Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
417,593 CVEs1,766 in CISA KEV17,506 with EPSS ≥ 10%25,055 with a public exploitUpdated 31 October 2026
1,766 results · page 34 of 36
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2013-6282 | Linux Kernel Improper Input Validation Vulnerability | KEVEXPLOIT ×2 ✓HIGH 8.8EPSS 39.7% | 20 November 2013 |
| CVE-2013-5223 | D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability | KEVEXPLOIT ×2MEDIUM 5.4EPSS 50.8% | 19 November 2013 |
| CVE-2013-3918 | Microsoft Windows Out-of-Bounds Write Vulnerability | KEVEXPLOIT ✓HIGH 8.8EPSS 73.7% | 12 November 2013 |
| CVE-2013-3906 | Microsoft Graphics Component Memory Corruption Vulnerability | KEVEXPLOIT ✓HIGH 7.8EPSS 84.9% | 6 November 2013 |
| CVE-2013-3897 | Microsoft Internet Explorer Use-After-Free Vulnerability | KEVEXPLOIT ✓HIGH 8.8EPSS 77.3% | 9 October 2013 |
| CVE-2013-3896 | Microsoft Silverlight Information Disclosure Vulnerability | KEVEXPLOIT ✓MEDIUM 5.5EPSS 68.0% | 9 October 2013 |
| CVE-2013-3893 | Microsoft Internet Explorer Resource Management Errors Vulnerability | KEVEXPLOIT ×2 ✓HIGH 8.8EPSS 87.6% | 18 September 2013 |
| CVE-2013-4810 | HP Multiple Products Remote Code Execution Vulnerability | KEVEXPLOIT ✓CRITICAL 9.8EPSS 79.5% | 16 September 2013 |
| CVE-2013-3346 | Adobe Reader and Acrobat Memory Corruption Vulnerability | KEVEXPLOIT ✓CRITICAL 9.8EPSS 78.9% | 30 August 2013 |
| CVE-2013-2251 | Apache Struts Improper Input Validation Vulnerability | KEVEXPLOIT ×2 ✓CRITICAL 9.8EPSS 100.0% | 20 July 2013 |
| CVE-2013-3163 | Microsoft Internet Explorer Memory Corruption Vulnerability | KEVEXPLOIT ✓HIGH 8.8EPSS 70.7% | 10 July 2013 |
| CVE-2013-1690 | Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability | KEVEXPLOIT ✓HIGH 8.8EPSS 69.0% | 26 June 2013 |
| CVE-2013-2465 | Oracle Java SE Unspecified Vulnerability | KEVEXPLOIT ✓CRITICAL 9.8EPSS 98.8% | 18 June 2013 |
| CVE-2013-1331 | Microsoft Office Buffer Overflow Vulnerability | KEVHIGH 7.8EPSS 79.8% | 12 June 2013 |
| CVE-2013-3660 | Microsoft Win32k Privilege Escalation Vulnerability | KEVEXPLOIT ×3 ✓HIGH 7.8EPSS 39.3% | 24 May 2013 |
| CVE-2013-2729 | Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability | KEVEXPLOITCRITICAL 9.8EPSS 66.6% | 16 May 2013 |
| CVE-2013-1675 | Mozilla Firefox Information Disclosure Vulnerability | KEVMEDIUM 6.5EPSS 6.70% | 16 May 2013 |
| CVE-2013-2094 | Linux Kernel Privilege Escalation Vulnerability | KEVEXPLOIT ×3 ✓HIGH 8.4EPSS 47.7% | 14 May 2013 |
| CVE-2013-1347 | Microsoft Internet Explorer Remote Code Execution Vulnerability | KEVEXPLOIT ✓HIGH 8.8EPSS 77.7% | 5 May 2013 |
| CVE-2013-2423 | Oracle JRE Unspecified Vulnerability | KEVEXPLOIT ✓LOW 3.7EPSS 85.2% | 17 April 2013 |
| CVE-2013-2596 | Linux Kernel Integer Overflow Vulnerability | KEVHIGH 7.8EPSS 3.21% | 13 April 2013 |
| CVE-2013-0074 | Microsoft Silverlight Double Dereference Vulnerability | KEVEXPLOIT ×2 ✓HIGH 7.8EPSS 78.9% | 13 March 2013 |
| CVE-2013-2551 | Microsoft Internet Explorer Use-After-Free Vulnerability | KEVEXPLOIT ✓HIGH 8.8EPSS 73.9% | 11 March 2013 |
| CVE-2013-0648 | Adobe Flash Player Code Execution Vulnerability | KEVHIGH 8.8EPSS 11.1% | 27 February 2013 |
| CVE-2013-0643 | Adobe Flash Player Incorrect Default Permissions Vulnerability | KEVHIGH 8.8EPSS 10.5% | 27 February 2013 |
| CVE-2013-0641 | Adobe Reader Buffer Overflow Vulnerability | KEVHIGH 7.8EPSS 32.3% | 14 February 2013 |
| CVE-2013-0640 | Adobe Reader and Acrobat Memory Corruption Vulnerability | KEVEXPLOIT ✓HIGH 7.8EPSS 86.9% | 14 February 2013 |
| CVE-2013-0431 | Oracle JRE Sandbox Bypass Vulnerability | KEVEXPLOIT ✓LOW 3.7EPSS 90.1% | 31 January 2013 |
| CVE-2013-0632 | Adobe ColdFusion Authentication Bypass Vulnerability | KEVEXPLOIT ×3 ✓CRITICAL 9.8EPSS 93.1% | 17 January 2013 |
| CVE-2013-0422 | Oracle JRE Remote Code Execution Vulnerability | KEVEXPLOIT ✓CRITICAL 9.8EPSS 97.0% | 10 January 2013 |
| CVE-2013-0631 | Adobe ColdFusion Information Disclosure Vulnerability | KEVHIGH 7.5EPSS 66.4% | 9 January 2013 |
| CVE-2013-0629 | Adobe ColdFusion Directory Traversal Vulnerability | KEVEXPLOIT ✓HIGH 7.5EPSS 65.8% | 9 January 2013 |
| CVE-2013-0625 | Adobe ColdFusion Authentication Bypass Vulnerability | KEVEXPLOIT ✓CRITICAL 9.8EPSS 93.8% | 9 January 2013 |
| CVE-2012-4792 | Microsoft Internet Explorer Use-After-Free Vulnerability | KEVEXPLOIT ×2 ✓HIGH 8.8EPSS 78.8% | 30 December 2012 |
| CVE-2012-2539 | Microsoft Word Remote Code Execution Vulnerability | KEVHIGH 7.8EPSS 53.0% | 12 December 2012 |
| CVE-2012-3152 | Oracle Fusion Middleware Unspecified Vulnerability | KEVEXPLOIT ×2 ✓CRITICAL 9.1EPSS 98.8% | 16 October 2012 |
| CVE-2012-0518 | Oracle Fusion Middleware Unspecified Vulnerability | KEVMEDIUM 4.7EPSS 4.69% | 16 October 2012 |
| CVE-2012-5076 | Oracle Java SE Sandbox Bypass Vulnerability | KEVEXPLOIT ×2 ✓CRITICAL 9.8EPSS 91.3% | 16 October 2012 |
| CVE-2012-5054 | Adobe Flash Player Integer Overflow Vulnerability | KEVHIGH 8.8EPSS 21.2% | 24 September 2012 |
| CVE-2012-4969 | Microsoft Internet Explorer Use-After-Free Vulnerability | KEVEXPLOIT ✓HIGH 8.1EPSS 80.3% | 18 September 2012 |
| CVE-2012-4681 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | KEVEXPLOIT ✓CRITICAL 9.8EPSS 98.5% | 28 August 2012 |
| CVE-2012-1535 | Adobe Flash Player Arbitrary Code Execution Vulnerability | KEVEXPLOIT ✓HIGH 7.8EPSS 70.4% | 15 August 2012 |
| CVE-2012-1856 | Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability | KEVHIGH 8.8EPSS 72.0% | 15 August 2012 |
| CVE-2012-1854 | Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability | KEVHIGH 7.8EPSS 20.9% | 10 July 2012 |
| CVE-2012-1723 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | KEVEXPLOIT ✓CRITICAL 9.8EPSS 93.6% | 16 June 2012 |
| CVE-2012-1889 | Microsoft XML Core Services Memory Corruption Vulnerability | KEVEXPLOIT ✓HIGH 8.8EPSS 83.5% | 13 June 2012 |
| CVE-2012-2034 | Adobe Flash Player Memory Corruption Vulnerability | KEVHIGH 7.5EPSS 7.71% | 9 June 2012 |
| CVE-2012-0507 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | KEVEXPLOIT ✓CRITICAL 9.8EPSS 98.2% | 7 June 2012 |
| CVE-2012-1823 | PHP-CGI Query String Parameter Vulnerability | KEVEXPLOIT ×4 ✓CRITICAL 9.8EPSS 100.0% | 11 May 2012 |
| CVE-2012-1710 | Oracle Fusion Middleware Unspecified Vulnerability | KEVCRITICAL 9.8EPSS 7.83% | 3 May 2012 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.