Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
395,996 CVEs1,717 in CISA KEV17,157 with EPSS ≥ 10%25,049 with a public exploitUpdated 22 September 2026
17,157 results · page 313 of 344
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2005-2871 | Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and earlier, and Netscape 8.0.3.3 and 7.2, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a hostname with all… | EXPLOIT ✓HIGH 7.5EPSS 21.1% | 9 September 2005 |
| CVE-2005-2856 | Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multiple products including (1) ALZip 5.51 through 6.11, (2) Servant Salamander 2.0 and 2.5 Beta 1, (3) WinHKI 1.66 and 1.67, (4) ExtractNow… | EXPLOIT ✓HIGH 7.5EPSS 15.7% | 8 September 2005 |
| CVE-2005-2852 | Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a denial of service (ABEND) via an incorrect password length, as exploited by the "worm.rbot.ccc" worm. | EXPLOIT ✓MEDIUM 5.0EPSS 40.3% | 8 September 2005 |
| CVE-2005-2847 | img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter. | EXPLOIT ×2 ✓HIGH 7.5EPSS 53.4% | 8 September 2005 |
| CVE-2005-2842 | Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary code via the username. | EXPLOIT ×2 ✓HIGH 7.5EPSS 21.1% | 8 September 2005 |
| CVE-2005-2841 | Buffer overflow in Firewall Authentication Proxy for FTP and/or Telnet Sessions for Cisco IOS 12.2ZH and 12.2ZL, 12.3 and 12.3T, and 12.4 and 12.4T allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted user… | EXPLOIT ✓HIGH 7.5EPSS 14.1% | 8 September 2005 |
| CVE-2005-2700 | ssl_engine_kernel.c in mod_ssl before 2.8.24, when using "SSLVerifyClient optional" in the global virtual host configuration, does not properly enforce "SSLVerifyClient require" in a per-location context, which allows remote attackers to bypass intended… | HIGH 10.0EPSS 30.6% | 6 September 2005 |
| CVE-2005-2792 | Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. | EXPLOIT ✓MEDIUM 5.0EPSS 11.7% | 2 September 2005 |
| CVE-2005-2777 | Looking Glass 20040427 allows remote attackers to execute arbitrary commands via shell metacharacters in the DNS lookup query field. | EXPLOIT ✓HIGH 7.5EPSS 12.2% | 2 September 2005 |
| CVE-2005-2773 | HP OpenView Network Node Manager Remote Code Execution Vulnerability | KEVEXPLOIT ×2 ✓CRITICAL 9.8EPSS 74.6% | 2 September 2005 |
| CVE-2005-2772 | Multiple stack-based buffer overflows in University of Minnesota gopher client 3.0.9 allow remote malicious servers to execute arbitrary code via (1) a long "+VIEWS:" reply, which is not properly handled in the VIfromLine function, and (2) certain… | EXPLOIT ✓HIGH 7.5EPSS 10.0% | 2 September 2005 |
| CVE-2005-2768 | Heap-based buffer overflow in the Sophos Antivirus Library, as used by Sophos Antivirus, PureMessage, MailMonitor, and other products, allows remote attackers to execute arbitrary code via a Visio file with a crafted sub record length. | HIGH 7.5EPSS 12.7% | 2 September 2005 |
| CVE-2005-2733 | upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which could allow remote attackers to execute arbitrary code. | EXPLOIT ×2 ✓HIGH 7.5EPSS 51.2% | 30 August 2005 |
| CVE-2005-2728 | The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field. | MEDIUM 5.0EPSS 11.0% | 30 August 2005 |
| CVE-2005-2678 | Microsoft IIS 5.1 and 6 allows remote attackers to spoof the SERVER_NAME variable to bypass security checks and conduct various attacks via a GET request with an http://localhost URI, which makes it appear as if the request is coming from localhost. | MEDIUM 5.0EPSS 41.8% | 23 August 2005 |
| CVE-2005-2668 | Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow remote attackers to execute arbitrary code via unknown vectors. | EXPLOIT ✓HIGH 10.0EPSS 75.2% | 23 August 2005 |
| CVE-2005-2665 | Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attackers to execute arbitrary code via an e-mail message with a long Expires header. | EXPLOIT ✓HIGH 7.5EPSS 15.3% | 23 August 2005 |
| CVE-2005-2127 | Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for… | EXPLOIT ✓HIGH 7.5EPSS 63.7% | 19 August 2005 |
| CVE-2005-2616 | Multiple PHP file include vulnerabilities in ezUpload 2.2 allow remote attackers to execute arbitrary code via the path parameter to (1) initialize.php, (2) customize.php, (3) form.php, or (4) index.php. | EXPLOIT ×4 ✓HIGH 7.5EPSS 11.5% | 17 August 2005 |
| CVE-2005-2612 | Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP code via the cache_lastpostdate[server] cookie. | EXPLOIT ✓HIGH 7.5EPSS 38.8% | 17 August 2005 |
| CVE-2005-2611 | VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static password during authentication from the NDMP agent to the server, which… | EXPLOIT ✓HIGH 10.0EPSS 87.0% | 17 August 2005 |
| CVE-2005-2470 | Buffer overflow in a "core application plug-in" for Adobe Reader 5.1 through 7.0.2 and Acrobat 5.0 through 7.0.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors. | HIGH 7.5EPSS 13.2% | 16 August 2005 |
| CVE-2005-2103 | Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an away message with a large number of AIM substitution strings, such as %t… | EXPLOIT ✓CRITICAL 9.8EPSS 16.1% | 16 August 2005 |
| CVE-2005-2551 | Buffer overflow in dhost.exe in iMonitor for Novell eDirectory 8.7.3 on Windows allows attackers to cause a denial of service (crash) and obtain access to files via unknown vectors. | EXPLOIT ×2 ✓HIGH 7.5EPSS 55.4% | 12 August 2005 |
| CVE-2005-2535 | Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packet to TCP port 41523, a different vulnerability than CVE-2005-0260. | EXPLOIT ×2 ✓HIGH 7.5EPSS 80.9% | 10 August 2005 |
| CVE-2005-1990 | Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not ActiveX controls,… | EXPLOIT ✓MEDIUM 5.1EPSS 48.5% | 10 August 2005 |
| CVE-2005-1989 | Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly execute code when browsing from a web site to a web folder view using WebDAV, aka "Web Folder Behaviors Cross-Domain Vulnerability". | EXPLOIT ✓HIGH 7.5EPSS 45.7% | 10 August 2005 |
| CVE-2005-1988 | Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web site or an HTML e-mail containing a crafted JPEG image that causes memory corruption, aka "JPEG Image Rendering Memory Corruption… | EXPLOIT ×2 ✓MEDIUM 5.1EPSS 45.6% | 10 August 2005 |
| CVE-2005-1984 | Buffer overflow in the Print Spooler service (Spoolsv.exe) for Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via a malicious message. | HIGH 7.5EPSS 55.3% | 10 August 2005 |
| CVE-2005-1983 | Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious… | EXPLOIT ×4 ✓HIGH 10.0EPSS 93.0% | 10 August 2005 |
| CVE-2005-1218 | The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial of service (crash) via crafted Remote Desktop Protocol (RDP) requests. | EXPLOIT ✓MEDIUM 5.0EPSS 57.3% | 10 August 2005 |
| CVE-2005-0058 | Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to elevate privileges or execute arbitrary code via a… | EXPLOIT ✓HIGH 7.5EPSS 46.0% | 10 August 2005 |
| CVE-2005-1272 | Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code via a long string sent to port (1) 6070 or (2) 6050. | EXPLOIT ×2 ✓HIGH 7.5EPSS 66.1% | 5 August 2005 |
| CVE-2005-2428 | Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the HTML source to obtain sensitive information such as (1) the password hash… | EXPLOIT ×2 ✓MEDIUM 5.0EPSS 73.0% | 3 August 2005 |
| CVE-2005-2373 | Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long directory name to (1) LIST, (2) DELE or (3) RNFR commands. | EXPLOIT ✓HIGH 7.2EPSS 45.7% | 26 July 2005 |
| CVE-2005-2371 | Directory traversal vulnerability in Oracle Reports 6.0, 6i, 9i, and 10g allows remote attackers to overwrite arbitrary files via (1) "..", (2) Windows drive letter (C:), and (3) absolute path sequences in the desname parameter. | MEDIUM 5.0EPSS 22.3% | 26 July 2005 |
| CVE-2005-2310 | Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long ID3v2 tag such as (1) ARTIST or (2) TITLE. | EXPLOIT ✓HIGH 9.3EPSS 13.1% | 19 July 2005 |
| CVE-2005-2308 | The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via certain crafted JPEG images, as demonstrated using (1) mov_fencepost.jpg, (2)… | EXPLOIT ✓HIGH 7.5EPSS 17.4% | 19 July 2005 |
| CVE-2005-2307 | netman.dll in Microsoft Windows Connections Manager Library allows local users to cause a denial of service (Network Connections Service crash) via a large integer argument to a particular function, aka "Network Connection Manager Vulnerability." | EXPLOIT ✓MEDIUM 5.0EPSS 25.6% | 19 July 2005 |
| CVE-2005-2297 | Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to execute arbitrary code via a large javascript parameter. | EXPLOIT ✓MEDIUM 4.6EPSS 74.2% | 19 July 2005 |
| CVE-2005-2287 | SoftiaCom wMailServer 1.0 and 2.0 allows remote attackers to cause a denial of service (application crash) via a large TCP packet with a leading space, possibly triggering a buffer overflow. | EXPLOIT ×3 ✓MEDIUM 5.0EPSS 56.8% | 18 July 2005 |
| CVE-2005-2278 | Stack-based buffer overflow in the IMAP daemon (imapd) in MailEnable Professional 1.54 allows remote authenticated users to execute arbitrary code via the status command with a long mailbox name. | EXPLOIT ✓HIGH 7.2EPSS 84.6% | 18 July 2005 |
| CVE-2005-1689 | Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions. | CRITICAL 9.8EPSS 11.0% | 18 July 2005 |
| CVE-2005-2277 | Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename argument of a PUT command. | EXPLOIT ✓HIGH 10.0EPSS 12.9% | 15 July 2005 |
| CVE-2005-2265 | Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access violation and crash), and possibly execute arbitrary code, by calling InstallVersion.compareTo with an object instead of… | EXPLOIT ×2 ✓MEDIUM 5.0EPSS 68.1% | 13 July 2005 |
| CVE-2005-2250 | Buffer overflow in Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary code via a long filename in an OBEX file share. | EXPLOIT ✓HIGH 7.5EPSS 10.3% | 13 July 2005 |
| CVE-2005-2226 | Microsoft Outlook Express 6.0 leaks the default news server account when a user responds to a "watched" conversation thread, which could allow remote attackers to obtain sensitive information. | MEDIUM 5.0EPSS 13.4% | 12 July 2005 |
| CVE-2005-2225 | Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pif" string, which is interpreted as a malicious file extension and causes users to be kicked from a group conversation. | MEDIUM 5.0EPSS 16.4% | 12 July 2005 |
| CVE-2005-2224 | aspnet_wp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a crafted SOAP message to an RPC/Encoded method. | MEDIUM 5.0EPSS 17.8% | 12 July 2005 |
| CVE-2005-2223 | Unknown vulnerability in the SMTP service in MailEnable Standard before 1.9 and Professional before 1.6 allows remote attackers to cause a denial of service (crash) during authentication. | MEDIUM 5.0EPSS 50.8% | 12 July 2005 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.