Public arsenal

Exploits

871 indexed CVEs have a ready-to-use public exploit, 108 of them in the CISA KEV catalog and 330 affecting a tracked app.

CVEs with exploit: 871
Exploits catalogued: 1,034
In CISA KEV: 108
On tracked fleet: 330

All sources ExploitDB985 Nuclei49 KEV Tracked fleet

CVE	Severity	Sources	EPSS	Apps
CVE-2025-1097 A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-cn` Ingr…	HIGH	ExploitDB Nuclei	33%	—
CVE-2016-1960 Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x …	HIGH	ExploitDB	31%
CVE-2025-24514 A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingress annot…	HIGH	ExploitDB Nuclei	30%	—
CVE-2025-26633 KEV Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.	HIGH	ExploitDB	30%	Windows
CVE-2016-7182 Graphics Component Font Parsing Elevation of Privilege Vulnerability	HIGH	ExploitDB	30%	Windows
CVE-2019-1405 KEV An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM obje…	HIGH	ExploitDB	30%	Windows
CVE-2025-50154 Microsoft Windows File Explorer Spoofing Vulnerability	HIGH	ExploitDB	30%	Windows
CVE-2019-9810 Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buf…	HIGH	ExploitDB	30%
CVE-2016-0016 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold …	HIGH	ExploitDB	30%	Windows
CVE-2024-38193 KEV Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	HIGH	ExploitDB	29%	Windows
CVE-2016-3324 Internet Explorer Memory Corruption Vulnerability	HIGH	ExploitDB	28%	—
CVE-2025-30397 KEV Scripting Engine Memory Corruption Vulnerability	HIGH	ExploitDB	27%	Windows
CVE-2025-11001 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exe…	HIGH	ExploitDB	27%
CVE-2018-8269 OData Denial of Service Vulnerability	HIGH	ExploitDB	27%	—
CVE-2024-49138 KEV Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH	ExploitDB	26%	Windows
CVE-1999-0236 ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.	HIGH	ExploitDB	26%	—
CVE-2019-0572 Windows Data Sharing Service Elevation of Privilege Vulnerability	HIGH	ExploitDB	25%	Windows
CVE-2017-11906 Internet Explorer Information Disclosure Vulnerability	HIGH	ExploitDB	25%	—
CVE-2021-3560 KEV It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests elevating the privileges of the…	HIGH	ExploitDB	24%	—
CVE-2019-1117 DirectWrite Remote Code Execution Vulnerability	HIGH	ExploitDB	24%	Windows
CVE-2019-1118 DirectWrite Remote Code Execution Vulnerability	HIGH	ExploitDB	24%	Windows
CVE-2018-8527 SQL Server Management Studio Information Disclosure Vulnerability	HIGH	ExploitDB	23%	—
CVE-2018-8532 SQL Server Management Studio Information Disclosure Vulnerability	HIGH	ExploitDB	23%	—
CVE-2025-24071 Microsoft Windows File Explorer Spoofing Vulnerability	HIGH	ExploitDB	23%	Windows
CVE-2017-0118 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	23%	Windows
CVE-2024-21320 Windows Themes Spoofing Vulnerability	HIGH	ExploitDB	23%	Windows
CVE-2017-8683 Microsoft Graphics Component Information Disclosure Vulnerability	HIGH	ExploitDB	23%	Windows
CVE-2017-0085 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0091 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0092 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0111 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0112 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0113 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0114 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0115 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0116 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0117 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0119 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0122 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0123 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0124 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0125 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0126 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0127 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0128 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-8550 Skype for Business Remote Code Execution Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0120 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2025-47166 Microsoft SharePoint Server Remote Code Execution Vulnerability	HIGH	ExploitDB	22%	—
CVE-2018-0878 Windows Remote Assistance Information Disclosure Vulnerability	HIGH	ExploitDB	21%	Windows
CVE-2016-3223 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Win…	HIGH	ExploitDB	21%	Windows

Exploits aggregated from ExploitDB, Nuclei, Metasploit and GitHub PoCs, mapped to the CVEs Scout indexes. For defensive research and exposure testing only.