CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
425,731 CVEs
1,781 on KEV
17,555 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-14
217,814 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2016-0952 EXP | Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to execute arbitrary code or cause a… | Patch early | 9.8 critical | 19.6% | 2016-02-10 |
| CVE-2016-0953 EXP | Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to execute arbitrary code or cause a… | Patch early | 9.8 critical | 19.6% | 2016-02-10 |
| CVE-2000-0168 EXP | Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka the "DOS Dev… | Patch early | 5.0 medium | 19.6% | 2000-03-04 |
| CVE-2019-16516 EXP | An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. There is a user enumeration vulnerability, allowing… | Patch early | 5.3 medium | 19.6% | 2020-01-23 |
| CVE-2006-2297 EXP | Heap-based buffer overflow in Microsoft Infotech Storage System Library (itss.dll) allows user-assisted attackers to execute arbitrary code via a craf… | Patch early | 4.0 medium | 19.5% | 2006-05-10 |
| CVE-2024-24496 EXP | An issue in Daily Habit Tracker v.1.0 allows a remote attacker to manipulate trackers via the home.php, add-tracker.php, delete-tracker.php, update-tr… | Patch early | 9.8 critical | 19.5% | 2024-02-08 |
| CVE-1999-1577 EXP | Buffer overflow in HHOpen ActiveX control (hhopen.ocx) 1.0.0.1 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands… | Patch early | 5.1 medium | 19.5% | 1999-10-31 |
| CVE-2016-4372 EXP | HPE iMC PLAT before 7.2 E0403P04, iMC EAD before 7.2 E0405P05, iMC APM before 7.2 E0401P04, iMC NTA before 7.2 E0401P01, iMC BIMS before 7.2 E0402P02,… | Patch early | 9.8 critical | 19.4% | 2016-07-15 |
| CVE-1999-1578 EXP | Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) 3.0.0.0 for Internet Explorer 4.01 and 5 allows remote attackers… | Patch early | 5.1 medium | 19.4% | 1999-09-24 |
| CVE-2002-1714 EXP | Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to cause a denial of service (crash) via an object of type "text/html" with the DA… | Patch early | 5.0 medium | 19.4% | 2002-12-31 |
| CVE-2006-4343 EXP | The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers… | Patch early | 4.3 medium | 19.4% | 2006-09-28 |
| CVE-2016-9899 EXP | Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Fi… | Patch early | 9.8 critical | 19.4% | 2018-06-11 |
| CVE-2017-14094 EXP | A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform remote command execution… | Patch early | 9.8 critical | 19.4% | 2018-01-19 |
| CVE-2017-7997 EXP | Multiple SQL injection vulnerabilities in Gespage before 7.4.9 allow remote attackers to execute arbitrary SQL commands via the (1) show_prn parameter… | Patch early | 9.8 critical | 19.3% | 2018-01-08 |
| CVE-2016-2208 EXP | The kernel component in Symantec Anti-Virus Engine (AVE) 20151.1 before 20151.1.1.4 allows remote attackers to execute arbitrary code or cause a denia… | Patch early | 9.1 critical | 19.3% | 2016-05-19 |
| CVE-2014-4940 EXP | Multiple directory traversal vulnerabilities in Tera Charts (tera-charts) plugin 0.1 for WordPress allow remote attackers to read arbitrary files via… | Patch early | 5.0 medium | 19.3% | 2014-07-11 |
| CVE-2025-64459 EXP | An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. The methods `QuerySet.filter()`, `QuerySet.exclude()`, and `Que… | Patch early | 9.1 critical | 19.3% | 2025-11-05 |
| CVE-2019-19208 EXP | Codiad Web IDE through 2.8.4 allows PHP Code injection. | Patch early | 9.8 critical | 19.2% | 2020-03-16 |
| CVE-2016-6598 EXP | BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service (FileStorageService) on port 9010. This service conta… | Patch early | 9.8 critical | 19.2% | 2018-01-30 |
| CVE-2013-3684 EXP | NextGEN Gallery plugin before 1.9.13 for WordPress: ngggallery.php file upload | Patch early | 9.8 critical | 19.2% | 2020-02-11 |
| CVE-2000-0377 EXP | The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which causes the w… | Patch early | 5.0 medium | 19.2% | 2000-06-08 |
| CVE-2008-4071 EXP | A certain ActiveX control in Adobe Acrobat 9, when used with Microsoft Windows Vista and Internet Explorer 7, allows remote attackers to cause a denia… | Patch early | 5.0 medium | 19.2% | 2008-09-15 |
| CVE-2014-8272 EXP | The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select sessi… | Patch early | 5.0 medium | 19.2% | 2014-12-19 |
| CVE-2011-3182 EXP | PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attack… | Patch early | 5.0 medium | 19.2% | 2011-08-25 |
| CVE-2017-16949 EXP | An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress. Improper input sanitization allows the at… | Patch early | 9.8 critical | 19.2% | 2017-12-19 |
| CVE-2018-5972 EXP | SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI. | Patch early | 9.8 critical | 19.2% | 2018-01-24 |
| CVE-2018-5979 EXP | SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field. | Patch early | 9.8 critical | 19.2% | 2018-01-24 |
| CVE-2018-5985 EXP | SQL Injection exists in the LiveCRM SaaS Cloud 1.0 component for Joomla! via an r=site/login&company_id= request. | Patch early | 9.8 critical | 19.2% | 2018-01-24 |
| CVE-2018-5988 EXP | SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobile_preview.php or index.php. | Patch early | 9.8 critical | 19.2% | 2018-01-24 |
| CVE-2018-6006 EXP | SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter. | Patch early | 9.8 critical | 19.2% | 2018-02-17 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt