CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
425,750 CVEs
1,781 on KEV
17,555 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-14
425,751 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2009-2335 EXP | WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt depending on whether the user account exists, which allo… | Patch early | 5.0 medium | 85% | 2009-07-10 |
| CVE-2019-7214 EXP | SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. An unauthenticated attacker could run commands on the server… | Patch early | 9.8 critical | 84.9% | 2019-04-24 |
| CVE-2003-0772 EXP | Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via long… | Patch early | 7.5 high | 84.9% | 2003-09-22 |
| CVE-2004-0493 EXP | The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an… | Patch early | 6.4 medium | 84.8% | 2004-08-06 |
| CVE-2023-28343 EXP | OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/set_timezone timezone parame… | Patch early | 9.8 critical | 84.8% | 2023-03-14 |
| CVE-2023-39362 EXP | Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, under certain conditions, an authenticated privileged… | Patch early | 7.2 high | 84.8% | 2023-09-05 |
| CVE-2002-0649 EXP | Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to c… | Patch early | 7.5 high | 84.8% | 2002-08-12 |
| CVE-2015-6132 EXP | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Go… | Patch early | 7.2 high | 84.7% | 2015-12-09 |
| CVE-2007-3925 EXP | Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute a… | Patch early | 6.5 medium | 84.7% | 2007-07-21 |
| CVE-2005-2278 EXP | Stack-based buffer overflow in the IMAP daemon (imapd) in MailEnable Professional 1.54 allows remote authenticated users to execute arbitrary code via… | Patch early | 7.2 high | 84.6% | 2005-07-18 |
| CVE-2009-0075 EXP | Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arb… | Patch early | 9.3 high | 84.6% | 2009-02-10 |
| CVE-2003-0201 EXP | Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3… | Patch early | 10.0 high | 84.6% | 2003-05-05 |
| CVE-2020-8656 EXP | An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform v… | Patch early | 9.8 critical | 84.6% | 2020-02-07 |
| CVE-2014-0556 EXP | Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on… | Patch early | 10.0 high | 84.6% | 2014-09-10 |
| CVE-2013-6955 EXP | webman/imageSelector.cgi in Synology DiskStation Manager (DSM) 4.0 before 4.0-2259, 4.2 before 4.2-3243, and 4.3 before 4.3-3810 Update 1 allows remot… | Patch early | 10.0 high | 84.6% | 2014-01-09 |
| CVE-2013-3214 EXP | vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'. | Patch early | 9.8 critical | 84.5% | 2020-01-28 |
| CVE-2015-1830 EXP | Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows a… | Patch early | 5.0 medium | 84.4% | 2015-08-19 |
| CVE-2013-7285 EXP | Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary… | Patch early | 9.8 critical | 84.4% | 2019-05-15 |
| CVE-2025-47916 EXP | Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php. The issue lies within the themeedi… | Patch early | 10.0 critical | 84.3% | 2025-05-16 |
| CVE-2010-3563 EXP | Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidenti… | Patch early | 10.0 high | 84.3% | 2010-10-19 |
| CVE-2014-6037 EXP | Directory traversal vulnerability in the agentUpload servlet in ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 allows remote at… | Patch early | 7.5 high | 84.2% | 2014-10-26 |
| CVE-2015-2857 EXP | Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metacharacters in the oauth_token pa… | Patch early | 9.8 critical | 84.2% | 2017-08-22 |
| CVE-2018-17552 EXP | SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigate-user cookie. | Patch early | 9.8 critical | 84.1% | 2018-10-03 |
| CVE-2022-28368 EXP | Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field of an @font-face Cascading Style Sheets (CSS) statement (within an HTML… | Patch early | 9.8 critical | 83.9% | 2022-04-03 |
| CVE-2018-17431 EXP | Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL. | Patch early | 9.8 critical | 83.9% | 2019-01-30 |
| CVE-2005-3252 EXP | Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to execute arbitrary code via a craft… | Patch early | 7.5 high | 83.9% | 2005-10-18 |
| CVE-2009-2265 EXP | Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable files in arbitrary directories vi… | Patch early | 7.5 high | 83.9% | 2009-07-05 |
| CVE-2020-10879 EXP | rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nodeId parameter is passed direct… | Patch early | 9.8 critical | 83.9% | 2020-03-23 |
| CVE-2019-12314 EXP | Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH_INFO, as demonstrated by a cgi-bin/Maco… | Patch early | 9.8 critical | 83.8% | 2019-05-24 |
| CVE-2025-58434 EXP | Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5 and earlier, the `forgot-password` endpoint… | Patch early | 9.8 critical | 83.8% | 2025-09-12 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt