CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
399,608 CVEs
1,729 on KEV
17,272 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-30
399,646 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2017-8671 EXP | Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the cu… | Patch early | 7.5 high | 69.3% | 2017-08-08 |
| CVE-2015-3628 EXP | The iControl API in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.0 before 11.5.3 HF2 and 11.6.0 before 11.6.0 HF6, BIG-IP AA… | Patch early | 9.0 high | 69.3% | 2015-12-07 |
| CVE-2012-2311 EXP | sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings… | Patch early | 7.5 high | 69.3% | 2012-05-11 |
| CVE-2018-7573 EXP | An issue was discovered in FTPShell Client 6.7. A remote FTP server can send 400 characters of 'F' in conjunction with the FTP 220 response code to cr… | Patch early | 9.8 critical | 69.2% | 2018-03-01 |
| CVE-2003-1192 EXP | Stack-based buffer overflow in IA WebMail Server 3.1.0 allows remote attackers to execute arbitrary code via a long GET request. | Patch early | 10.0 high | 69.2% | 2003-11-03 |
| CVE-2017-11802 EXP | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in… | Patch early | 7.5 high | 69.2% | 2017-10-13 |
| CVE-2013-0230 EXP | Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote at… | Patch early | 10.0 high | 69.2% | 2013-01-31 |
| CVE-2014-8517 EXP | The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 through 6.0.6, and 6.1 through 6.1… | Patch early | 7.5 high | 69.1% | 2014-11-17 |
| CVE-2011-4051 EXP | CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows rem… | Patch early | 10.0 high | 69.1% | 2011-12-05 |
| CVE-2003-0220 EXP | Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute arb… | Patch early | 7.5 high | 69.1% | 2003-05-12 |
| CVE-2008-1105 EXP | Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary c… | Patch early | 7.5 high | 69.1% | 2008-05-29 |
| CVE-2007-3039 EXP | Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and W… | Patch early | 9.0 high | 69.1% | 2007-12-12 |
| CVE-2016-4264 EXP | The Office Open XML (OOXML) feature in Adobe ColdFusion 10 before Update 21 and 11 before Update 10 allows remote attackers to read arbitrary files or… | Patch early | 8.6 high | 69% | 2016-09-01 |
| CVE-2012-1533 EXP | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allow… | Patch early | 10.0 high | 69% | 2012-10-16 |
| CVE-2018-8466 EXP | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scri… | Patch early | 7.5 high | 69% | 2018-09-13 |
| CVE-2018-8467 EXP | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scri… | Patch early | 7.5 high | 69% | 2018-09-13 |
| CVE-2018-8288 EXP | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Me… | Patch early | 7.5 high | 69% | 2018-07-11 |
| CVE-2018-8291 EXP | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Me… | Patch early | 7.5 high | 69% | 2018-07-11 |
| CVE-2013-4124 EXP | Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allow… | Patch early | 5.0 medium | 69% | 2013-08-06 |
| CVE-2005-0043 EXP | Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files. | Patch early | 7.5 high | 69% | 2005-05-02 |
| CVE-2008-1661 EXP | Stack-based buffer overflow in DoubleTake.exe in HP StorageWorks Storage Mirroring (SWSM) before 4.5 SP2 allows remote attackers to execute arbitrary… | Patch early | 10.0 high | 69% | 2008-06-04 |
| CVE-2001-0506 EXP | Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for a long fil… | Patch early | 7.2 high | 68.9% | 2001-09-20 |
| CVE-2013-2367 EXP | Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execute arbitrary code via unknown… | Patch early | 10.0 high | 68.9% | 2013-07-31 |
| CVE-2009-0695 EXP | hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attackers to obtain management access… | Patch early | 7.5 high | 68.9% | 2012-06-19 |
| CVE-2016-7286 EXP | The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafte… | Patch early | 7.5 high | 68.9% | 2016-12-20 |
| CVE-2016-7287 EXP | The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of servi… | Patch early | 7.5 high | 68.9% | 2016-12-20 |
| CVE-2019-10867 EXP | An issue was discovered in Pimcore before 5.7.1. An attacker with classes permission can send a POST request to /admin/class/bulk-commit, which will m… | Patch early | 8.8 high | 68.9% | 2019-04-04 |
| CVE-2021-34621 EXP | A vulnerability in the user registration component found in the ~/src/Classes/RegistrationAuth.php file of the ProfilePress WordPress plugin made it p… | Patch early | 9.8 critical | 68.9% | 2021-07-07 |
| CVE-2003-0050 EXP | parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary… | Patch early | 7.5 high | 68.9% | 2003-03-07 |
| CVE-2005-0308 EXP | Buffer overflow in the wsprintf function in W32Dasm 8.93 and earlier allows remote attackers to execute arbitrary code via a large import or export fu… | Patch early | 7.5 high | 68.9% | 2005-01-24 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt