CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
425,729 CVEs
1,781 on KEV
17,555 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-14
197,459 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2020-35848 EXP | Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function. | Patch early | 9.8 critical | 74.6% | 2020-12-30 |
| CVE-2017-8046 EXP | Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1) and Spri… | Patch early | 9.8 critical | 74.5% | 2018-01-04 |
| CVE-2013-7390 EXP | Unrestricted file upload vulnerability in AgentLogUploadServlet in ManageEngine DesktopCentral 7.x and 8.0.0 before build 80293 allows remote attacker… | Patch early | 9.8 critical | 74.5% | 2020-01-27 |
| CVE-2007-3370 EXP | Multiple PHP remote file inclusion vulnerabilities in Sun Board 1.00.00 Alpha allow remote attackers to execute arbitrary PHP code via a URL in (1) th… | Patch early | 7.5 high | 74.5% | 2007-06-22 |
| CVE-2012-5159 EXP | phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an externally introduced modificat… | Patch early | 7.5 high | 74.5% | 2012-09-25 |
| CVE-2015-5374 EXP | A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP f… | Patch early | 7.8 high | 74.5% | 2015-07-18 |
| CVE-2015-1497 EXP | radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execute arbitrary commands via a cr… | Patch early | 10.0 high | 74.5% | 2015-02-16 |
| CVE-2016-1561 EXP | ExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the authorized_keys file for root, which allows remote attackers to o… | Patch early | 7.5 high | 74.4% | 2017-04-21 |
| CVE-2011-0065 EXP | Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute… | Patch early | 10.0 high | 74.4% | 2011-05-07 |
| CVE-2006-5156 EXP | Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attackers to execute arbitrary code… | Patch early | 10.0 high | 74.4% | 2006-10-05 |
| CVE-2012-1182 EXP | The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a m… | Patch early | 10.0 high | 74.4% | 2012-04-10 |
| CVE-2015-0779 EXP | Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11.3.2 allows remote attackers t… | Patch early | 10.0 high | 74.4% | 2015-06-07 |
| CVE-2008-1697 EXP | Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.53, 7.51, and earlier allows remote attackers to execute a… | Patch early | 10.0 high | 74.3% | 2008-04-08 |
| CVE-2022-23642 EXP | Sourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.37 is vulnerable to remote code execution in the `gitserver` servic… | Patch early | 8.8 high | 74.3% | 2022-02-18 |
| CVE-2015-3087 EXP | Integer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux,… | Patch early | 10.0 high | 74.3% | 2015-05-13 |
| CVE-2017-5255 EXP | In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console allows any… | Patch early | 8.8 high | 74.2% | 2017-12-20 |
| CVE-2020-17456 EXP | SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi page. | Patch early | 9.8 critical | 74.2% | 2020-08-20 |
| CVE-2016-1287 EXP | Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8.7 before 8.7(1.18), 9.0 before 9.0(4.38), 9.1 before… | Patch early | 9.8 critical | 74.2% | 2016-02-11 |
| CVE-2015-6522 EXP | SQL injection vulnerability in the WP Symposium plugin before 15.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the siz… | Patch early | 7.5 high | 74.1% | 2015-08-19 |
| CVE-2010-0304 EXP | Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial o… | Patch early | 7.5 high | 74.1% | 2010-02-03 |
| CVE-2001-0550 EXP | wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the… | Patch early | 7.5 high | 74.1% | 2001-11-30 |
| CVE-2006-2630 EXP | Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitrary code via unknown attack ve… | Patch early | 10.0 high | 74.1% | 2006-05-27 |
| CVE-2009-3844 EXP | Stack-based buffer overflow in the OmniInet process in HP OpenView Data Protector Application Recovery Manager 5.50 and 6.0 allows remote attackers to… | Patch early | 10.0 high | 74.1% | 2009-12-08 |
| CVE-2009-4178 EXP | Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbit… | Patch early | 10.0 high | 74% | 2009-12-10 |
| CVE-2016-9244 EXP | A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninit… | Patch early | 7.5 high | 74% | 2017-02-09 |
| CVE-2007-3401 EXP | PHP remote file inclusion vulnerability in footer.inc.php in B1G b1gBB 2.24 allows remote attackers to execute arbitrary PHP code via a URL in the tfo… | Patch early | 7.5 high | 74% | 2007-06-26 |
| CVE-2005-1213 EXP | Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP servers to… | Patch early | 7.5 high | 74% | 2005-06-14 |
| CVE-2012-0261 EXP | license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shel… | Patch early | 10.0 high | 73.9% | 2013-12-31 |
| CVE-2016-7202 EXP | The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denia… | Patch early | 7.5 high | 73.9% | 2016-11-10 |
| CVE-2017-16709 EXP | Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated administrators t… | Patch early | 7.2 high | 73.9% | 2018-07-11 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt