Free · no signup · updated from NVD

Which CVEs are actually being exploited?

Q: How should I use EPSS vs CVSS?

CVSS measures theoretical severity. EPSS estimates how likely a CVE is to be exploited in the wild. A high CVSS with low EPSS may still matter on an exposed asset; a moderate CVSS on the KEV list should jump the queue.

Q: What does the CISA KEV badge mean?

It means the vulnerability appears on CISA's Known Exploited Vulnerabilities catalog — confirmed or expected active exploitation. If you run the affected product, treat it as urgent regardless of CVSS alone.

Q: Can I search by vendor or product name?

Yes. Keywords match CVE IDs, titles, descriptions and CPE strings. Try vendor names like apache, fortinet or product names from your stack.

Q: Is this a replacement for vulnerability scanning?

No. This catalog helps you understand a CVE before or after a scan finds it. To see which issues are on your perimeter, run the free attack surface scan, or investigate them in the Trusteed workspace and attach evidence of impact.

Search the catalog with CVSS, EPSS and CISA KEV context. Know what to patch first before the next scanner export lands in your inbox.

CVE ID or keyword

4k+CVEs indexedKEVCISA statusEPSSexploit probability

4,385 CVEs

CVE	Title	Severity	EPSS	CVSS	Product
CVE-2005-0877	DNS Cache Poisoning Flaw in dnsmasq Versions Prior to 2.21	High	—	7.5	thekelleys · dnsmasq
CVE-2007-3205	PHP parse_str Function Vulnerable to Variable Overwrite Attacks	Medium	—	5.0	hardened-php_project · hardened-php
CVE-2007-4723	Ragnarok Online Control Panel vulnerable to directory traversal attacks	High	—	7.5	ragnarok_online_control_panel_project · ragnaro…
CVE-2009-0796	Apache HTTP Server users vulnerable to cross-site scripting attacks	Low	—	2.6	apache · mod_perl
CVE-2009-1390	Mutt allows spoofing of trusted servers via man-in-the-middle attacks	Medium	—	6.8	mutt · mutt
CVE-2009-2299	Hyperguard Web Application Firewall vulnerable to denial of service attacks	Medium	—	5.0	hyperguard_web_application_firewall_project · h…
CVE-2009-2957	Heap Overflow in dnsmasq TFTP Lets Remote Attackers Run Code	Medium	—	6.8	thekelleys · dnsmasq
CVE-2009-2958	dnsmasq TFTP NULL Pointer DoS: Patch 2.50 and Harden Exposure	Medium	—	4.3	thekelleys · dnsmasq
CVE-2009-3765	Mutt SSL vulnerability allows man-in-the-middle attacks on SSL servers	Medium	—	6.8	mutt · mutt
CVE-2009-3766	Mutt SSL vulnerability affects users of versions before 1.5.19	Medium	—	6.8	mutt · mutt
CVE-2009-3767	OpenLDAP vulnerable to SSL certificate spoofing attacks	Medium	—	4.3	openldap · openldap
CVE-2011-1176	Apache mpm-itk Module Vulnerable to Privilege Escalation	Medium	—	4.3	mpm-itk_project · mpm-itk
CVE-2011-2523	vsftpd backdoor affects Linux users on port 6200/tcp	Critical	—	9.8	vsftpd_project · vsftpd
CVE-2011-2688	Apache HTTP Server mod_authnz_external module vulnerable to SQL injection attacks	High	—	7.5	mod_authnz_external_project · mod_authnz_extern…
CVE-2012-3411	Dnsmasq Traffic Amplification via Prohibited Interface Replies	Medium	—	5.0	thekelleys · dnsmasq
CVE-2012-3526	Apache HTTP Server mod_rpaf module vulnerable to denial of service attacks	Medium	—	5.0	thomas_eibner · mod_rpaf
CVE-2012-4001	Apache mod_pagespeed module vulnerable to unauthorized HTTP requests	Medium	—	5.0	google · mod_pagespeed
CVE-2012-4360	Apache HTTP Server mod_pagespeed module vulnerable to cross-site scripting attacks	Medium	—	4.3	google · mod_pagespeed
CVE-2012-4542	Linux Kernel SG_IO ioctl Authorization Bypass via Overlapping SCSI Opcodes	Medium	—	4.6	linux · linux_kernel
CVE-2013-0198	Dnsmasq TCP DNS Query Amplification via Prohibited Interfaces	Medium	—	5.0	thekelleys · dnsmasq

How it works

From CVE ID to prioritised fix

Search or filter

Look up a CVE ID directly, or filter by severity, KEV status and EPSS to narrow the list.

Read the context

Each entry includes CVSS, EPSS, CWE, affected products, exploit references and triage notes.

Prioritise fixes

Use KEV and EPSS together to decide what to patch first — then validate exposure in your stack.

Signals

More than a CVSS number

◆

KEV + EPSS in one view

Theoretical severity and real-world exploit probability side by side — so you stop chasing CVSS alone.

◆

Vendor context

CPE strings and product names are searchable, so you can find every issue affecting apache, fortinet or your stack.

◆

Exploit intelligence

Exploit reference counts, emergent threat flags and why-exploitable summaries from Trusteed triage.

Questions

How to read CVE intelligence

Need to see what is actually exposed on your perimeter? Start with a free scan.

Scan my attack surface →

Where does this CVE data come from?

Entries are built from NVD catalog data enriched with EPSS scores, CISA KEV status, exploit references and Trusteed triage signals. The free tool shows the same intelligence layer we use inside the platform — without requiring a login.

How should I use EPSS vs CVSS?

What does the CISA KEV badge mean?

Can I search by vendor or product name?

Is this a replacement for vulnerability scanning?

Also try the free SSL certificate check.

Knowing the CVE is step one. Finding it on your perimeter is step two.

Map the external surface, then investigate the finding in the Trusteed workspace and keep the evidence.

Start free trial Free attack surface scan