CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
399,661 CVEs
1,729 on KEV
17,272 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-30
399,661 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2006-1359 EXP | Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain crea… | Patch early | 9.3 high | 68.3% | 2006-03-23 |
| CVE-2001-1320 EXP | Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via exceptional… | Patch early | 7.5 high | 68.3% | 2001-07-16 |
| CVE-2003-1141 EXP | Buffer overflow in NIPrint 4.10 allows remote attackers to execute arbitrary code via a long string to TCP port 515. | Patch early | 7.5 high | 68.3% | 2003-11-04 |
| CVE-2000-0284 EXP | Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands. | Patch early | 7.5 high | 68.3% | 2000-04-16 |
| CVE-2024-28000 EXP | Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache.This issue affects LiteSpeed Cache: from n/a th… | Patch early | 9.8 critical | 68.3% | 2024-08-21 |
| CVE-2018-8355 EXP | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Me… | Patch early | 7.5 high | 68.2% | 2018-08-15 |
| CVE-2010-3332 EXP | Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Services (IIS),… | Patch early | 6.4 medium | 68.2% | 2010-09-22 |
| CVE-2000-0630 EXP | IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading vi… | Patch early | 5.0 medium | 68.2% | 2000-07-17 |
| CVE-2017-12477 EXP | It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in which its… | Patch early | 9.8 critical | 68.2% | 2017-08-07 |
| CVE-2004-1388 EXP | Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attackers to exe… | Patch early | 7.5 high | 68.2% | 2004-12-31 |
| CVE-2018-10093 EXP | AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution. | Patch early | 8.8 high | 68.2% | 2019-03-21 |
| CVE-2007-4915 EXP | The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent stack writes from entering memor… | Patch early | 10.0 high | 68.2% | 2007-09-17 |
| CVE-2007-2707 EXP | PHP remote file inclusion vulnerability in linksnet_linkslog_rss.php in Linksnet Newsfeed 1.0 allows remote attackers to execute arbitrary PHP code vi… | Patch early | 6.8 medium | 68.1% | 2007-05-16 |
| CVE-2004-0297 EXP | Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote attackers… | Patch early | 10.0 high | 68.1% | 2004-11-23 |
| CVE-2005-2265 EXP | Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access violation and cras… | Patch early | 5.0 medium | 68.1% | 2005-07-13 |
| CVE-2011-0654 EXP | Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System (CIFS) browser service in Mrxsmb.sys or bowser.sys in Ac… | Patch early | 10.0 high | 68.1% | 2011-02-16 |
| CVE-2013-1081 EXP | Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management (ZMM) 2.6.1 and 2.7.0 allows remote attackers to include and execute… | Patch early | 7.5 high | 68.1% | 2013-03-11 |
| CVE-2006-1652 EXP | Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-assisted remote attackers to exec… | Patch early | 9.0 high | 68% | 2006-04-06 |
| CVE-2017-11809 EXP | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in… | Patch early | 7.5 high | 68% | 2017-10-13 |
| CVE-2007-3358 EXP | PHP remote file inclusion vulnerability in html/load_lang.php in SerWeb 0.9.6 and earlier allows remote attackers to execute arbitrary PHP code via a… | Patch early | 6.8 medium | 68% | 2007-06-22 |
| CVE-2008-5180 EXP | Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service (memory consumption) via… | Patch early | 5.3 medium | 68% | 2008-11-20 |
| CVE-2013-7409 EXP | Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via… | Patch early | 7.5 high | 67.9% | 2014-10-30 |
| CVE-2011-5035 EXP | Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 and 8.2, and possibly other pro… | Patch early | 5.0 medium | 67.9% | 2011-12-30 |
| CVE-2010-0480 EXP | Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1… | Patch early | 9.3 high | 67.9% | 2010-04-14 |
| CVE-2001-0151 EXP | IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests. | Patch early | 5.0 medium | 67.9% | 2001-06-02 |
| CVE-2018-0774 EXP | Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine han… | Patch early | 7.5 high | 67.9% | 2018-01-04 |
| CVE-2018-0775 EXP | Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine han… | Patch early | 7.5 high | 67.9% | 2018-01-04 |
| CVE-2007-3230 EXP | PHP remote file inclusion vulnerability in phphtml.php in Idan Sofer PHP::HTML 0.6.4 allows remote attackers to execute arbitrary PHP code via a URL i… | Patch early | 6.8 medium | 67.9% | 2007-06-14 |
| CVE-2007-3221 EXP | PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the XT-Conteudo module for XOOPS allows remote attackers to execute ar… | Patch early | 6.8 medium | 67.8% | 2007-06-14 |
| CVE-2012-5357 EXP | Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true, which allows remote attacker… | Patch early | 9.8 critical | 67.8% | 2017-10-30 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt