Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
395,963 CVEs1,717 in CISA KEV17,157 with EPSS ≥ 10%25,049 with a public exploitUpdated 22 September 2026
17,157 results · page 309 of 344
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2006-1189 | Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via a crafted URL with an International Domain Name (IDN) using double-byte character sets (DBCS), aka the "Double Byte… | EXPLOIT ✓HIGH 10.0EPSS 61.4% | 11 April 2006 |
| CVE-2006-1188 | Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via HTML elements with a certain crafted tag, which leads to memory corruption. | EXPLOIT ✓HIGH 7.5EPSS 57.2% | 11 April 2006 |
| CVE-2006-1186 | Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via by instantiating the (1) Mdt2gddr.dll, (2) Mdt2dd.dll, and (3) Mdt2gddo.dll COM objects as ActiveX controls, which leads to memory corruption. | EXPLOIT ✓HIGH 10.0EPSS 57.9% | 11 April 2006 |
| CVE-2006-1185 | Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via certain invalid HTML that causes memory corruption. | EXPLOIT ✓HIGH 7.5EPSS 70.0% | 11 April 2006 |
| CVE-2006-0015 | Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services allows remote attackers to inject arbitrary web script or HTML, then leverage the attack to execute… | EXPLOIT ✓MEDIUM 6.8EPSS 24.4% | 11 April 2006 |
| CVE-2006-0996 | Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script or HTML via long array variables, including (1) a large number of dimensions or (2) long values, which prevents… | EXPLOIT ✓MEDIUM 4.3EPSS 10.8% | 10 April 2006 |
| CVE-2006-1664 | Buffer overflow in xine_list_delete_current in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attackers to execute arbitrary code via a crafted MPEG stream. | EXPLOIT ✓HIGH 7.5EPSS 14.6% | 7 April 2006 |
| CVE-2006-1615 | Multiple format string vulnerabilities in the logging code in Clam AntiVirus (ClamAV) before 0.88.1 might allow remote attackers to execute arbitrary code. | HIGH 10.0EPSS 11.4% | 6 April 2006 |
| CVE-2006-1652 | Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-assisted remote attackers to execute arbitrary code via a malicious server that sends a long string to a client that connects on TCP… | EXPLOIT ×3 ✓HIGH 9.0EPSS 67.4% | 6 April 2006 |
| CVE-2006-1651 | Microsoft ISA Server 2004 allows remote attackers to bypass certain filtering rules, including ones for (1) ICMP and (2) TCP, via IPv6 packets. | HIGH 7.5EPSS 15.2% | 6 April 2006 |
| CVE-2006-1626 | Internet Explorer 6 for Windows XP SP2 and earlier allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a… | EXPLOIT ✓MEDIUM 4.3EPSS 25.3% | 5 April 2006 |
| CVE-2006-1618 | Format string vulnerability in the (1) Con_message and (2) conPrintf functions in con_main.c in Doomsday engine 1.8.6 allows remote attackers to execute arbitrary code via format string specifiers in an argument to the JOIN command, and possibly other… | EXPLOIT ✓HIGH 7.5EPSS 13.2% | 5 April 2006 |
| CVE-2006-1547 | Apache Struts 1 ActionForm Denial-of-Service Vulnerability | KEVHIGH 7.5EPSS 54.6% | 30 March 2006 |
| CVE-2006-1540 | MSO.DLL in Microsoft Office 2000, Office XP (2002), and Office 2003 allows user-assisted attackers to cause a denial of service and execute arbitrary code via multiple attack vectors, as originally demonstrated using a crafted document record with a… | EXPLOIT ✓HIGH 9.3EPSS 28.6% | 30 March 2006 |
| CVE-2006-1510 | Buffer overflow in calloc.c in the Microsoft Windows XP SP2 ntdll.dll system library, when used by the ILDASM disassembler in the Microsoft .NET 1.0 and 1.1 SDK, might allow user-assisted attackers to execute arbitrary code via a crafted .dll file with… | EXPLOIT ✓MEDIUM 4.0EPSS 13.8% | 30 March 2006 |
| CVE-2006-1491 | Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execute arbitrary code via the help viewer. | EXPLOIT ✓HIGH 7.5EPSS 39.2% | 29 March 2006 |
| CVE-2006-1490 | PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script that processes user input in the html_entity_decode function and sends the encoded results back to the client, aka a "binary safety"… | EXPLOIT ✓MEDIUM 5.0EPSS 21.0% | 29 March 2006 |
| CVE-2006-0991 | Buffer overflow in the NetBackup Sharepoint Services server daemon (bpspsserver) on NetBackup 6.0 for Windows allows remote attackers to execute arbitrary code via crafted "Request Service" packets to the vnetd service (TCP port 13724). | HIGH 7.1EPSS 11.2% | 28 March 2006 |
| CVE-2006-1388 | Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors. | EXPLOIT ✓HIGH 7.5EPSS 55.5% | 24 March 2006 |
| CVE-2006-0323 | Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows remote attackers to execute arbitrary code via a crafted SWF (Flash) file with (1) a size… | EXPLOIT ×2 ✓HIGH 9.3EPSS 16.7% | 23 March 2006 |
| CVE-2006-1364 | Microsoft w3wp (aka w3wp.exe) does not properly handle when the AspCompat directive is not used when referencing COM components in ASP.NET, which allows remote attackers to cause a denial of service (resource consumption or crash) by repeatedly… | EXPLOIT ✓HIGH 7.5EPSS 58.0% | 23 March 2006 |
| CVE-2006-1359 | Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer. | EXPLOIT ×5 ✓HIGH 9.3EPSS 68.3% | 23 March 2006 |
| CVE-2006-0058 | Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations. | EXPLOIT ✓HIGH 7.6EPSS 28.7% | 22 March 2006 |
| CVE-2006-1260 | Horde Application Framework 3.0.9 allows remote attackers to read arbitrary files via a null character in the url parameter in services/go.php, which bypasses a sanity check. | EXPLOIT ✓MEDIUM 5.0EPSS 12.5% | 19 March 2006 |
| CVE-2006-1257 | The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypass authentication by logging in to authfiles/login.asp with a valid username and any password, then going to the main site twice. | HIGH 7.5EPSS 30.3% | 19 March 2006 |
| CVE-2006-1255 | Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long string to the (1) LOGIN or (2) SELECT… | EXPLOIT ×6 ✓HIGH 10.0EPSS 68.8% | 19 March 2006 |
| CVE-2006-1245 | Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute arbitrary code via an HTML tag with a large number of script action handlers such as onload and onmouseover, as… | EXPLOIT ×2 ✓HIGH 7.5EPSS 61.8% | 17 March 2006 |
| CVE-2006-1236 | Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010. | EXPLOIT ×2 ✓HIGH 7.5EPSS 28.0% | 15 March 2006 |
| CVE-2006-0031 | Stack-based buffer overflow in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed record with a modified length value, which… | MEDIUM 5.1EPSS 18.3% | 14 March 2006 |
| CVE-2006-0030 | Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed graphic, which leads to memory corruption. | EXPLOIT ✓MEDIUM 5.1EPSS 39.6% | 14 March 2006 |
| CVE-2006-0029 | Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed description, which leads to memory corruption. | MEDIUM 5.1EPSS 14.6% | 14 March 2006 |
| CVE-2006-0028 | Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to… | MEDIUM 5.1EPSS 16.2% | 14 March 2006 |
| CVE-2006-0009 | Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a routing slip that is longer than specified by the provided length field, as exploited by malware such… | MEDIUM 5.1EPSS 14.2% | 14 March 2006 |
| CVE-2006-0396 | Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote attackers to execute arbitrary code via a long Real Name value in an e-mail attachment sent in AppleDouble format, which triggers the… | EXPLOIT ✓MEDIUM 5.1EPSS 11.1% | 14 March 2006 |
| CVE-2006-1206 | Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating systems, allows remote attackers to cause a denial of service (connection slot exhaustion) via a large number of connection attempts… | EXPLOIT ✓MEDIUM 5.0EPSS 11.7% | 14 March 2006 |
| CVE-2006-1148 | Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to execute arbitrary code via an HTTP GET request with a long (1) parameter name or (2) value in a URL, which triggers… | EXPLOIT ×3 ✓HIGH 7.5EPSS 73.0% | 10 March 2006 |
| CVE-2006-1043 | Stack-based buffer overflow in Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0 allows user-assisted attackers to execute arbitrary code via a long DataProject field in a (1) Visual Studio Database Project File (.dbp) or (2) Visual Studio… | EXPLOIT ✓MEDIUM 5.1EPSS 22.6% | 7 March 2006 |
| CVE-2006-1016 | Buffer overflow in the IsComponentInstalled method in Internet Explorer 6.0, when used on Windows 2000 before SP4 or Windows XP before SP1, allows remote attackers to execute arbitrary code via JavaScript that calls IsComponentInstalled with a long… | EXPLOIT ✓HIGH 7.5EPSS 67.0% | 7 March 2006 |
| CVE-2006-1015 | Argument injection vulnerability in certain PHP 3.x, 4.x, and 5.x applications, when used with sendmail and when accepting remote input for the additional_parameters argument to the mail function, allows remote attackers to read and create arbitrary… | EXPLOIT ✓MEDIUM 6.4EPSS 12.4% | 7 March 2006 |
| CVE-2006-1010 | Buffer overflow in socket/request.c in CrossFire before 1.9.0, when oldsocketmode is enabled, allows remote attackers to cause a denial of service (segmentation fault) and possibly execute code by sending the server a large request. | EXPLOIT ✓MEDIUM 6.4EPSS 17.6% | 6 March 2006 |
| CVE-2006-0814 | response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbitrary source code via requests that contain trailing (1) "." (dot) and (2) space characters, which are ignored by Windows, as… | MEDIUM 5.0EPSS 10.6% | 6 March 2006 |
| CVE-2006-0988 | The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which… | HIGH 7.8EPSS 59.5% | 3 March 2006 |
| CVE-2006-0987 | The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of… | MEDIUM 5.0EPSS 58.0% | 3 March 2006 |
| CVE-2006-0911 | NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service (CPU consumption) via crafted requests to Login.asp, possibly involving the (1) "In]" and (2) "b;tnLogIn" parameters, or (3) malformed btnLogIn… | EXPLOIT ✓MEDIUM 5.0EPSS 16.3% | 28 February 2006 |
| CVE-2006-0900 | nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demonstrated by the ProtoVer NFS test suite. | EXPLOIT ✓HIGH 7.8EPSS 65.1% | 27 February 2006 |
| CVE-2006-0720 | Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted .m3u file that causes an incorrect strncpy function call when the player… | EXPLOIT ✓HIGH 7.6EPSS 10.5% | 23 February 2006 |
| CVE-2006-0848 | The "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to execute arbitrary commands by tricking a user into downloading a __MACOSX folder that contains metadata (resource fork) that invokes… | EXPLOIT ✓MEDIUM 5.1EPSS 58.1% | 22 February 2006 |
| CVE-2006-0830 | The scripting engine in Internet Explorer allows remote attackers to cause a denial of service (resource consumption) and possibly execute arbitrary code via a web page that contains a recurrent call to an infinite loop in Javascript or VBscript, which… | HIGH 7.5EPSS 14.3% | 21 February 2006 |
| CVE-2006-0753 | Memory leak in Microsoft Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to cause a denial of service (memory consumption) via JavaScript that uses setInterval to repeatedly call a function to set the value of window.status. | LOW 2.6EPSS 11.8% | 18 February 2006 |
| CVE-2006-0460 | Multiple buffer overflows in BomberClone before 0.11.6.2 allow remote attackers to execute arbitrary code via long error messages. | EXPLOIT ×2 ✓HIGH 7.5EPSS 68.4% | 17 February 2006 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.