CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
399,554 CVEs
1,729 on KEV
17,272 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-30
149,187 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2012-0217 EXP | The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris… | Patch early | 7.2 high | 39.8% | 2012-06-12 |
| CVE-2010-1900 EXP | Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Vi… | Patch early | 9.3 high | 39.8% | 2010-08-11 |
| CVE-2004-0727 EXP | Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass… | Patch early | 7.5 high | 39.8% | 2004-07-27 |
| CVE-2007-1819 EXP | Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in TestDirector (TD) for Mercury Quality Center 9.0 befo… | Patch early | 9.3 high | 39.7% | 2007-04-02 |
| CVE-2012-2516 EXP | An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Platforms Proficy Historian 3.1,… | Patch early | 9.3 high | 39.7% | 2012-07-05 |
| CVE-2016-1096 EXP | Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11… | Patch early | 7.5 high | 39.6% | 2016-05-11 |
| CVE-2016-1102 EXP | Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11… | Patch early | 7.5 high | 39.6% | 2016-05-11 |
| CVE-2016-1104 EXP | Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11… | Patch early | 7.5 high | 39.6% | 2016-05-11 |
| CVE-2016-6816 EXP | The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to 6.0.47 that parsed the HTTP reques… | Patch early | 7.1 high | 39.6% | 2017-03-20 |
| CVE-2000-0834 EXP | The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the NTLM challe… | Patch early | 7.5 high | 39.6% | 2000-11-14 |
| CVE-2014-1806 EXP | The .NET Remoting implementation in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly restrict memory access,… | Patch early | 10.0 high | 39.6% | 2014-05-14 |
| CVE-2012-6066 EXP | freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demonstrated by an OpenSSH client wi… | Patch early | 9.3 high | 39.5% | 2012-12-04 |
| CVE-2011-3478 EXP | The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12… | Patch early | 10.0 high | 39.5% | 2012-01-25 |
| CVE-2002-1412 EXP | Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a modified GALLERY_BASEDIR variable… | Patch early | 7.5 high | 39.5% | 2003-04-11 |
| CVE-2016-0111 EXP | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr… | Patch early | 7.5 high | 39.4% | 2016-03-09 |
| CVE-2003-0113 EXP | Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via an HTTP response… | Patch early | 7.5 high | 39.4% | 2003-05-12 |
| CVE-2008-0115 EXP | Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office for Mac 2004 allows user-assisted remo… | Patch early | 9.3 high | 39.3% | 2008-03-11 |
| CVE-2013-4800 EXP | Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1735. | Patch early | 9.3 high | 39.3% | 2013-07-29 |
| CVE-2018-10822 EXP | Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2… | Patch early | 7.5 high | 39.3% | 2018-10-17 |
| CVE-2015-3128 EXP | Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.4… | Patch early | 10.0 high | 39.2% | 2015-07-09 |
| CVE-2010-3189 EXP | The extSetOwner function in the UfProxyBrowserCtrl ActiveX control (UfPBCtrl.dll) in Trend Micro Internet Security Pro 2010 allows remote attackers to… | Patch early | 9.3 high | 39.2% | 2010-08-31 |
| CVE-2003-1026 EXP | Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added… | Patch early | 9.3 high | 39.2% | 2004-01-20 |
| CVE-2008-1903 EXP | PHP remote file inclusion vulnerability in news_show.php in Newanz NewsOffice 1.0 and 1.1, when register_globals is enabled, allows remote attackers t… | Patch early | 7.5 high | 39.2% | 2008-04-22 |
| CVE-2008-5763 EXP | PHP remote file inclusion vulnerability in slogin_lib.inc.php in Simple Text-File Login Script (SiTeFiLo) 1.0.6 allows remote attackers to execute arb… | Patch early | 7.5 high | 39.2% | 2008-12-30 |
| CVE-2011-4786 EXP | A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program… | Patch early | 9.3 high | 39.2% | 2012-01-12 |
| CVE-2012-0439 EXP | An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arb… | Patch early | 9.3 high | 39.2% | 2013-02-24 |
| CVE-2006-1491 EXP | Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execute arbitra… | Patch early | 7.5 high | 39.2% | 2006-03-29 |
| CVE-2016-0108 EXP | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web si… | Patch early | 7.5 high | 39.2% | 2016-03-09 |
| CVE-2004-1166 EXP | CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP commands via an… | Patch early | 7.5 high | 39.2% | 2004-12-31 |
| CVE-2011-4825 EXP | Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6… | Patch early | 7.5 high | 39.2% | 2011-12-15 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt