CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
400,208 CVEs
1,730 on KEV
17,275 EPSS ≥ 10%
25,087 with exploits
synced 2026-10-01
149,473 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2012-4914 EXP | Stack-based buffer overflow in the reader in CoolPDF 3.0.2.256 allows remote attackers to execute arbitrary code via a PDF document with a crafted str… | Patch early | 9.3 high | 28.4% | 2013-01-26 |
| CVE-2010-3329 EXP | mshtmled.dll in Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code via a crafted Microsoft Office document that cau… | Patch early | 9.3 high | 28.4% | 2010-10-13 |
| CVE-2012-0663 EXP | Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbitrary code or cause a denial of… | Patch early | 9.3 high | 28.3% | 2012-05-16 |
| CVE-2016-3324 EXP | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf… | Patch early | 8.8 high | 28.3% | 2016-09-14 |
| CVE-2016-0998 EXP | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.5… | Patch early | 8.8 high | 28.3% | 2016-03-12 |
| CVE-2006-3431 EXP | Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute arbitrary code via a crafted STYL… | Patch early | 7.5 high | 28.3% | 2006-07-07 |
| CVE-2009-3976 EXP | Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service (application crash) or execute arbitrary code via a long 2… | Patch early | 9.3 high | 28.3% | 2009-11-18 |
| CVE-2007-6026 EXP | Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allow… | Patch early | 9.3 high | 28.3% | 2007-11-20 |
| CVE-2004-0990 EXP | Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and p… | Patch early | 10.0 high | 28.3% | 2005-03-01 |
| CVE-2011-1276 EXP | Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewe… | Patch early | 9.3 high | 28.2% | 2011-06-16 |
| CVE-2018-19571 EXP | GitLab CE/EE, versions 8.18 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an SSRF vulnerability in webhooks… | Patch early | 7.7 high | 28.2% | 2019-07-10 |
| CVE-2011-0041 EXP | Integer overflow in gdiplus.dll in GDI+ in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 G… | Patch early | 9.3 high | 28.2% | 2011-04-13 |
| CVE-2014-1912 EXP | Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 a… | Patch early | 7.5 high | 28.1% | 2014-03-01 |
| CVE-2001-0875 EXP | Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in… | Patch early | 7.5 high | 28.1% | 2001-11-26 |
| CVE-2020-35606 EXP | Arbitrary command execution can occur in Webmin through 1.962. Any user authorized for the Package Updates module can execute arbitrary commands with… | Patch early | 8.8 high | 28% | 2020-12-21 |
| CVE-2008-3263 EXP | The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B… | Patch early | 7.8 high | 28% | 2008-07-22 |
| CVE-2013-0726 EXP | Stack-based buffer overflow in the ERM_convert_to_correct_webpath function in ermapper_u.dll in ERDAS ER Viewer before 13.00.0001 allows remote attack… | Patch early | 9.3 high | 28% | 2013-05-05 |
| CVE-2006-1236 EXP | Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound… | Patch early | 7.5 high | 28% | 2006-03-15 |
| CVE-2001-0239 EXP | Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request w… | Patch early | 7.5 high | 28% | 2001-07-02 |
| CVE-2010-1225 EXP | The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server… | Patch early | 9.3 high | 28% | 2010-04-01 |
| CVE-2018-7171 EXP | Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of arbitrary directories via a ..… | Patch early | 7.5 high | 27.9% | 2018-03-30 |
| CVE-2001-0341 EXP | Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary comma… | Patch early | 7.5 high | 27.9% | 2001-07-21 |
| CVE-1999-0002 EXP | Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems. | Patch early | 10.0 high | 27.9% | 1998-10-12 |
| CVE-2010-4741 EXP | Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MDM Gateways to execute arbitrar… | Patch early | 9.3 high | 27.8% | 2011-02-18 |
| CVE-2017-14335 EXP | On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently sanitized, sending a PUT request to /ISAPI/Security/users/1… | Patch early | 7.5 high | 27.8% | 2017-09-12 |
| CVE-2010-2330 EXP | Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arb… | Patch early | 9.3 high | 27.8% | 2010-06-18 |
| CVE-2009-0184 EXP | Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allow remote attackers… | Patch early | 9.3 high | 27.8% | 2009-02-03 |
| CVE-2010-4566 EXP | The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NTLM authent… | Patch early | 9.3 high | 27.8% | 2011-01-14 |
| CVE-2008-2752 EXP | Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted remote attackers to cause a de… | Patch early | 7.1 high | 27.8% | 2008-06-18 |
| CVE-2015-3036 EXP | Stack-based buffer overflow in the run_init_sbus function in the KCodes NetUSB module for the Linux kernel, as used in certain NETGEAR products, TP-LI… | Patch early | 10.0 high | 27.7% | 2015-05-21 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt