CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
399,516 CVEs
1,729 on KEV
17,272 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-30
399,516 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2005-1213 EXP | Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP servers to… | Patch early | 7.5 high | 74% | 2005-06-14 |
| CVE-2020-8813 EXP | graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has t… | Patch early | 8.8 high | 74% | 2020-02-22 |
| CVE-2012-0261 EXP | license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shel… | Patch early | 10.0 high | 73.9% | 2013-12-31 |
| CVE-2011-0762 EXP | The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption… | Patch early | 4.0 medium | 73.9% | 2011-03-02 |
| CVE-2012-0013 EXP | Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista S… | Patch early | 9.3 high | 73.9% | 2012-01-10 |
| CVE-2013-2010 EXP | WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability | Patch early | 9.8 critical | 73.9% | 2020-02-12 |
| CVE-2011-0065 EXP | Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute… | Patch early | 10.0 high | 73.8% | 2011-05-07 |
| CVE-2017-17405 EXP | Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and puttextfile use Kernel#open to… | Patch early | 8.8 high | 73.8% | 2017-12-15 |
| CVE-2014-0659 EXP | The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000… | Patch early | 10.0 high | 73.8% | 2014-01-12 |
| CVE-2013-1814 EXP | The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive information about all… | Patch early | 4.0 medium | 73.8% | 2013-03-14 |
| CVE-2009-0542 EXP | SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" (percent) cha… | Patch early | 7.5 high | 73.8% | 2009-02-12 |
| CVE-2011-2404 EXP | A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program… | Patch early | 7.5 high | 73.7% | 2011-08-11 |
| CVE-2008-1914 EXP | Stack-based buffer overflow in the AntServer module (AntServer.exe) in BigAnt IM Server in BigAnt Messenger 2.2 allows remote attackers to execute arb… | Patch early | 10.0 high | 73.7% | 2008-04-22 |
| CVE-2013-2578 EXP | cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P1… | Patch early | 10.0 high | 73.7% | 2013-10-11 |
| CVE-2013-1966 EXP | Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled when using t… | Patch early | 9.3 high | 73.7% | 2013-07-10 |
| CVE-2009-3849 EXP | Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary co… | Patch early | 10.0 high | 73.7% | 2009-12-10 |
| CVE-2017-15889 EXP | Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authenticated users to execute arbi… | Patch early | 8.8 high | 73.7% | 2017-12-04 |
| CVE-2000-0248 EXP | The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to e… | Patch early | 10.0 high | 73.7% | 2000-04-24 |
| CVE-2020-17456 EXP | SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi page. | Patch early | 9.8 critical | 73.6% | 2020-08-20 |
| CVE-2010-1240 EXP | Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch… | Patch early | 9.3 high | 73.6% | 2010-04-05 |
| CVE-2015-8249 EXP | The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows remote attackers to upload and execute arbitrary files via the… | Patch early | 9.8 critical | 73.6% | 2017-09-28 |
| CVE-2006-3838 EXP | Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0, as used in products including (a) Sidewinder, (b… | Patch early | 10.0 high | 73.6% | 2006-07-27 |
| CVE-2006-2630 EXP | Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitrary code via unknown attack ve… | Patch early | 10.0 high | 73.6% | 2006-05-27 |
| CVE-2004-0608 EXP | The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earli… | Patch early | 10.0 high | 73.5% | 2004-12-06 |
| CVE-2012-4958 EXP | Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /FSF/CMD req… | Patch early | 7.8 high | 73.5% | 2012-11-18 |
| CVE-2022-29885 EXP | The documentation of Apache Tomcat 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78 for the EncryptInterceptor inc… | Patch early | 7.5 high | 73.5% | 2022-05-12 |
| CVE-2015-2284 EXP | userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbitrary code… | Patch early | 10.0 high | 73.5% | 2015-03-24 |
| CVE-2020-24881 EXP | SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning. | Patch early | 9.8 critical | 73.4% | 2020-11-02 |
| CVE-2017-17560 EXP | An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices. The web administration component, /web/jquery/uploader/multi_uploadify.php… | Patch early | 9.8 critical | 73.4% | 2017-12-12 |
| CVE-2009-3867 EXP | Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17,… | Patch early | 9.3 high | 73.4% | 2009-11-05 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt