CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
400,034 CVEs
1,730 on KEV
17,275 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-30
149,398 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2018-13109 EXP | All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerability where attackers are able to… | Patch early | 7.5 high | 35.5% | 2018-07-06 |
| CVE-2008-2908 EXP | Multiple stack-based buffer overflows in a certain ActiveX control in ienipp.ocx in Novell iPrint Client for Windows before 4.36 allow remote attacker… | Patch early | 9.3 high | 35.4% | 2008-06-30 |
| CVE-2007-3435 EXP | Stack-based buffer overflow in the BeginPrint method in a certain ActiveX control in RKD Software (barcodetools.com) BarCodeAx.dll 4.9 allows remote a… | Patch early | 9.3 high | 35.4% | 2007-06-27 |
| CVE-2007-0325 EXP | Multiple buffer overflows in the Trend Micro OfficeScan Web-Deployment SetupINICtrl ActiveX control in OfficeScanSetupINI.dll, as used in OfficeScan 7… | Patch early | 9.3 high | 35.4% | 2007-02-20 |
| CVE-2004-1104 EXP | Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page t… | Patch early | 7.5 high | 35.3% | 2004-12-31 |
| CVE-2015-6103 EXP | The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Serv… | Patch early | 9.3 high | 35.3% | 2015-11-11 |
| CVE-2015-6104 EXP | The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Serv… | Patch early | 9.3 high | 35.3% | 2015-11-11 |
| CVE-2008-5492 EXP | Heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OCX Control allows remote attacke… | Patch early | 9.3 high | 35.3% | 2008-12-12 |
| CVE-2007-0348 EXP | Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2.60.12.0717, (2) Roxio CinePlayer 3.2, (3) WinDVD 7.0.2… | Patch early | 9.3 high | 35.1% | 2007-03-21 |
| CVE-2008-1724 EXP | Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX control in vcst_en.dll 1.0.0.5 in… | Patch early | 9.3 high | 35.1% | 2008-04-11 |
| CVE-2010-0679 EXP | Multiple stack-based buffer overflows in the HyleosChemView.HLChemView ActiveX control (HyleosChemView.ocx) in Hyleos ChemView 1.9.5.1 allow remote at… | Patch early | 9.3 high | 35.1% | 2010-02-22 |
| CVE-2009-2484 EXP | Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft W… | Patch early | 9.3 high | 35.1% | 2009-07-16 |
| CVE-2012-3753 EXP | Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (applicat… | Patch early | 9.3 high | 35.1% | 2012-11-09 |
| CVE-2009-3429 EXP | Stack-based buffer overflow in Pirate Radio Destiny Media Player 1.61 allows remote attackers to execute arbitrary code via a long string in a .pls pl… | Patch early | 9.3 high | 35% | 2009-09-25 |
| CVE-2021-43164 EXP | A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the up… | Patch early | 8.8 high | 35% | 2022-05-04 |
| CVE-2010-2632 EXP | Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability. NOTE: the previ… | Patch early | 7.8 high | 35% | 2011-01-19 |
| CVE-2000-0380 EXP | The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a… | Patch early | 7.1 high | 35% | 2000-04-26 |
| CVE-2013-0019 EXP | Use-after-free vulnerability in Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code via a crafted web site that… | Patch early | 9.3 high | 34.9% | 2013-02-13 |
| CVE-2016-2233 EXP | Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of servic… | Patch early | 7.5 high | 34.9% | 2017-01-18 |
| CVE-2007-2221 EXP | Unspecified vulnerability in the mdsauth.dll COM object in Microsoft Windows Media Server in the Microsoft Internet Explorer 5.01 SP4 on Windows 2000… | Patch early | 9.3 high | 34.9% | 2007-05-08 |
| CVE-2011-3360 EXP | Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lu… | Patch early | 9.3 high | 34.9% | 2011-09-20 |
| CVE-2008-0118 EXP | Unspecified vulnerability in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, Excel Viewer 2003 up to SP3, and Office 2004 for Mac allows user-assisted re… | Patch early | 9.3 high | 34.8% | 2008-03-11 |
| CVE-2004-1769 EXP | The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attackers to exe… | Patch early | 10.0 high | 34.8% | 2004-03-11 |
| CVE-2010-3747 EXP | An ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not properly in… | Patch early | 9.3 high | 34.8% | 2010-10-19 |
| CVE-2014-1303 EXP | Heap-based buffer overflow in Apple Safari 7.0.2 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspe… | Patch early | 10.0 high | 34.8% | 2014-03-26 |
| CVE-2004-2221 EXP | Buffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute arbitrary code via a long parameter in an HTTP GET requ… | Patch early | 7.5 high | 34.8% | 2004-12-31 |
| CVE-2008-2683 EXP | The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to force the download and storage of… | Patch early | 9.3 high | 34.8% | 2008-06-12 |
| CVE-2015-2177 EXP | Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via crafted packets on (1) TCP port 10… | Patch early | 7.5 high | 34.7% | 2015-03-07 |
| CVE-2014-1770 EXP | Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript code… | Patch early | 9.3 high | 34.7% | 2014-05-22 |
| CVE-2017-5869 EXP | Directory traversal vulnerability in the file import feature in Nuxeo Platform 6.0, 7.1, 7.2, and 7.3 allows remote authenticated users to upload and… | Patch early | 8.8 high | 34.6% | 2017-03-24 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt