Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
396,541 CVEs1,721 in CISA KEV17,395 with EPSS ≥ 10%25,049 with a public exploitUpdated 23 September 2026
25,049 results · page 179 of 501
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2011-0276 | HP OpenView Performance Insight Server 5.2, 5.3, 5.31, 5.4, and 5.41 contains a "hidden account" in the com.trinagy.security.XMLUserManager Java class, which allows remote attackers to execute arbitrary code via the doPost method in the… | EXPLOIT ✓HIGH 10.0EPSS 82.4% | 2 February 2011 |
| CVE-2010-4721 | SQL injection vulnerability in news.php in Immo Makler allows remote attackers to execute arbitrary SQL commands via the id parameter. | EXPLOIT ✓HIGH 7.5EPSS 2.37% | 1 February 2011 |
| CVE-2010-4719 | Directory traversal vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php. | EXPLOIT ✓HIGH 7.5EPSS 15.4% | 1 February 2011 |
| CVE-2011-0096 | The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for content… | EXPLOIT ✓MEDIUM 6.1EPSS 46.8% | 31 January 2011 |
| CVE-2010-4717 | Multiple stack-based buffer overflows in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a long (1) LIST or (2) LSUB command. | EXPLOIT ✓MEDIUM 6.5EPSS 9.93% | 31 January 2011 |
| CVE-2010-4715 | Multiple directory traversal vulnerabilities in the (1) WebAccess Agent and (2) Document Viewer Agent components in Novell GroupWise before 8.02HP allow remote attackers to read arbitrary files via unspecified vectors. | EXPLOIT ✓MEDIUM 5.0EPSS 28.3% | 31 January 2011 |
| CVE-2010-4711 | Double free vulnerability in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allows remote attackers to execute arbitrary code via a large parameter in a LIST command. | EXPLOIT ✓HIGH 10.0EPSS 13.6% | 31 January 2011 |
| CVE-2010-2777 | Stack-based buffer overflow in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise 7.x before 7.0 post-SP4 FTF and 8.x before 8.0 SP2 allows remote attackers to execute arbitrary code via a long mailbox name in a CREATE… | EXPLOIT ✓HIGH 9.0EPSS 10.4% | 28 January 2011 |
| CVE-2011-0678 | Unrestricted file upload vulnerability in the EasyEdit module in Lomtec ActiveWeb Professional 3.0 allows remote attackers to execute arbitrary code by uploading an executable file via the UploadDirectory and Accepted Extensions fields in the… | EXPLOIT ✓MEDIUM 6.8EPSS 9.21% | 28 January 2011 |
| CVE-2011-0652 | lnsfw1.sys 6.0.2900.5512 in Look 'n' Stop Firewall 2.06p4 and 2.07 allows local users to cause a denial of service (crash) via a crafted 0x80000064 IOCTL request that triggers an assertion failure. | EXPLOITLOW 2.1EPSS 0.75% | 28 January 2011 |
| CVE-2011-0018 | The email function in manage_sql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x through 2.0rc2 allows remote authenticated users to execute arbitrary commands via the (1) To or (2) From e-mail address in an OMP request to the Greenbone Security… | EXPLOIT ✓HIGH 9.0EPSS 9.27% | 28 January 2011 |
| CVE-2010-4709 | Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server before 3.0.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a MODBUS response packet with a crafted length field. | EXPLOIT ✓HIGH 7.6EPSS 16.2% | 28 January 2011 |
| CVE-2011-0646 | SQL injection vulnerability in viewfaqs.php in PHP LOW BIDS allows remote attackers to execute arbitrary SQL commands via the cat parameter. | EXPLOIT ✓HIGH 7.5EPSS 1.02% | 25 January 2011 |
| CVE-2011-0645 | SQL injection vulnerability in data.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via the where_time parameter in a get action. | EXPLOIT ×2 ✓HIGH 7.5EPSS 1.00% | 25 January 2011 |
| CVE-2011-0644 | SQL injection vulnerability in include/admin/model_field.class.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via the modelid parameter to flash_upload.php. | EXPLOIT ✓HIGH 7.5EPSS 1.17% | 25 January 2011 |
| CVE-2011-0643 | Cross-site request forgery (CSRF) vulnerability in admin/conf_users_edit.php in PHP Link Directory (phpLD) 4.1.0 allows remote attackers to hijack the authentication of administrators for requests that add an administrator via the N action. | EXPLOITMEDIUM 6.8EPSS 0.97% | 25 January 2011 |
| CVE-2011-0642 | Cross-site request forgery (CSRF) vulnerability in news/admin.php in N-13 News 3.4, 3.7, and 4.0 allows remote attackers to hijack the authentication of administrators for requests that create new users via the options action. | EXPLOITMEDIUM 4.3EPSS 0.86% | 25 January 2011 |
| CVE-2011-0020 | Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service… | EXPLOIT ✓HIGH 7.6EPSS 18.9% | 24 January 2011 |
| CVE-2011-0635 | Static code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated users to inject arbitrary PHP code into config/custom/base.ini.php via the ftpserver parameter (FTP-Server field) to the sicore/updates/optionssav operation… | EXPLOITMEDIUM 6.0EPSS 1.92% | 22 January 2011 |
| CVE-2010-4243 | fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays representing the (1) arguments and (2) environment, which allows local users to cause a denial of service (memory consumption) via a… | EXPLOITMEDIUM 4.9EPSS 0.91% | 22 January 2011 |
| CVE-2010-3879 | FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink attack on the parent directory of the mountpoint of a FUSE filesystem, a different vulnerability… | EXPLOIT ✓MEDIUM 5.8EPSS 9.85% | 22 January 2011 |
| CVE-2010-2743 | The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during the loading of keyboard layouts from disk, which allows local users to gain privileges via a crafted application, as demonstrated in… | EXPLOIT ✓HIGH 7.2EPSS 14.6% | 20 January 2011 |
| CVE-2011-0519 | SQL injection vulnerability in gallery.php in Gallarific PHP Photo Gallery script 2.1 and possibly other versions allows remote attackers to execute arbitrary SQL commands via the id parameter. | EXPLOIT ✓HIGH 7.5EPSS 0.91% | 20 January 2011 |
| CVE-2011-0518 | Directory traversal vulnerability in core/lib/router.php in LotusCMS Fraise 3.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via the system parameter to index.php. | EXPLOIT ✓MEDIUM 5.1EPSS 15.8% | 20 January 2011 |
| CVE-2011-0517 | Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted 0x02 opcode to TCP port 46823. | EXPLOIT ×2 ✓HIGH 9.3EPSS 40.5% | 20 January 2011 |
| CVE-2011-0516 | SQL injection vulnerability in mainx_a.php in E-PROMPT C BetMore Site Suite 4.0 through 4.2.0 allows remote attackers to execute arbitrary SQL commands via the bid parameter. | EXPLOITHIGH 7.5EPSS 1.02% | 20 January 2011 |
| CVE-2011-0515 | KisKrnl.sys 2011.1.13.89 and earlier in Kingsoft AntiVirus 2011 SP5.2 allows local users to cause a denial of service (crash) via a crafted request that is not properly handled by the KiFastCallEntry hook. | EXPLOITLOW 2.1EPSS 0.88% | 20 January 2011 |
| CVE-2011-0514 | The RDS service (rds.exe) in HP Data Protector Manager 6.11 allows remote attackers to cause a denial of service (crash) via a packet with a large data size to TCP port 1530. | EXPLOIT ✓MEDIUM 5.0EPSS 48.9% | 20 January 2011 |
| CVE-2011-0513 | DCR.sys driver in SecurStar DriveCrypt 5.4, 5.3, and earlier allows local users to execute arbitrary code via a crafted argument to the 0x00073800 IOCTL. | EXPLOITHIGH 7.2EPSS 0.97% | 20 January 2011 |
| CVE-2011-0512 | SQL injection vulnerability in team.php in the Teams Structure module 3.0 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the team_id parameter. | EXPLOIT ✓MEDIUM 6.8EPSS 1.94% | 20 January 2011 |
| CVE-2011-0511 | SQL injection vulnerability in the allCineVid component (com_allcinevid) 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. | EXPLOIT ✓HIGH 7.5EPSS 1.02% | 20 January 2011 |
| CVE-2011-0510 | SQL injection vulnerability in cart.php in Advanced Webhost Billing System (AWBS) 2.9.2 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the oid parameter in an add_other action. | EXPLOIT ✓HIGH 7.5EPSS 2.04% | 20 January 2011 |
| CVE-2011-0507 | FTPService.exe in Blackmoon FTP 3.1 Build 1735 and Build 1736 (3.1.7.1736), and possibly other versions before 3.1.8.1737, allows remote attackers to cause a denial of service (crash) via a large number of PORT commands with long arguments, which… | EXPLOIT ✓MEDIUM 4.3EPSS 4.92% | 20 January 2011 |
| CVE-2011-0506 | Directory traversal vulnerability in modules/profile/user.php in Ax Developer CMS (AxDCMS) 0.1.1 allows remote attackers to execute arbitrary code via a .. | EXPLOIT ✓MEDIUM 6.8EPSS 3.29% | 20 January 2011 |
| CVE-2011-0505 | Directory traversal vulnerability in system/system.php in Zwii 2.1.1, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the… | EXPLOITMEDIUM 5.1EPSS 2.45% | 20 January 2011 |
| CVE-2011-0504 | Multiple cross-site scripting (XSS) vulnerabilities in VaM Shop 1.6, 1.6.1, and probably earlier versions llow remote attackers to inject arbitrary web script or HTML via the (1) status parameter to admin/orders.php, (2) search parameter to… | EXPLOITMEDIUM 4.3EPSS 4.01% | 20 January 2011 |
| CVE-2011-0503 | Cross-site request forgery (CSRF) vulnerability in VaM Shop 1.6, 1.6.1, and probably earlier versions allows remote attackers to hijack the authentication of administrators for requests that (1) change user status via admin/customers.php or (2) change… | EXPLOITMEDIUM 6.8EPSS 2.11% | 20 January 2011 |
| CVE-2011-0502 | Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a long line in a MIDI (.mid) file. | EXPLOIT ✓HIGH 9.3EPSS 5.70% | 20 January 2011 |
| CVE-2011-0501 | Stack-based buffer overflow in Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attackers to execute arbitrary code via a long line in a .mamx file. | EXPLOIT ✓HIGH 9.3EPSS 16.3% | 20 January 2011 |
| CVE-2011-0500 | Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions; allows user-assisted remote attackers to execute arbitrary code via a VideoSpirit project (.visprj) file containing a valitem… | EXPLOIT ×2 ✓HIGH 9.3EPSS 30.7% | 20 January 2011 |
| CVE-2011-0499 | Buffer overflow in VideoSpirit Pro 1.6.8.1 and possibly earlier versions, and VideoSpirit Lite 1.4.0.1 and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a VideoSpirit project (.visprj) file containing a… | EXPLOIT ×2 ✓HIGH 9.3EPSS 31.0% | 20 January 2011 |
| CVE-2011-0498 | Stack-based buffer overflow in Nokia Multimedia Player 1.00.55.5010, and possibly other versions, allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long entry in a playlist (.npl) file. | EXPLOIT ✓HIGH 9.3EPSS 5.74% | 20 January 2011 |
| CVE-2010-4701 | Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover Page Editor 5.2 r2 in Windows XP Professional SP3, Server 2003 R2 Enterprise Edition SP2, and Windows 7 Professional allows remote… | EXPLOIT ✓HIGH 7.6EPSS 47.8% | 20 January 2011 |
| CVE-2010-4331 | Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel 2.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) default_news or (2) sponsors cookies, which are not properly handled by (a) controllers/index.ctrl.php or… | EXPLOITMEDIUM 4.3EPSS 1.52% | 20 January 2011 |
| CVE-2010-4437 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container. | EXPLOITMEDIUM 5.8EPSS 6.87% | 19 January 2011 |
| CVE-2010-4435 | Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability, related to CDE Calendar Manager Service Daemon and RPC. | EXPLOITHIGH 10.0EPSS 14.2% | 19 January 2011 |
| CVE-2010-4417 | Unspecified vulnerability in the Services for Beehive component in Oracle Fusion Middleware 2.0.1.0, 2.0.1.1, 2.0.1.2, 2.0.1.2.1, and 2.0.1.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. | EXPLOIT ✓HIGH 7.5EPSS 76.3% | 19 January 2011 |
| CVE-2010-3600 | Unspecified vulnerability in the Client System Analyzer component in Oracle Database Server 11.1.0.7 and 11.2.0.1 and Enterprise Manager Grid Control 10.2.0.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown… | EXPLOIT ✓HIGH 7.5EPSS 76.7% | 19 January 2011 |
| CVE-2010-3599 | Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect integrity and availability via unknown vectors related to Import Server. | EXPLOITHIGH 9.4EPSS 16.2% | 19 January 2011 |
| CVE-2010-3595 | Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect confidentiality via unknown vectors related to Import Server. | EXPLOITHIGH 7.8EPSS 11.9% | 19 January 2011 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.