Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
396,388 CVEs1,721 in CISA KEV17,157 with EPSS ≥ 10%25,049 with a public exploitUpdated 22 September 2026
25,049 results · page 147 of 501
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2013-0074 | Microsoft Silverlight Double Dereference Vulnerability | KEVEXPLOIT ×2 ✓HIGH 7.8EPSS 81.0% | 13 March 2013 |
| CVE-2013-1081 | Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management (ZMM) 2.6.1 and 2.7.0 allows remote attackers to include and execute arbitrary local files via the language parameter. | EXPLOIT ✓HIGH 7.5EPSS 68.1% | 11 March 2013 |
| CVE-2013-2503 | Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 (aka Proxy Authentication… | EXPLOIT ✓MEDIUM 5.8EPSS 4.63% | 11 March 2013 |
| CVE-2013-1627 | Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and earlier allows remote attackers to read arbitrary files via a full pathname in an argument to the sub_401A90 CreateFileW function. | EXPLOIT ✓HIGH 7.8EPSS 3.39% | 11 March 2013 |
| CVE-2013-2551 | Microsoft Internet Explorer Use-After-Free Vulnerability | KEVEXPLOIT ✓HIGH 8.8EPSS 74.1% | 11 March 2013 |
| CVE-2012-5201 | Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1611. | EXPLOIT ✓HIGH 10.0EPSS 63.7% | 9 March 2013 |
| CVE-2013-0249 | Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1, when negotiating SASL DIGEST-MD5 authentication, allows remote attackers to cause a denial of service (crash)… | EXPLOITHIGH 7.5EPSS 21.6% | 8 March 2013 |
| CVE-2013-1488 | The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to execute arbitrary code via unspecified vectors involving reflection, Libraries, "improper toString calls," and the… | EXPLOIT ✓HIGH 10.0EPSS 87.2% | 8 March 2013 |
| CVE-2013-1493 | The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an… | EXPLOIT ✓HIGH 10.0EPSS 86.2% | 5 March 2013 |
| CVE-2013-1775 | sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to… | EXPLOIT ×2 ✓MEDIUM 6.9EPSS 3.18% | 5 March 2013 |
| CVE-2013-0292 | The dbus_g_proxy_manager_filter function in dbus-gproxy in Dbus-glib before 0.100.1 does not properly verify the sender of NameOwnerChanged signals, which allows local users to gain privileges via a spoofed signal. | EXPLOITHIGH 7.2EPSS 1.09% | 5 March 2013 |
| CVE-2013-1773 | Buffer overflow in the VFAT filesystem implementation in the Linux kernel before 3.3 allows local users to gain privileges or cause a denial of service (system crash) via a VFAT write operation on a filesystem with the utf8 mount option, which is not… | EXPLOIT ✓MEDIUM 6.2EPSS 1.04% | 28 February 2013 |
| CVE-2013-1763 | Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a large family value in a Netlink message. | EXPLOIT ×4 ✓HIGH 7.2EPSS 4.21% | 28 February 2013 |
| CVE-2012-5337 | Multiple cross-site scripting (XSS) vulnerabilities in jforum.page in JForum 2.1.9 allow remote attackers to inject arbitrary web script or HTML via the (1) action, (2) match_type, (3) sort_by, or (4) start parameters. | EXPLOIT ✓MEDIUM 4.3EPSS 2.52% | 24 February 2013 |
| CVE-2013-0108 | An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager (aka CPO-M) Station R100; and HMIWeb Browser client packages… | EXPLOIT ✓MEDIUM 6.8EPSS 26.6% | 24 February 2013 |
| CVE-2012-6275 | Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impact via (1) the filename header in an SCH request or (2) the userid component in a DUPF request. | EXPLOIT ✓HIGH 10.0EPSS 46.5% | 24 February 2013 |
| CVE-2012-6274 | BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors. | EXPLOIT ✓MEDIUM 5.0EPSS 46.9% | 24 February 2013 |
| CVE-2012-4705 | Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving a crafted pathname. | EXPLOIT ✓HIGH 10.0EPSS 64.9% | 24 February 2013 |
| CVE-2013-0804 | The client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference) via unspecified vectors. | EXPLOIT ✓HIGH 10.0EPSS 12.4% | 24 February 2013 |
| CVE-2012-0439 | An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code via (1) a pointer argument to the SetEngine method or (2) an XPItem pointer argument to an… | EXPLOIT ✓HIGH 9.3EPSS 39.2% | 24 February 2013 |
| CVE-2012-6533 | Buffer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 on Windows XP and Server 2003 allows local users to gain privileges via a crafted application. | EXPLOIT ✓MEDIUM 4.4EPSS 0.62% | 18 February 2013 |
| CVE-2012-5375 | The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service (prevention of file creation) by leveraging the ability to write to a directory important to the victim, and creating a… | EXPLOIT ✓MEDIUM 4.0EPSS 0.86% | 18 February 2013 |
| CVE-2013-0268 | The msr_open function in arch/x86/kernel/msr.c in the Linux kernel before 3.7.6 allows local users to bypass intended capability restrictions by executing a crafted application as root, as demonstrated by msr32.c. | EXPLOITMEDIUM 6.2EPSS 1.56% | 18 February 2013 |
| CVE-2013-0160 | The Linux kernel through 3.7.9 allows local users to obtain sensitive information about keystroke timing by using the inotify API on the /dev/ptmx device. | EXPLOITLOW 2.1EPSS 0.73% | 18 February 2013 |
| CVE-2012-4530 | The load_script function in fs/binfmt_script.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users to obtain sensitive information from kernel stack memory via a crafted application. | EXPLOITLOW 2.1EPSS 0.88% | 18 February 2013 |
| CVE-2013-0658 | Heap-based buffer overflow in RFManagerService.exe in Schneider Electric Accutech Manager 2.00.1 and earlier allows remote attackers to execute arbitrary code via a crafted HTTP request. | EXPLOIT ✓HIGH 10.0EPSS 21.5% | 15 February 2013 |
| CVE-2012-4711 | Buffer overflow in kingMess.exe 65.20.2003.10300 in WellinTech KingView 6.52, kingMess.exe 65.20.2003.10400 in KingView 6.53, and kingMess.exe 65.50.2011.18049 in KingView 6.55 allows remote attackers to execute arbitrary code or cause a denial of… | EXPLOIT ✓HIGH 10.0EPSS 61.5% | 15 February 2013 |
| CVE-2013-1402 | DigiLIBE 3.4 and possibly other versions sends a redirect but does not exit, which allows remote attackers to obtain sensitive configuration information via a direct request to configuration/general_configuration.html. | EXPLOIT ✓MEDIUM 5.0EPSS 6.33% | 14 February 2013 |
| CVE-2013-0640 | Adobe Reader and Acrobat Memory Corruption Vulnerability | KEVEXPLOIT ✓HIGH 7.8EPSS 86.9% | 14 February 2013 |
| CVE-2013-1114 | Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unity Express before 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCud87527. | EXPLOIT ✓MEDIUM 4.3EPSS 10.3% | 13 February 2013 |
| CVE-2012-3363 | Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE… | EXPLOITCRITICAL 9.1EPSS 50.2% | 13 February 2013 |
| CVE-2013-0025 | Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer SLayoutRun Use After Free Vulnerability." | EXPLOIT ×2 ✓HIGH 9.3EPSS 55.8% | 13 February 2013 |
| CVE-2013-0019 | Use-after-free vulnerability in Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer COmWindowProxy Use After Free… | EXPLOIT ✓HIGH 9.3EPSS 34.9% | 13 February 2013 |
| CVE-2013-1453 | 3.0.x through 3.0.2 and 2.5.x through 2.5.8 allows attackers to unserialize arbitrary PHP objects to obtain sensitive information, delete arbitrary directories, conduct SQL injection attacks, and possibly have other impacts via the highlight parameter. | EXPLOIT ✓HIGH 7.5EPSS 3.15% | 13 February 2013 |
| CVE-2013-0238 | The try_parse_v4_netmask function in hostmask.c in IRCD-Hybrid before 8.0.6 does not properly validate masks, which allows remote attackers to cause a denial of service (crash) via a mask that causes a negative number to be parsed. | EXPLOITMEDIUM 5.0EPSS 9.96% | 13 February 2013 |
| CVE-2011-5265 | Cross-site scripting (XSS) vulnerability in cached_image.php in the Featurific For WordPress plugin 1.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the snum parameter. | EXPLOIT ✓MEDIUM 4.3EPSS 9.96% | 12 February 2013 |
| CVE-2011-5262 | SQL injection vulnerability in prodpage.cfm in SonicWALL Aventail allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter. | EXPLOITHIGH 7.5EPSS 1.11% | 12 February 2013 |
| CVE-2011-5261 | Cross-site scripting (XSS) vulnerability in serverreport.cgi in Axis M10 Series Network Cameras M1054 firmware 5.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the pageTitle parameter to admin/showReport.shtml. | EXPLOIT ✓MEDIUM 4.3EPSS 3.61% | 12 February 2013 |
| CVE-2011-5259 | SQL injection vulnerability in lib/controllers/CentralController.php in OrangeHRM before 2.6.11.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. | EXPLOIT ✓MEDIUM 6.8EPSS 1.23% | 12 February 2013 |
| CVE-2011-5258 | Multiple cross-site scripting (XSS) vulnerabilities in OrangeHRM before 2.6.11.2 allow remote attackers to inject arbitrary web script or HTML via the (1) uniqcode or (2) isAdmin parameter to index.php; or the (3) PATH_INFO to… | EXPLOIT ×2 ✓MEDIUM 4.3EPSS 2.09% | 12 February 2013 |
| CVE-2011-5257 | Multiple cross-site scripting (XSS) vulnerabilities in the Classipress theme before 3.1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) twitter_id parameter related to the Twitter widget and (2) facebook_id… | EXPLOIT ✓MEDIUM 4.3EPSS 3.79% | 12 February 2013 |
| CVE-2013-1406 | The Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and 9.x before 9.0.1 on Windows, VMware Fusion 4.1 before 4.1.4 and 5.0 before 5.0.2, VMware View 4.x before 4.6.2 and 5.x before 5.1.2… | EXPLOITHIGH 7.2EPSS 0.97% | 11 February 2013 |
| CVE-2013-1465 | The Cubecart::_basket method in classes/cubecart.class.php in CubeCart 5.0.0 through 5.2.0 allows remote attackers to unserialize arbitrary PHP objects via a crafted shipping parameter, as demonstrated by modifying the application configuration using… | EXPLOIT ✓CRITICAL 9.8EPSS 7.09% | 8 February 2013 |
| CVE-2013-1638 | Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document. | EXPLOIT ✓HIGH 9.3EPSS 8.04% | 8 February 2013 |
| CVE-2013-0634 | Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x before 11.2.202.262 on Linux, before 11.1.111.32 on Android 2.x and 3.x, and before 11.1.115.37 on Android 4.x allows remote… | EXPLOIT ✓HIGH 9.3EPSS 77.6% | 8 February 2013 |
| CVE-2013-0633 | Buffer overflow in Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x before 11.2.202.262 on Linux, before 11.1.111.32 on Android 2.x and 3.x, and before 11.1.115.37 on Android 4.x… | EXPLOIT ✓HIGH 9.3EPSS 20.9% | 8 February 2013 |
| CVE-2013-1464 | Cross-site scripting (XSS) vulnerability in assets/player.swf in the Audio Player plugin before 2.0.4.6 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the playerID parameter. | EXPLOIT ✓MEDIUM 4.3EPSS 6.41% | 7 February 2013 |
| CVE-2013-1463 | Cross-site scripting (XSS) vulnerability in js/tabletools/zeroclipboard.swf in the WP-Table Reloaded module before 1.9.4 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the id parameter. | EXPLOIT ✓MEDIUM 4.3EPSS 6.35% | 7 February 2013 |
| CVE-2013-1120 | Multiple cross-site request forgery (CSRF) vulnerabilities on the Cisco Unity Express with software before 8.0 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCue35910. | EXPLOIT ✓MEDIUM 6.8EPSS 1.20% | 6 February 2013 |
| CVE-2012-3282 | Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1468. | EXPLOIT ✓HIGH 10.0EPSS 16.9% | 6 February 2013 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.