Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
396,541 CVEs1,721 in CISA KEV17,395 with EPSS ≥ 10%25,049 with a public exploitUpdated 23 September 2026
25,049 results · page 180 of 501
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2010-3591 | Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Internal Operations. | EXPLOIT ×2HIGH 9.3EPSS 11.8% | 19 January 2011 |
| CVE-2010-2632 | Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability. | EXPLOITHIGH 7.8EPSS 35.0% | 19 January 2011 |
| CVE-2011-0489 | The server components in Objectivity/DB 10.0 do not require authentication for administrative commands, which allows remote attackers to modify data, obtain sensitive information, or cause a denial of service by sending requests over TCP to (1) the Lock… | EXPLOIT ✓HIGH 7.5EPSS 12.6% | 18 January 2011 |
| CVE-2010-4566 | The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NTLM authentication component in Access Gateway Standard and Advanced Editions before Access Gateway 5.0, allows… | EXPLOIT ×2 ✓HIGH 9.3EPSS 27.8% | 14 January 2011 |
| CVE-2010-4335 | The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted data[_Token][fields] value that is… | EXPLOIT ×2 ✓HIGH 7.5EPSS 55.2% | 14 January 2011 |
| CVE-2009-5018 | Stack-based buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to execute arbitrary code via a long command-line argument, as demonstrated by a CGI program that launches gif2png. | EXPLOIT ✓MEDIUM 6.8EPSS 10.9% | 14 January 2011 |
| CVE-2011-0267 | Multiple buffer overflows in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allow remote attackers to execute arbitrary code via a long (1) schdParams or (2) nameParams parameter, a different vulnerability than CVE-2011-0266. | EXPLOIT ✓HIGH 10.0EPSS 71.7% | 13 January 2011 |
| CVE-2011-0266 | Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long nameParams parameter, a different vulnerability than CVE-2011-0267.2. | EXPLOIT ✓HIGH 10.0EPSS 70.1% | 13 January 2011 |
| CVE-2010-4647 | Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) help/index.jsp or (2)… | EXPLOIT ×2 ✓MEDIUM 4.3EPSS 5.71% | 13 January 2011 |
| CVE-2010-4052 | Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (resource exhaustion) via a regular… | EXPLOIT ×2 ✓MEDIUM 5.0EPSS 51.3% | 13 January 2011 |
| CVE-2010-4051 | The regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (application crash) via a regular expression containing adjacent bounded… | EXPLOITMEDIUM 5.0EPSS 40.0% | 13 January 2011 |
| CVE-2008-7271 | Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE, possibly 3.3.2, allow remote attackers to inject arbitrary web script or HTML via (1) the searchWord parameter to… | EXPLOIT ×2 ✓MEDIUM 4.3EPSS 1.90% | 13 January 2011 |
| CVE-2011-0443 | SQL injection vulnerability in inc/tinybb-settings.php in tinyBB 1.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action to index.php. | EXPLOIT ✓MEDIUM 6.8EPSS 1.12% | 13 January 2011 |
| CVE-2011-0027 | Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures, which allows remote attackers to execute arbitrary code, possibly via a… | EXPLOIT ✓HIGH 9.3EPSS 54.4% | 12 January 2011 |
| CVE-2010-3683 | Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a crafted request. | EXPLOIT ✓MEDIUM 4.0EPSS 12.2% | 11 January 2011 |
| CVE-2010-3682 | Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ... | EXPLOIT ✓MEDIUM 4.0EPSS 11.4% | 11 January 2011 |
| CVE-2010-3681 | Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface and performing "alternate reads from two indexes on a table," which triggers an… | EXPLOIT ✓MEDIUM 4.0EPSS 12.2% | 11 January 2011 |
| CVE-2010-3680 | Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by creating temporary tables with nullable columns while using InnoDB, which triggers an assertion failure. | EXPLOIT ✓MEDIUM 4.0EPSS 12.2% | 11 January 2011 |
| CVE-2010-3679 | Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to the BINLOG command, which triggers an access of uninitialized memory, as demonstrated by valgrind. | EXPLOIT ✓MEDIUM 4.0EPSS 12.2% | 11 January 2011 |
| CVE-2010-3678 | Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2) CASE operations with NULL arguments that are explicitly specified or indirectly provided by the WITH ROLLUP modifier. | EXPLOIT ✓MEDIUM 4.0EPSS 12.2% | 11 January 2011 |
| CVE-2010-3676 | storage/innobase/dict/dict0crea.c in mysqld in Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (assertion failure) by modifying the (1) innodb_file_format or (2) innodb_file_per_table configuration… | EXPLOIT ✓MEDIUM 4.0EPSS 9.47% | 11 January 2011 |
| CVE-2011-0407 | SQL injection vulnerability in the store function in _phenotype/system/class/PhenoTypeDataObject.class.php in Phenotype CMS 3.0 allows remote attackers to execute arbitrary SQL commands via a crafted URI, as demonstrated by Gallery/gal_id/1/image1,1.html. | EXPLOITHIGH 7.5EPSS 1.15% | 11 January 2011 |
| CVE-2011-0406 | Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a long request to TCP port 777. | EXPLOIT ✓HIGH 10.0EPSS 21.3% | 11 January 2011 |
| CVE-2011-0405 | Directory traversal vulnerability in module.php in PhpGedView 4.2.3 and possibly other versions, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the pgvaction parameter. | EXPLOIT ✓MEDIUM 6.8EPSS 6.05% | 11 January 2011 |
| CVE-2011-0404 | Stack-based buffer overflow in NetSupport Manager Agent for Linux 11.00, for Solaris 9.50, and for Mac OS X 11.00 allows remote attackers to execute arbitrary code via a long control hostname to TCP port 5405, probably a different vulnerability than… | EXPLOIT ×2 ✓HIGH 7.5EPSS 64.7% | 11 January 2011 |
| CVE-2011-0403 | Untrusted search path vulnerability in ImgBurn.exe in ImgBurn 2.4.0.0, 2.5.4.0, and other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is… | EXPLOIT ✓HIGH 9.3EPSS 7.07% | 11 January 2011 |
| CVE-2011-0005 | Cross-site scripting (XSS) vulnerability in the com_search module for Joomla! | EXPLOIT ✓MEDIUM 4.3EPSS 1.77% | 11 January 2011 |
| CVE-2010-4693 | Multiple cross-site scripting (XSS) vulnerabilities in Coppermine Photo Gallery 1.5.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) h and (2) t parameters to help.php, or (3) picfile_XXX parameter to searchnew.php. | EXPLOIT ×2 ✓MEDIUM 4.3EPSS 1.81% | 11 January 2011 |
| CVE-2010-4645 | strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service (infinite loop) via a certain floating-point value in scientific notation,… | EXPLOIT ✓MEDIUM 5.0EPSS 15.1% | 11 January 2011 |
| CVE-2010-3201 | Cross-site scripting (XSS) vulnerability in NetWin Surgemail before 4.3g allows remote attackers to inject arbitrary web script or HTML via the username_ex parameter to the surgeweb program. | EXPLOIT ✓MEDIUM 4.3EPSS 3.09% | 7 January 2011 |
| CVE-2010-4543 | Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a PSP_COMP_RLE… | EXPLOIT ✓HIGH 7.5EPSS 16.3% | 7 January 2011 |
| CVE-2010-4538 | Buffer overflow in the sect_enttec_dmx_da function in epan/dissectors/packet-enttec.c in Wireshark 1.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ENTTEC DMX packet with Run… | EXPLOIT ✓HIGH 9.3EPSS 29.0% | 7 January 2011 |
| CVE-2010-3856 | ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LD_AUDIT environment variable to reference dynamic shared objects (DSOs) as audit objects, which allows local users to gain… | EXPLOIT ×3 ✓HIGH 7.2EPSS 11.2% | 7 January 2011 |
| CVE-2010-3847 | elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environment variable, which allows local users to gain privileges via a crafted… | EXPLOIT ×4 ✓MEDIUM 6.9EPSS 9.49% | 7 January 2011 |
| CVE-2010-4350 | Directory traversal vulnerability in admin/upgrade_unattended.php in MantisBT before 1.2.4 allows remote attackers to include and execute arbitrary local files via a .. | EXPLOITMEDIUM 5.1EPSS 7.88% | 3 January 2011 |
| CVE-2010-4349 | admin/upgrade_unattended.php in MantisBT before 1.2.4 allows remote attackers to obtain sensitive information via an invalid db_type parameter, which reveals the installation path in an error message, related to an unsafe call by MantisBT to a function… | EXPLOITMEDIUM 5.0EPSS 8.84% | 3 January 2011 |
| CVE-2010-4348 | Cross-site scripting (XSS) vulnerability in admin/upgrade_unattended.php in MantisBT before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the db_type parameter, related to an unsafe call by MantisBT to a function in the ADOdb… | EXPLOITMEDIUM 4.3EPSS 4.64% | 3 January 2011 |
| CVE-2010-1677 | MHonArc 2.6.16 allows remote attackers to cause a denial of service (CPU consumption) via start tags that are placed within other start tags, as demonstrated by a <bo<bo<bo<bo<body>dy>dy>dy>dy> sequence, a different vulnerability than CVE-2010-4524. | EXPLOIT ✓MEDIUM 5.0EPSS 8.84% | 3 January 2011 |
| CVE-2010-4638 | SQL injection vulnerability in the submitSurvey function in controller.php in JQuarks4s (com_jquarks4s) component 1.0.0 for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the q parameter in a… | EXPLOIT ✓MEDIUM 6.8EPSS 0.92% | 30 December 2010 |
| CVE-2010-4636 | SQL injection vulnerability in detail.asp in Site2Nite Business e-Listings allows remote attackers to execute arbitrary SQL commands via the ID parameter. | EXPLOIT ✓HIGH 7.5EPSS 1.02% | 30 December 2010 |
| CVE-2010-4635 | SQL injection vulnerability in detail.asp in Site2Nite Vacation Rental (VRBO) Listings allows remote attackers to execute arbitrary SQL commands via the ID parameter. | EXPLOIT ✓HIGH 7.5EPSS 1.15% | 30 December 2010 |
| CVE-2010-4633 | SQL injection vulnerability in cart.php in digiSHOP 2.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vulnerability than CVE-2005-4614.1. | EXPLOIT ✓HIGH 7.5EPSS 0.99% | 30 December 2010 |
| CVE-2010-4632 | Multiple SQL injection vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to execute arbitrary SQL commands via the (1) article parameter to kb.asp, (2) specific parameter to cart.asp, (3) countrycode parameter to contact.asp, and the (4)… | EXPLOIT ✓HIGH 7.5EPSS 1.15% | 30 December 2010 |
| CVE-2010-4631 | Multiple cross-site scripting (XSS) vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) countrycode parameter to contact.asp, USERNAME parameter to (2) gateway.asp and (3) cart.asp, and the… | EXPLOIT ✓MEDIUM 4.3EPSS 1.78% | 30 December 2010 |
| CVE-2010-4507 | Multiple cross-site request forgery (CSRF) vulnerabilities on the iSpot 2.0.0.0 R1679, and the ClearSpot 2.0.0.0 R1512 and R1786, with firmware 1.9.9.4 allow remote attackers to hijack the authentication of administrators for requests that (1) execute… | EXPLOIT ✓HIGH 9.3EPSS 1.83% | 30 December 2010 |
| CVE-2010-4321 | Stack-based buffer overflow in an ActiveX control in ienipp.ocx in Novell iPrint Client 5.52 allows remote attackers to execute arbitrary code via a long argument to (1) the GetDriverSettings2 method, as reachable by (2) the GetDriverSettings method. | EXPLOIT ×2 ✓HIGH 9.3EPSS 33.2% | 30 December 2010 |
| CVE-2010-4276 | Cross-site scripting (XSS) vulnerability in the lz_tracking_set_sessid function in templates/jscript/jstrack.tpl in LiveZilla 3.2.0.2 allows remote attackers to inject arbitrary web script or HTML via the livezilla parameter in a track action to… | EXPLOIT ✓MEDIUM 4.3EPSS 1.69% | 30 December 2010 |
| CVE-2010-4258 | The do_exit function in kernel/exit.c in the Linux kernel before 2.6.36.2 does not properly handle a KERNEL_DS get_fs value, which allows local users to bypass intended access_ok restrictions, overwrite arbitrary kernel memory locations, and gain… | EXPLOIT ✓MEDIUM 6.2EPSS 2.66% | 30 December 2010 |
| CVE-2010-4158 | The sk_run_filter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain memory location has been initialized before executing a (1) BPF_S_LD_MEM or (2) BPF_S_LDX_MEM instruction, which allows local users to… | EXPLOIT ✓LOW 2.1EPSS 0.87% | 30 December 2010 |
| CVE-2010-3850 | The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended access restrictions and configure econet addresses via an SIOCSIFADDR… | EXPLOIT ×2 ✓LOW 2.1EPSS 0.80% | 30 December 2010 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.