Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
396,516 CVEs1,721 in CISA KEV17,395 with EPSS ≥ 10%25,049 with a public exploitUpdated 23 September 2026
25,049 results · page 175 of 501
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2011-2505 | libraries/auth/swekey/swekey.auth.lib.php in the Swekey authentication feature in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 assigns values to arbitrary parameters referenced in the query string, which allows remote attackers to modify the… | EXPLOIT ×2 ✓MEDIUM 6.4EPSS 12.9% | 14 July 2011 |
| CVE-2010-4814 | SQL injection vulnerability in index1.php in Best Soft Inc. | EXPLOITHIGH 7.5EPSS 0.99% | 8 July 2011 |
| CVE-2010-4810 | Multiple PHP remote file inclusion vulnerabilities in AR Web Content Manager (AWCM) 2.1 final allow remote attackers to execute arbitrary PHP code via a URL in the theme_file parameter to (1) includes/window_top.php and (2) header.php, and the (3)… | EXPLOITHIGH 7.5EPSS 2.32% | 8 July 2011 |
| CVE-2010-4809 | SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter. | EXPLOIT ✓HIGH 7.5EPSS 0.99% | 8 July 2011 |
| CVE-2010-4808 | SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p parameter. | EXPLOIT ✓HIGH 7.5EPSS 0.99% | 8 July 2011 |
| CVE-2011-2641 | Opera 11.11 allows remote attackers to cause a denial of service (application crash) by setting the FACE attribute of a FONT element within an IFRAME element after changing the SRC attribute of this IFRAME element to an about:blank value. | EXPLOIT ✓MEDIUM 5.0EPSS 5.45% | 1 July 2011 |
| CVE-2011-2628 | Opera before 11.11 does not properly implement FRAMESET elements, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to page unload. | EXPLOIT ✓HIGH 10.0EPSS 13.4% | 1 July 2011 |
| CVE-2011-1866 | Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to execute arbitrary code via a crafted request, related to the EXEC_CMD functionality. | EXPLOIT ✓HIGH 10.0EPSS 20.9% | 1 July 2011 |
| CVE-2011-1865 | Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request containing crafted parameters. | EXPLOIT ×4 ✓HIGH 10.0EPSS 88.9% | 1 July 2011 |
| CVE-2011-2371 | Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via vectors involving a long JavaScript… | EXPLOIT ×3 ✓HIGH 10.0EPSS 75.7% | 30 June 2011 |
| CVE-2011-2194 | Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a heap-based buffer… | EXPLOIT ✓HIGH 9.3EPSS 9.18% | 24 June 2011 |
| CVE-2011-2202 | The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite… | EXPLOIT ✓MEDIUM 6.4EPSS 19.7% | 16 June 2011 |
| CVE-2011-2110 | Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as… | EXPLOIT ✓HIGH 10.0EPSS 86.4% | 16 June 2011 |
| CVE-2011-1872 | Hyper-V in Microsoft Windows Server 2008 Gold, SP2, R2, and R2 SP1 allows guest OS users to cause a denial of service (host OS infinite loop) via malformed machine instructions in a VMBus packet, aka "VMBus Persistent DoS Vulnerability." | EXPLOIT ✓MEDIUM 4.7EPSS 2.64% | 16 June 2011 |
| CVE-2011-1276 | Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows… | EXPLOIT ✓HIGH 9.3EPSS 28.2% | 16 June 2011 |
| CVE-2011-1260 | Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Layout Memory Corruption… | EXPLOIT ✓HIGH 9.3EPSS 60.8% | 16 June 2011 |
| CVE-2011-1255 | The Timed Interactive Multimedia Extensions (aka HTML+TIME) implementation in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was… | EXPLOIT ✓HIGH 9.3EPSS 42.1% | 16 June 2011 |
| CVE-2011-1249 | The Ancillary Function Driver (AFD) in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input,… | EXPLOIT ×2 ✓HIGH 7.2EPSS 8.49% | 16 June 2011 |
| CVE-2011-2179 | Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2.3 and (2) Icinga before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the expand parameter, as demonstrated by an (a) command… | EXPLOIT ✓MEDIUM 4.3EPSS 26.0% | 14 June 2011 |
| CVE-2011-1760 | utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privileges via shell metacharacters in the -e argument. | EXPLOIT ✓HIGH 7.2EPSS 1.37% | 9 June 2011 |
| CVE-2010-4804 | The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) BrowserActivity.java and (2) BrowserSettings.java in com/android/browser/. | EXPLOITMEDIUM 4.3EPSS 27.0% | 9 June 2011 |
| CVE-2011-2386 | VisiWave Site Survey before 2.1.9 allows user-assisted remote attackers to execute arbitrary code via a (1) vws and (2) vwr file with an invalid Type property, which triggers an untrusted pointer dereference. | EXPLOIT ✓HIGH 9.3EPSS 45.2% | 8 June 2011 |
| CVE-2011-2217 | Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.237, as used in VI Client (aka VMware Infrastructure Client) 2.0.2 before Build 230598 and 2.5 before Build 204931 in VMware… | EXPLOIT ✓HIGH 9.3EPSS 42.0% | 6 June 2011 |
| CVE-2011-1956 | The bytes_repr_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via arbitrary TCP traffic. | EXPLOIT ✓MEDIUM 4.3EPSS 5.85% | 6 June 2011 |
| CVE-2011-1220 | Stack-based buffer overflow in lcfd.exe in Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 allows remote authenticated users to execute arbitrary code via a long opts field. | EXPLOIT ✓HIGH 9.0EPSS 62.7% | 2 June 2011 |
| CVE-2011-2039 | The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.185 on Windows, and on Windows Mobile, downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows… | EXPLOIT ✓HIGH 7.6EPSS 70.0% | 2 June 2011 |
| CVE-2011-1938 | Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket. | EXPLOIT ×2 ✓HIGH 7.5EPSS 23.1% | 31 May 2011 |
| CVE-2011-1485 | Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows local users to gain privileges by executing a setuid program from pkexec, related to the use of the effective user ID instead of the real user ID. | EXPLOIT ×3 ✓MEDIUM 6.9EPSS 5.25% | 31 May 2011 |
| CVE-2011-1213 | Integer underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted header in a .lzh attachment that triggers a stack-based buffer overflow, aka SPR PRAD88MJ2W. | EXPLOIT ✓HIGH 9.3EPSS 33.0% | 31 May 2011 |
| CVE-2011-0546 | Symantec Backup Exec 11.0, 12.0, 12.5, 13.0, and 13.0 R2 does not validate identity information sent between the media server and the remote agent, which allows man-in-the-middle attackers to execute NDMP commands via unspecified vectors. | EXPLOIT ✓MEDIUM 6.5EPSS 1.60% | 31 May 2011 |
| CVE-2010-2246 | feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharacters in a URL. | EXPLOIT ✓MEDIUM 5.1EPSS 6.62% | 26 May 2011 |
| CVE-2011-0418 | The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly brackets, which allows remote authenticated users to cause a denial of service (memory consumption) via a crafted FTP… | EXPLOITMEDIUM 4.0EPSS 7.26% | 24 May 2011 |
| CVE-2011-2165 | The STARTTLS implementation in WatchGuard XCS 9.0 and 9.1 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in… | EXPLOITMEDIUM 6.8EPSS 5.16% | 23 May 2011 |
| CVE-2011-1838 | Multiple cross-site scripting (XSS) vulnerabilities in TemplateLogin.pm in TWiki before 5.0.2 allow remote attackers to inject arbitrary web script or HTML via the origurl parameter to a (1) view script or (2) login script. | EXPLOIT ✓MEDIUM 4.3EPSS 2.73% | 20 May 2011 |
| CVE-2011-0966 | Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to read arbitrary files via a .. | EXPLOIT ×2 ✓MEDIUM 6.8EPSS 41.3% | 20 May 2011 |
| CVE-2011-0962 | Cross-site scripting (XSS) vulnerability in CSCOnm/servlet/com.cisco.nm.help.ServerHelpEngine in the Common Services Device Center in Cisco Unified Operations Manager (CUOM) before 8.6 allows remote attackers to inject arbitrary web script or HTML via… | EXPLOIT ×2 ✓MEDIUM 4.3EPSS 6.45% | 20 May 2011 |
| CVE-2011-0961 | Cross-site scripting (XSS) vulnerability in cwhp/device.center.do in the Help servlet in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the device parameter, aka Bug ID CSCto12704. | EXPLOIT ×2 ✓MEDIUM 4.3EPSS 5.15% | 20 May 2011 |
| CVE-2011-0960 | Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to execute arbitrary SQL commands via (1) the CCMs parameter to iptm/PRTestCreation.do or (2) the ccm parameter to… | EXPLOIT ✓HIGH 7.5EPSS 3.78% | 20 May 2011 |
| CVE-2011-0959 | Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to inject arbitrary web script or HTML via (1) the extn parameter to iptm/advancedfind.do, (2) the deviceInstanceName… | EXPLOIT ×6 ✓MEDIUM 4.3EPSS 21.5% | 20 May 2011 |
| CVE-2011-0614 | Buffer overflow in Adobe Audition 3.0.1 and earlier allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Audition Session (aka .ses) file. | EXPLOIT ✓HIGH 9.3EPSS 13.7% | 16 May 2011 |
| CVE-2011-0419 | Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS… | EXPLOIT ✓MEDIUM 4.3EPSS 30.4% | 16 May 2011 |
| CVE-2011-2089 | Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22 and GENESIS32 9.x before 9.22 allows remote attackers to execute arbitrary… | EXPLOIT ×2 ✓HIGH 9.3EPSS 38.3% | 13 May 2011 |
| CVE-2011-1772 | Multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x before 2.2.3, and OpenSymphony XWork in OpenSymphony WebWork, allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) an action name, (2)… | EXPLOIT ✓LOW 2.6EPSS 33.3% | 13 May 2011 |
| CVE-2011-1248 | WINS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 does not properly handle socket send exceptions, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted… | EXPLOITHIGH 9.3EPSS 47.6% | 13 May 2011 |
| CVE-2011-0761 | Perl 5.10.x allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an ability to inject arguments into a (1) getpeername, (2) readdir, (3) closedir, (4) getsockname, (5) rewinddir,… | EXPLOIT ✓MEDIUM 5.0EPSS 8.88% | 13 May 2011 |
| CVE-2011-1271 | The JIT compiler in Microsoft .NET Framework 3.5 Gold and SP1, 3.5.1, and 4.0, when IsJITOptimizerDisabled is false, does not properly handle expressions related to null strings, which allows context-dependent attackers to bypass intended access… | EXPLOIT ✓HIGH 7.7EPSS 20.1% | 10 May 2011 |
| CVE-2011-1574 | Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary code via a crafted S3M file. | EXPLOIT ✓MEDIUM 6.8EPSS 42.9% | 9 May 2011 |
| CVE-2011-1547 | Multiple stack consumption vulnerabilities in the kernel in NetBSD 4.0, 5.0 before 5.0.3, and 5.1 before 5.1.1, when IPsec is enabled, allow remote attackers to cause a denial of service (memory corruption and panic) or possibly have unspecified other… | EXPLOIT ✓MEDIUM 6.8EPSS 5.08% | 9 May 2011 |
| CVE-2011-1571 | Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors. | EXPLOITMEDIUM 6.8EPSS 8.47% | 7 May 2011 |
| CVE-2011-0073 | Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly use nsTreeRange data structures, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "dangling pointer." | EXPLOIT ×2 ✓HIGH 10.0EPSS 70.2% | 7 May 2011 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.