CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
425,763 CVEs
1,781 on KEV
17,555 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-14
425,763 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2006-0441 EXP | Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER command, which triggers the ove… | Patch early | 7.5 high | 71.5% | 2006-01-26 |
| CVE-2019-19985 EXP | The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclo… | Patch early | 5.3 medium | 71.4% | 2019-12-26 |
| CVE-2021-46419 EXP | An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system files and scripts. | Patch early | 9.1 critical | 71.4% | 2022-04-07 |
| CVE-2011-3400 EXP | Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 do not properly handle OLE objects in memory, which allows remote attackers to execute arbitrary… | Patch early | 9.3 high | 71.4% | 2011-12-14 |
| CVE-2020-29597 EXP | IncomCMS 2.0 has a modules/uploader/showcase/script.php insecure file upload vulnerability. This vulnerability allows unauthenticated attackers to upl… | Patch early | 9.8 critical | 71.3% | 2020-12-07 |
| CVE-2011-2653 EXP | Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management (ZAM) 7.5 allows remote attackers to execute arbitrary c… | Patch early | 10.0 high | 71.3% | 2011-12-08 |
| CVE-2006-0295 EXP | Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code… | Patch early | 5.1 medium | 71.3% | 2006-02-02 |
| CVE-2013-4811 EXP | UpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manage… | Patch early | 10.0 high | 71.3% | 2013-09-16 |
| CVE-2017-8755 EXP | Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the cu… | Patch early | 7.5 high | 71.3% | 2017-09-13 |
| CVE-2006-6565 EXP | FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a wildcard argument to the (1) LIST or (2) NLST comman… | Patch early | 4.0 medium | 71.2% | 2006-12-15 |
| CVE-2015-0336 EXP | Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to… | Patch early | 9.3 high | 71.2% | 2015-03-13 |
| CVE-2012-4959 EXP | Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD… | Patch early | 10.0 high | 71.2% | 2012-11-18 |
| CVE-2014-1762 EXP | Unspecified vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code with medium-integrity privileg… | Patch early | 7.5 high | 71.2% | 2014-04-27 |
| CVE-2007-3371 EXP | PHP remote file inclusion vulnerability in plugins/widgets/htmledit/htmledit.php in Powl 0.94 allows remote attackers to execute arbitrary PHP code vi… | Patch early | 7.5 high | 71.2% | 2007-06-22 |
| CVE-2012-4876 EXP | Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera allows remote attackers to exe… | Patch early | 10.0 high | 71.2% | 2012-09-06 |
| CVE-2010-1885 EXP | The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not properly handle… | Patch early | 9.3 high | 71.1% | 2010-06-15 |
| CVE-2005-0353 EXP | Buffer overflow in the Sentinel LM (Lservnt) service in the Sentinel License Manager 7.2.0.2 allows remote attackers to execute arbitrary code by send… | Patch early | 10.0 high | 71.1% | 2005-05-02 |
| CVE-2021-2109 EXP | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.… | Patch early | 7.2 high | 71.1% | 2021-01-20 |
| CVE-2004-1558 EXP | Multiple stack-based buffer overflows in YPOPs! (aka YahooPOPS) 0.4 through 0.6 allow remote attackers to cause a denial of service (crash) and possib… | Patch early | 7.5 high | 71.1% | 2004-12-31 |
| CVE-2026-26980 EXP | Ghost is a Node.js content management system. Versions 3.24.0 through 6.19.0 allow unauthenticated attackers to perform arbitrary reads from the datab… | Patch early | 9.4 critical | 71.1% | 2026-02-20 |
| CVE-2004-0541 EXP | Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enable… | Patch early | 10.0 high | 71.1% | 2004-08-06 |
| CVE-2007-4636 EXP | Multiple PHP remote file inclusion vulnerabilities in phpBG 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parame… | Patch early | 7.5 high | 71.1% | 2007-08-31 |
| CVE-2021-4039 EXP | A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to execute arbitrary OS commands on t… | Patch early | 9.8 critical | 71% | 2022-03-01 |
| CVE-2019-10867 EXP | An issue was discovered in Pimcore before 5.7.1. An attacker with classes permission can send a POST request to /admin/class/bulk-commit, which will m… | Patch early | 8.8 high | 71% | 2019-04-04 |
| CVE-2015-2509 EXP | Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows user-assisted remote attackers to execute arbitr… | Patch early | 9.3 high | 71% | 2015-09-09 |
| CVE-2013-1362 EXP | Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor (NRPE) before 2.14 might allow remote attackers to execute arbitrary sh… | Patch early | 7.5 high | 71% | 2013-07-09 |
| CVE-2017-8895 EXP | In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a use-after-free vulnerability in… | Patch early | 9.8 critical | 71% | 2017-05-10 |
| CVE-2013-4835 EXP | The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary c… | Patch early | 7.5 high | 71% | 2013-11-04 |
| CVE-2013-2641 EXP | Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read arbitrary files via the id pa… | Patch early | 5.0 medium | 71% | 2014-03-18 |
| CVE-2015-0096 EXP | Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Window… | Patch early | 9.3 high | 71% | 2015-03-11 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt