow in FORM2RAW.exe in Alt-N MDaemon 6.5.2 through 6.8.5 allows remote attackers to execute arbitrary code via a long From par… | Patch early | 7.5 high | 65.1% | 2003-12-29 |
| CVE-2008-4322 EXP | Stack-based buffer overflow in RealFlex Technologies Ltd. RealWin Server 2.0, as distributed by DATAC, allows remote attackers to execute arbitrary co… | Patch early | 10.0 high | 65.1% | 2008-09-29 |
| CVE-2006-0900 EXP | nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demonstrated by the ProtoVer NFS t… | Patch early | 7.8 high | 65.1% | 2006-02-27 |
| CVE-2007-1689 EXP | Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attac… | Patch early | 10.0 high | 65% | 2007-05-16 |
| CVE-2025-27218 EXP | Sitecore Experience Manager (XM) and Experience Platform (XP) 10.4 before KB1002844 allow remote code execution through insecure deserialization. | Patch early | 5.3 medium | 65% | 2025-02-20 |
| CVE-2015-0802 EXP | Mozilla Firefox before 37.0 relies on docshell type information instead of page principal information for Window.webidl access control, which might al… | Patch early | 5.0 medium | 65% | 2015-04-01 |
| CVE-2014-5519 EXP | The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a device option in the edit[content… | Patch early | 7.5 high | 65% | 2014-09-11 |
| CVE-2011-3167 EXP | Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vec… | Patch early | 10.0 high | 65% | 2011-11-02 |
| CVE-2012-1876 EXP | Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allows remote attackers to execute… | Patch early | 9.3 high | 65% | 2012-06-12 |
| CVE-2008-0455 EXP | Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and ear… | Patch early | 4.3 medium | 64.9% | 2008-01-25 |
| CVE-2005-0491 EXP | Stack-based buffer overflow in Knox Arkeia Server Backup 5.3.x allows remote attackers to execute arbitrary code via a long type 77 request. | Patch early | 10.0 high | 64.9% | 2005-05-02 |
| CVE-2016-7203 EXP | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrup… | Patch early | 7.5 high | 64.9% | 2016-11-10 |
| CVE-2012-4705 EXP | Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving… | Patch early | 10.0 high | 64.9% | 2013-02-24 |
| CVE-2015-6973 EXP | Multiple cross-site request forgery (CSRF) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to hijack the authentication of a… | Patch early | 6.8 medium | 64.8% | 2015-09-16 |
| CVE-2005-3190 EXP | Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to execute arb… | Patch early | 7.5 high | 64.8% | 2005-10-13 |
| CVE-2008-2240 EXP | Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to cause a d… | Patch early | 10.0 high | 64.8% | 2008-05-22 |
| CVE-1999-0278 EXP | In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL. | Patch early | 5.0 medium | 64.8% | 1998-06-01 |
| CVE-2011-0404 EXP | Stack-based buffer overflow in NetSupport Manager Agent for Linux 11.00, for Solaris 9.50, and for Mac OS X 11.00 allows remote attackers to execute a… | Patch early | 7.5 high | 64.7% | 2011-01-11 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt