CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
425,751 CVEs
1,781 on KEV
17,555 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-14
217,816 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2003-0002 EXP | Cross-site scripting vulnerability (XSS) in ManualLogin.asp script for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to exec… | Patch early | 6.8 medium | 23.3% | 2003-02-07 |
| CVE-2025-24071 EXP | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network… | Patch early | 6.5 medium | 23.3% | 2025-03-11 |
| CVE-2013-5528 EXP | Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users… | Patch early | 4.0 medium | 23.3% | 2013-10-11 |
| CVE-2016-9682 EXP | The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web administrati… | Patch early | 9.8 critical | 23.3% | 2017-02-22 |
| CVE-2005-3120 EXP | Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article… | Patch early | 9.8 critical | 23.3% | 2005-10-17 |
| CVE-2017-0085 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 23.2% | 2017-03-17 |
| CVE-2017-0091 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 23.2% | 2017-03-17 |
| CVE-2017-0092 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 23.2% | 2017-03-17 |
| CVE-2017-0111 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 23.2% | 2017-03-17 |
| CVE-2017-0112 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 23.2% | 2017-03-17 |
| CVE-2017-0113 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 23.2% | 2017-03-17 |
| CVE-2017-0114 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 23.2% | 2017-03-17 |
| CVE-2017-0115 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 23.2% | 2017-03-17 |
| CVE-2017-0116 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 23.2% | 2017-03-17 |
| CVE-2017-0117 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 23.2% | 2017-03-17 |
| CVE-2017-0119 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 23.2% | 2017-03-17 |
| CVE-2017-0122 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 23.2% | 2017-03-17 |
| CVE-2017-0123 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 23.2% | 2017-03-17 |
| CVE-2017-0124 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 23.2% | 2017-03-17 |
| CVE-2017-0125 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 23.2% | 2017-03-17 |
| CVE-2017-0126 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 23.2% | 2017-03-17 |
| CVE-2017-0127 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 23.2% | 2017-03-17 |
| CVE-2017-0128 EXP | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive informatio… | Patch early | 4.3 medium | 23.2% | 2017-03-17 |
| CVE-2018-11652 EXP | CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP respons… | Patch early | 9.8 critical | 23.2% | 2018-06-01 |
| CVE-2013-1360 EXP | An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Ma… | Patch early | 9.8 critical | 23.2% | 2020-02-11 |
| CVE-1999-0980 EXP | Windows NT Service Control Manager (SCM) allows remote attackers to cause a denial of service via a malformed argument in a resource enumeration reque… | Patch early | 5.0 medium | 23.2% | 2000-05-16 |
| CVE-2008-0503 EXP | Eval injection vulnerability in admin/op/disp.php in Netwerk Smart Publisher 1.0.1 allows remote attackers to execute arbitrary PHP code via the filed… | Patch early | 6.8 medium | 23.2% | 2008-01-31 |
| CVE-2009-1287 EXP | Cross-site scripting (XSS) vulnerability in Cisco Subscriber Edge Services Manager (SESM) allows remote attackers to inject arbitrary web script or HT… | Patch early | 4.3 medium | 23.1% | 2009-04-13 |
| CVE-2019-7265 EXP | Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH). | Patch early | 9.8 critical | 23.1% | 2019-07-02 |
| CVE-2021-44567 EXP | An unauthenticated SQL Injection vulnerability exists in RosarioSIS before 7.6.1 via the votes parameter in ProgramFunctions/PortalPollsNotes.fnc.php. | Patch early | 9.8 critical | 23.1% | 2022-02-24 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt