Home
Scan my site
CVE Radar
The CVEs most likely to hit you.
Ranked by real signals, not hype: newly exploited first, then CISA Known Exploited Vulnerabilities and FIRST.org EPSS exploit probability. 166 tracked, 16 actively exploited right now.
RSS feed| CVE | Severity | Technology | EPSS | Status | |
|---|---|---|---|---|---|
| CVE-2026-87902New | High8.1 | WordPress | Top 1% | Exploited | |
| CVE-2026-71362New | Critical9.1 | Magento | Top 0% | Exploited | |
| CVE-2026-75650 | Critical10.0 | Magento | Top 10% | Exploited | |
| CVE-2026-63030 | Critical9.8 | WordPress | Top 4% | Exploited | |
| CVE-2026-60137 | Medium5.9 | WordPress | Top 7% | Exploited | |
| CVE-2026-54420 | High8.5 | LiteSpeed | Top 44% | Exploited | |
| CVE-2026-9082 | Critical9.8 | Drupal | Top 3% | Exploited | |
| CVE-2025-55182 | Critical10.0 | Next.js | Top 0% | Exploited | |
| CVE-2025-48384 | High8.0 | Git | Top 9% | Exploited | |
| CVE-2023-44487 | High7.5 | Nginx | Top 0% | Exploited | |
| CVE-2023-38180 | High7.5 | ASP.NET | Top 3% | Exploited | |
| CVE-2016-8735 | Critical9.8 | MySQL | Top 0% | Exploited | |
| CVE-2018-7602 | Critical9.8 | Drupal | Top 0% | Exploited | |
| CVE-2017-12617 | High8.1 | MySQL | Top 0% | Exploited | |
| CVE-2020-1938 | Critical9.8 | MySQL | Top 0% | Exploited | |
| CVE-2021-40438 | Critical9.0 | Apache | Top 0% | Exploited | |
| CVE-2021-45105 | Medium5.9 | MySQL | Top 0% | High risk | |
| CVE-2015-0204 | Medium4.3 | OpenSSL | Top 0% | High risk | |
| CVE-2022-2068 | High7.3 | OpenSSL | Top 0% | High risk | |
| CVE-2020-5398 | High7.5 | MySQL | Top 0% | High risk | |
| CVE-2021-3711 | Critical9.8 | OpenSSL | Top 0% | High risk | |
| CVE-2022-1292 | High7.3 | OpenSSL | Top 0% | High risk | |
| CVE-2025-49844 | Critical9.9 | Redis | Top 0% | High risk | |
| CVE-2023-36899 | High8.8 | ASP.NET | Top 0% | High risk | |
| CVE-2023-2650 | Medium6.5 | OpenSSL | Top 0% | High risk | |
| CVE-2011-3389 | Medium4.3 | cURL | Top 1% | High risk | |
| CVE-2022-0778 | High7.5 | MariaDB | Top 1% | High risk | |
| CVE-2023-0286 | High7.4 | OpenSSL | Top 1% | High risk | |
| CVE-2000-0886 | High7.5 | IIS | Top 1% | High risk | |
| CVE-2025-55184 | High7.5 | Next.js | Top 1% | High risk | |
| CVE-2025-55183 | Medium5.3 | Next.js | Top 1% | High risk | |
| CVE-2021-3449 | Medium5.9 | Node.js | Top 1% | High risk | |
| CVE-2021-22901 | High8.1 | cURL | Top 1% | High risk | |
| CVE-2000-0884 | High7.5 | IIS | Top 1% | High risk | |
| CVE-2020-1967 | High7.5 | MySQL | Top 1% | High risk | |
| CVE-2025-15467 | High8.8 | OpenSSL | Top 1% | High risk | |
| CVE-2018-25032 | High7.5 | MariaDB | Top 1% | High risk | |
| CVE-2026-23918 | High8.8 | Apache | Top 1% | High risk | |
| CVE-2022-2274 | Critical9.8 | OpenSSL | Top 1% | High risk | |
| CVE-2018-0732 | High7.5 | Node.js | Top 1% | High risk | |
| CVE-2000-0970 | High7.5 | IIS | Top 1% | High risk | |
| CVE-2000-0951 | Medium5.0 | IIS | Top 1% | High risk | |
| CVE-2018-12122 | High7.5 | Node.js | Top 1% | High risk | |
| CVE-2021-41184 | Medium6.1 | Drupal | Top 1% | High risk | |
| CVE-2021-23336 | Medium5.9 | Django | Top 1% | High risk | |
| CVE-2021-41182 | Medium6.1 | Drupal | Top 1% | High risk | |
| CVE-2022-32206 | Medium6.5 | cURL | Top 2% | High risk | |
| CVE-2024-2398 | High8.6 | cURL | Top 2% | High risk | |
| CVE-2000-0913 | Medium5.0 | Apache | Top 2% | High risk | |
| CVE-2022-32205 | Medium4.3 | cURL | Top 2% | High risk | |
| CVE-2022-4450 | High7.5 | OpenSSL | Top 2% | High risk | |
| CVE-2009-3720 | Medium5.0 | Apache | Top 2% | High risk | |
| CVE-2026-27654 | High8.2 | Nginx | Top 2% | High risk | |
| CVE-2026-21710 | High7.5 | Node.js | Top 2% | High risk | |
| CVE-2021-3177 | Critical9.8 | Python | Top 2% | High risk | |
| CVE-2022-4304 | Medium5.9 | OpenSSL | Top 2% | High risk | |
| CVE-2021-23337 | High7.2 | Lodash | Top 2% | High risk | |
| CVE-2019-5010 | High7.5 | Python | Top 2% | High risk | |
| CVE-2000-0967 | Critical10.0 | PHP | Top 3% | High risk | |
| CVE-2023-24329 | High7.5 | Python | Top 3% | High risk | |
| CVE-2018-1000802 | Critical9.8 | Python | Top 3% | High risk | |
| CVE-2025-67779 | High7.5 | Next.js | Top 3% | High risk | |
| CVE-2013-0340 | Medium6.8 | Python | Top 3% | High risk | |
| CVE-2021-3450 | High7.4 | Node.js | Top 3% | High risk | |
| CVE-2019-5482 | Critical9.8 | cURL | Top 3% | High risk | |
| CVE-2022-43551 | High7.5 | cURL | Top 3% | High risk | |
| CVE-2016-3189 | Medium6.5 | Python | Top 3% | High risk | |
| CVE-2021-22926 | High7.5 | cURL | Top 3% | High risk | |
| CVE-2019-1551 | Medium5.3 | OpenSSL | Top 3% | High risk | |
| CVE-2016-0718 | Critical9.8 | Python | Top 4% | High risk | |
| CVE-2021-3737 | High7.5 | Python | Top 4% | High risk | |
| CVE-2020-14422 | Medium5.9 | Python | Top 4% | High risk | |
| CVE-2026-1207 | Medium5.4 | Django | Top 4% | High risk | |
| CVE-2022-32207 | Critical9.8 | cURL | Top 4% | High risk | |
| CVE-2018-0734 | Medium5.9 | Node.js | Top 4% | High risk | |
| CVE-2016-4472 | High8.1 | Python | Top 4% | High risk | |
| CVE-2019-9948 | Critical9.1 | Python | Top 4% | High risk | |
| CVE-2018-0737 | Medium5.9 | OpenSSL | Top 4% | High risk | |
| CVE-2018-14647 | High7.5 | Python | Top 4% | High risk | |
| CVE-2019-14540 | Critical9.8 | MySQL | Top 4% | High risk | |
| CVE-2018-12121 | High7.5 | Node.js | Top 4% | High risk | |
| CVE-2018-7160 | High8.8 | Node.js | Top 4% | High risk | |
| CVE-2021-44533 | Medium5.3 | Node.js | Top 5% | High risk | |
| CVE-2019-17569 | Medium4.8 | MySQL | Top 5% | High risk | |
| CVE-2019-11045 | Medium5.9 | PHP | Top 5% | High risk | |
| CVE-2017-9233 | High7.5 | Python | Top 5% | High risk | |
| CVE-2020-11656 | Critical9.8 | MySQL | Top 5% | High risk | |
| CVE-2022-0391 | High7.5 | Python | Top 5% | High risk | |
| CVE-2021-41183 | Medium6.1 | Drupal | Top 5% | High risk | |
| CVE-2022-32208 | Medium5.9 | cURL | Top 5% | High risk | |
| CVE-2020-27619 | Critical9.8 | Python | Top 5% | High risk | |
| CVE-2017-14919 | Medium5.0 | Node.js | Top 5% | High risk | |
| CVE-2018-12115 | High7.5 | Node.js | Top 5% | High risk | |
| CVE-2019-12900 | Critical9.8 | Python | Top 5% | High risk | |
| CVE-2017-1000158 | Critical9.8 | Python | Top 5% | High risk | |
| CVE-2018-7161 | High7.5 | Node.js | Top 5% | High risk | |
| CVE-2019-9636 | Critical9.8 | Python | Top 5% | High risk | |
| CVE-2019-11050 | Medium6.5 | PHP | Top 5% | High risk | |
| CVE-2016-9841 | Critical9.8 | MySQL | Top 6% | High risk | |
| CVE-2019-5481 | Critical9.8 | cURL | Top 6% | High risk | |
| CVE-2022-37454 | Critical9.8 | PHP | Top 6% | High risk | |
| CVE-2020-28500 | Medium5.3 | Lodash | Top 6% | High risk | |
| CVE-2018-7167 | High7.5 | Node.js | Top 6% | High risk | |
| CVE-2018-7162 | High7.5 | Node.js | Top 6% | High risk | |
| CVE-2021-29921 | Critical9.8 | Python | Top 6% | High risk | |
| CVE-2025-62507 | High8.8 | Redis | Top 6% | High risk | |
| CVE-2019-15903 | High7.5 | Python | Top 6% | High risk | |
| CVE-2020-8492 | Medium6.5 | Python | Top 6% | High risk | |
| CVE-2023-3446 | Medium5.3 | OpenSSL | Top 6% | High risk | |
| CVE-2020-1108 | High7.5 | ASP.NET | Top 6% | High risk | |
| CVE-2018-7164 | High7.5 | Node.js | Top 6% | High risk | |
| CVE-2020-26116 | High7.2 | Python | Top 6% | High risk | |
| CVE-2018-20406 | High7.5 | Python | Top 7% | High risk | |
| CVE-2019-5435 | Low3.7 | cURL | Top 7% | High risk | |
| CVE-2019-9674 | High7.5 | Python | Top 7% | High risk | |
| CVE-2026-26980 | High7.5 | Ghost | Top 7% | High risk | |
| CVE-2019-9740 | Medium6.1 | Python | Top 7% | High risk | |
| CVE-2021-22925 | Medium5.3 | cURL | Top 7% | High risk | |
| CVE-2016-9063 | Critical9.8 | Python | Top 7% | High risk | |
| CVE-2020-1161 | High7.5 | ASP.NET | Top 7% | High risk | |
| CVE-2019-9947 | Medium6.1 | Python | Top 8% | High risk | |
| CVE-2019-10160 | Critical9.8 | Python | Top 8% | High risk | |
| CVE-2016-9842 | High8.8 | Node.js | Top 8% | High risk | |
| CVE-2021-31957 | Medium5.0 | ASP.NET | Top 8% | High risk | |
| CVE-2019-11044 | High7.5 | PHP | Top 8% | High risk | |
| CVE-2019-16056 | High7.5 | Python | Top 8% | High risk | |
| CVE-2022-32221 | Critical9.8 | cURL | Top 8% | High risk | |
| CVE-2018-1060 | High7.5 | Python | Top 8% | High risk | |
| CVE-2023-0215 | High7.5 | OpenSSL | Top 8% | High risk | |
| CVE-2026-29053 | Critical9.8 | Ghost | Top 8% | High risk | |
| CVE-2018-1061 | High7.5 | Python | Top 8% | High risk | |
| CVE-2022-2097 | Medium5.3 | OpenSSL | Top 8% | High risk | |
| CVE-2016-9840 | High8.8 | MySQL | Top 8% | High risk | |
| CVE-2021-3733 | Medium6.5 | Python | Top 8% | High risk | |
| CVE-2018-0735 | Medium5.9 | MySQL | Top 8% | High risk | |
| CVE-2019-16935 | Medium6.1 | Python | Top 8% | High risk | |
| CVE-2022-1473 | High7.5 | OpenSSL | Top 8% | High risk | |
| CVE-2018-12116 | High7.5 | Node.js | Top 8% | High risk | |
| CVE-2021-22946 | High7.5 | cURL | Top 9% | High risk | |
| CVE-2021-22898 | Low3.1 | cURL | Top 9% | High risk | |
| CVE-2020-10735 | High7.5 | Python | Top 9% | High risk | |
| CVE-2023-5678 | Medium5.3 | OpenSSL | Top 9% | High risk | |
| CVE-2026-25667 | High7.5 | ASP.NET | Top 9% | High risk | |
| CVE-2021-22922 | Medium6.5 | cURL | Top 9% | High risk | |
| CVE-2020-9281 | Medium6.1 | Drupal | Top 9% | High risk | |
| CVE-2020-11655 | High7.5 | MySQL | Top 9% | High risk | |
| CVE-2018-12120 | High8.1 | Node.js | Top 9% | High risk | |
| CVE-2021-22897 | Medium5.3 | cURL | Top 9% | High risk | |
| CVE-2019-16168 | Medium6.5 | MySQL | Top 9% | High risk | |
| CVE-2019-11049 | Critical9.8 | PHP | Top 9% | High risk | |
| CVE-2026-49975 | High7.5 | Apache | Top 9% | High risk | |
| CVE-2019-11046 | Medium5.3 | PHP | Top 9% | High risk | |
| CVE-2022-27776 | Medium6.5 | cURL | Top 9% | High risk | |
| CVE-2018-12123 | Medium4.3 | Node.js | Top 10% | High risk | |
| CVE-2020-5258 | Medium5.0 | MySQL | Top 10% | High risk | |
| CVE-2026-50646 | High7.8 | ASP.NET | Top 10% | High risk | |
| CVE-2026-50649 | High7.8 | ASP.NET | Top 10% | High risk | |
| CVE-2026-45447 | High8.8 | OpenSSL | Top 10% | High risk | |
| CVE-2023-0464 | High7.5 | OpenSSL | Top 10% | High risk | |
| CVE-2025-59465 | High7.5 | Node.js | Top 10% | High risk | |
| CVE-2020-8169 | High7.5 | cURL | Top 10% | High risk | |
| CVE-2023-30589 | High7.5 | Node.js | Top 10% | High risk | |
| CVE-2021-26423 | High7.5 | ASP.NET | Top 10% | High risk | |
| CVE-2020-8284 | Low3.7 | cURL | Top 10% | High risk | |
| CVE-2022-35252 | Low3.7 | cURL | Top 10% | High risk | |
| CVE-2019-1563 | Low3.7 | OpenSSL | Top 10% | High risk |
Which of these hits your stack?
Scan your site free. UNPWNED fingerprints your technology and flags the CVE classes you are exposed to.
Sources: National Vulnerability Database (NVD), CISA KEV, FIRST.org EPSS. This product uses the NVD API but is not endorsed or certified by the NVD.
