CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
425,750 CVEs
1,781 on KEV
17,555 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-14
217,815 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2006-1010 EXP | Buffer overflow in socket/request.c in CrossFire before 1.9.0, when oldsocketmode is enabled, allows remote attackers to cause a denial of service (se… | Patch early | 6.4 medium | 17.6% | 2006-03-06 |
| CVE-2021-24274 EXP | The Ultimate Maps by Supsystic WordPress plugin before 1.2.5 did not sanitise the tab parameter of its options page before outputting it in an attribu… | Patch early | 6.1 medium | 17.6% | 2021-05-05 |
| CVE-2002-1705 EXP | Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to cause a denial of service (crash) via a Cascading Style Sheet (CSS) with the p{… | Patch early | 5.0 medium | 17.6% | 2002-12-31 |
| CVE-2015-2279 EXP | cgi_test.cgi in AirLive BU-2015 with firmware 1.03.18, BU-3026 with firmware 1.43, and MD-3025 with firmware 1.81 allows remote attackers to execute a… | Patch early | 9.8 critical | 17.6% | 2017-07-25 |
| CVE-2019-9083 EXP | SQLiteManager 1.20 and 1.24 allows SQL injection via the /sqlitemanager/main.php dbsel parameter. NOTE: This product is discontinued. | Patch early | 9.8 critical | 17.6% | 2019-03-21 |
| CVE-2000-0347 EXP | Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name. | Patch early | 5.0 medium | 17.6% | 2000-05-02 |
| CVE-2006-6659 EXP | The Microsoft Office Outlook Recipient ActiveX control (ole32.dll) in Windows XP SP2 allows remote attackers to cause a denial of service (Internet Ex… | Patch early | 5.0 medium | 17.6% | 2006-12-20 |
| CVE-2001-0150 EXP | Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web site, which could allow remote a… | Patch early | 5.1 medium | 17.6% | 2001-06-02 |
| CVE-2008-4493 EXP | Microsoft PicturePusher ActiveX control (PipPPush.DLL 7.00.0709), as used in Microsoft Digital Image 2006 Starter Edition, allows remote attackers to… | Patch early | 6.8 medium | 17.6% | 2008-10-08 |
| CVE-2015-3897 EXP | Directory traversal vulnerability in Bonita BPM Portal before 6.5.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the theme pa… | Patch early | 5.0 medium | 17.6% | 2015-06-18 |
| CVE-2018-18065 EXP | _set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to r… | Patch early | 6.5 medium | 17.5% | 2018-10-08 |
| CVE-1999-1033 EXP | Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause Outlook to… | Patch early | 5.0 medium | 17.5% | 1999-05-11 |
| CVE-2016-3373 EXP | The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Window… | Patch early | 5.5 medium | 17.5% | 2016-09-14 |
| CVE-2002-1688 EXP | The browser history feature in Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to execute arbitrary script as other users and stea… | Patch early | 5.0 medium | 17.5% | 2002-12-31 |
| CVE-2006-3944 EXP | Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via a (1) Forms.ListBox.1 or (2) Forms.Li… | Patch early | 5.0 medium | 17.5% | 2006-07-31 |
| CVE-2008-5112 EXP | The LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a failed bind attempt depending… | Patch early | 5.0 medium | 17.4% | 2008-11-17 |
| CVE-2016-1077 EXP | Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous befor… | Patch early | 9.8 critical | 17.4% | 2016-05-11 |
| CVE-2023-26602 EXP | ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code by using SNMP to create extensions, as demonstrated by snmp… | Patch early | 9.8 critical | 17.4% | 2023-02-26 |
| CVE-2022-4395 EXP | The Membership For WooCommerce WordPress plugin before 2.1.7 does not validate uploaded files, which could allow unauthenticated users to upload arbit… | Patch early | 9.8 critical | 17.4% | 2023-01-30 |
| CVE-2013-5045 EXP | Microsoft Internet Explorer 10 and 11 allows local users to bypass the Protected Mode protection mechanism, and consequently gain privileges, by lever… | Patch early | 6.2 medium | 17.4% | 2013-12-11 |
| CVE-2008-0236 EXP | An ActiveX control for Microsoft Visual FoxPro (vfp6r.dll 6.0.8862.0) allows remote attackers to execute arbitrary commands by invoking the DoCmd meth… | Patch early | 5.8 medium | 17.4% | 2008-01-11 |
| CVE-2009-3019 EXP | Microsoft Internet Explorer 6 on Windows XP SP2 and SP3, and Internet Explorer 7 on Vista, allows remote attackers to cause a denial of service (appli… | Patch early | 5.0 medium | 17.4% | 2009-08-31 |
| CVE-2021-24040 EXP | Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input,… | Patch early | 9.8 critical | 17.4% | 2021-09-10 |
| CVE-2026-21876 EXP | The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 4.22.0 a… | Patch early | 9.3 critical | 17.4% | 2026-01-08 |
| CVE-2019-6543 EXP | AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update.… | Patch early | 9.8 critical | 17.3% | 2019-02-13 |
| CVE-2018-13859 EXP | MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before V9.34 build 13381 - 12.07.18, allow unauthorized remote attacke… | Patch early | 9.8 critical | 17.2% | 2018-07-17 |
| CVE-2010-3609 EXP | The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon (SL… | Patch early | 5.0 medium | 17.2% | 2011-03-11 |
| CVE-2006-4075 EXP | Multiple PHP remote file inclusion vulnerabilities in Wim Fleischhauer docpile: wim's edition (docpile:we) 0.2.2 and earlier allow remote attackers to… | Patch early | 5.1 medium | 17.2% | 2006-08-11 |
| CVE-2013-4660 EXP | The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote attackers to e… | Patch early | 6.8 medium | 17.2% | 2013-06-28 |
| CVE-2018-6546 EXP | plays_service.exe in the plays.tv service before 1.27.7.0, as distributed in AMD driver-installation packages and Gaming Evolved products, executes co… | Patch early | 9.8 critical | 17.2% | 2018-04-13 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt