Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
395,963 CVEs1,717 in CISA KEV17,157 with EPSS ≥ 10%25,049 with a public exploitUpdated 22 September 2026
25,049 results · page 107 of 501
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2016-0016 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain… | EXPLOIT ✓HIGH 7.8EPSS 33.9% | 13 January 2016 |
| CVE-2016-0015 | DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted file, aka… | EXPLOIT ✓HIGH 7.8EPSS 34.6% | 13 January 2016 |
| CVE-2016-0007 | The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandles reparse points, which… | EXPLOIT ×2 ✓HIGH 7.8EPSS 3.38% | 13 January 2016 |
| CVE-2016-0006 | The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandles reparse points, which… | EXPLOIT ✓HIGH 7.3EPSS 3.28% | 13 January 2016 |
| CVE-2015-8396 | Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cxx in Grassroots DICOM (aka GDCM) before 2.6.2 allows attackers to execute arbitrary code via crafted header dimensions in a DICOM… | EXPLOITCRITICAL 10.0EPSS 13.1% | 12 January 2016 |
| CVE-2015-8088 | Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7-TL10 before MT7-TL10C00B354, MT7-TL00 before MT7-TL00C01B354, and MT7-CL00 before MT7-CL00C92B354 and P8 phones with software… | EXPLOITHIGH 7.8EPSS 5.55% | 12 January 2016 |
| CVE-2015-5471 | Absolute path traversal vulnerability in include/user/download.php in the Swim Team plugin 1.44.10777 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter. | EXPLOIT ✓MEDIUM 5.3EPSS 20.9% | 12 January 2016 |
| CVE-2015-8612 | The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges via the dhcp_handler argument. | EXPLOIT ✓HIGH 8.4EPSS 5.24% | 8 January 2016 |
| CVE-2015-8261 | The DroneDeleteOldMeasurements implementation in Ipswitch WhatsUp Gold before 16.4 does not properly validate serialized XML objects, which allows remote attackers to conduct SQL injection attacks via a crafted SOAP request. | EXPLOITCRITICAL 9.8EPSS 2.95% | 8 January 2016 |
| CVE-2015-6639 | The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that leverages QSEECOM access, aka internal bug 24446875. | EXPLOITHIGH 7.8EPSS 11.1% | 6 January 2016 |
| CVE-2015-8740 | The dissect_tds7_colmetadata_token function in epan/dissectors/packet-tds.c in the TDS dissector in Wireshark 2.0.x before 2.0.1 does not validate the number of columns, which allows remote attackers to cause a denial of service (stack-based buffer… | EXPLOIT ✓MEDIUM 5.3EPSS 6.58% | 4 January 2016 |
| CVE-2015-8739 | The ipmi_fmt_udpport function in epan/dissectors/packet-ipmi.c in the IPMI dissector in Wireshark 2.0.x before 2.0.1 improperly attempts to access a packet scope, which allows remote attackers to cause a denial of service (assertion failure and… | EXPLOIT ✓MEDIUM 5.5EPSS 6.03% | 4 January 2016 |
| CVE-2015-8736 | The mp2t_find_next_pcr function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not reserve memory for a trailer, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application… | EXPLOIT ✓MEDIUM 5.5EPSS 6.31% | 4 January 2016 |
| CVE-2015-8735 | The get_value function in epan/dissectors/packet-btatt.c in the Bluetooth Attribute (aka BT ATT) dissector in Wireshark 2.0.x before 2.0.1 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (invalid write… | EXPLOIT ✓MEDIUM 5.5EPSS 6.03% | 4 January 2016 |
| CVE-2015-8733 | The ngsniffer_process_record function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationships between record lengths and record header lengths, which allows remote… | EXPLOIT ✓MEDIUM 5.5EPSS 6.10% | 4 January 2016 |
| CVE-2015-8732 | The dissect_zcl_pwr_prof_pwrprofstatersp function in epan/dissectors/packet-zbee-zcl-general.c in the ZigBee ZCL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the Total Profile Number field, which allows remote… | EXPLOIT ✓MEDIUM 5.5EPSS 6.88% | 4 January 2016 |
| CVE-2015-8731 | The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not reject unknown TLV types, which allows remote attackers to cause a denial of service… | EXPLOIT ✓MEDIUM 5.5EPSS 6.36% | 4 January 2016 |
| CVE-2015-8730 | epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the number of items, which allows remote attackers to cause a denial of service (invalid read operation and application crash)… | EXPLOIT ✓MEDIUM 5.5EPSS 6.40% | 4 January 2016 |
| CVE-2015-8729 | The ascend_seek function in wiretap/ascendtext.c in the Ascend file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not ensure the presence of a '\0' character at the end of a date string, which allows remote attackers to cause a… | EXPLOIT ✓MEDIUM 5.5EPSS 6.14% | 4 January 2016 |
| CVE-2015-8728 | The Mobile Identity parser in (1) epan/dissectors/packet-ansi_a.c in the ANSI A dissector and (2) epan/dissectors/packet-gsm_a_common.c in the GSM A dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 improperly uses the… | EXPLOIT ✓MEDIUM 5.5EPSS 6.95% | 4 January 2016 |
| CVE-2015-8727 | The dissect_rsvp_common function in epan/dissectors/packet-rsvp.c in the RSVP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not properly maintain request-key data, which allows remote attackers to cause a denial of service… | EXPLOIT ✓MEDIUM 5.5EPSS 6.40% | 4 January 2016 |
| CVE-2015-8726 | wiretap/vwr.c in the VeriWave file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate certain signature and Modulation and Coding Scheme (MCS) data, which allows remote attackers to cause a denial of service (out-of-bounds… | EXPLOIT ✓MEDIUM 5.5EPSS 6.56% | 4 January 2016 |
| CVE-2015-8725 | The dissect_diameter_base_framed_ipv6_prefix function in epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the IPv6 prefix length, which allows remote attackers to… | EXPLOIT ✓MEDIUM 5.5EPSS 7.61% | 4 January 2016 |
| CVE-2015-8724 | The AirPDcapDecryptWPABroadcastKey function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not verify the WPA broadcast key length, which allows remote attackers to cause a denial of… | EXPLOIT ✓MEDIUM 5.5EPSS 6.36% | 4 January 2016 |
| CVE-2015-8723 | The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationship between the total length and the capture length, which allows remote… | EXPLOIT ✓MEDIUM 5.5EPSS 6.99% | 4 January 2016 |
| CVE-2015-7450 | IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. | KEVEXPLOIT ✓CRITICAL 9.8EPSS 97.8% | 2 January 2016 |
| CVE-2015-7422 | Buffer overflow in IBM i Access 7.1 on Windows allows local users to cause a denial of service (application crash) via unspecified vectors. | EXPLOITMEDIUM 5.5EPSS 0.74% | 2 January 2016 |
| CVE-2015-2023 | Buffer overflow in IBM i Access 7.1 on Windows allows local users to gain privileges via unspecified vectors. | EXPLOITHIGH 8.8EPSS 1.29% | 2 January 2016 |
| CVE-2015-6018 | The diagnostic-ping implementation on ZyXEL PMG5318-B20A devices with firmware before 1.00(AANC.2)C0 allows remote attackers to execute arbitrary commands via the PingIPAddr parameter. | EXPLOITCRITICAL 9.8EPSS 16.1% | 31 December 2015 |
| CVE-2015-5996 | Cross-site request forgery (CSRF) vulnerability on Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 allows remote attackers to hijack the authentication of arbitrary users. | EXPLOITHIGH 8.8EPSS 1.40% | 31 December 2015 |
| CVE-2015-5995 | Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150 devices allow remote attackers to obtain administrative access via a certain admin substring in an HTTP Cookie header. | EXPLOIT ✓CRITICAL 9.8EPSS 14.5% | 31 December 2015 |
| CVE-2015-8703 | ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE and ZXV10 W300 devices W300V1.0.0f_ER1_PE allow remote authenticated users to bypass intended access restrictions, and discover credentials and keys, by reading the configuration file, a… | EXPLOITMEDIUM 6.5EPSS 4.45% | 30 December 2015 |
| CVE-2015-7252 | Cross-site scripting (XSS) vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to inject arbitrary web script or HTML via the errorpage parameter. | EXPLOITMEDIUM 6.1EPSS 3.03% | 30 December 2015 |
| CVE-2015-7251 | ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE have a hardcoded password of root for the root account, which allows remote attackers to obtain administrative access via a TELNET session. | EXPLOITCRITICAL 9.8EPSS 7.98% | 30 December 2015 |
| CVE-2015-7250 | Absolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to read arbitrary files via a full pathname in the getpage parameter. | EXPLOITHIGH 7.5EPSS 11.3% | 30 December 2015 |
| CVE-2015-7249 | ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote authenticated users to bypass intended access restrictions via a modified request, as demonstrated by leveraging the support account to change a password via a cgi-bin/webproc… | EXPLOITMEDIUM 4.9EPSS 5.26% | 30 December 2015 |
| CVE-2015-7248 | ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote attackers to discover usernames and password hashes by reading the cgi-bin/webproc HTML source code, a different vulnerability than CVE-2015-8703. | EXPLOITHIGH 7.5EPSS 5.41% | 30 December 2015 |
| CVE-2015-8644 | Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allow attackers… | EXPLOIT ✓HIGH 8.8EPSS 24.8% | 28 December 2015 |
| CVE-2015-8636 | Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allow attackers… | EXPLOIT ✓HIGH 8.8EPSS 20.9% | 28 December 2015 |
| CVE-2015-8635 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler… | EXPLOIT ✓HIGH 8.8EPSS 24.8% | 28 December 2015 |
| CVE-2015-8634 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler… | EXPLOIT ✓HIGH 8.8EPSS 24.8% | 28 December 2015 |
| CVE-2015-8660 | The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a… | EXPLOIT ×3 ✓MEDIUM 6.7EPSS 22.2% | 28 December 2015 |
| CVE-2015-8664 | Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows remote attackers to cause a denial of service or possibly have unspecified other impact via an RGBA pixel array… | EXPLOIT ✓HIGH 8.8EPSS 5.50% | 24 December 2015 |
| CVE-2015-8368 | ntopng (aka ntop) before 2.2 allows remote authenticated users to change the login context and gain privileges via the user cookie and username parameter to admin/password_reset.lua. | EXPLOITMEDIUM 6.0EPSS 5.10% | 17 December 2015 |
| CVE-2015-4027 | The AcuWVSSchedulerv10 service in Acunetix Web Vulnerability Scanner (WVS) before 10 build 20151125 allows local users to gain privileges via a command parameter in the reporttemplate property in a params JSON object to api/addScan. | EXPLOITHIGH 7.2EPSS 1.10% | 17 December 2015 |
| CVE-2015-8566 | Framework allows remote attackers to execute arbitrary code via unspecified session values. | EXPLOITHIGH 7.5EPSS 8.46% | 16 December 2015 |
| CVE-2015-8562 | 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the HTTP User-Agent header, as exploited in the wild in December 2015. | EXPLOIT ×2 ✓HIGH 7.5EPSS 98.3% | 16 December 2015 |
| CVE-2015-8358 | Directory traversal vulnerability in the bitrix.mpbuilder module before 1.0.12 for Bitrix allows remote administrators to include and execute arbitrary local files via a .. | EXPLOITHIGH 9.0EPSS 6.63% | 16 December 2015 |
| CVE-2015-8357 | Directory traversal vulnerability in the bitrix.xscan module before 1.0.4 for Bitrix allows remote authenticated users to rename arbitrary files, and consequently obtain sensitive information or cause a denial of service, via a .. | EXPLOITMEDIUM 6.5EPSS 8.36% | 16 December 2015 |
| CVE-2015-6402 | Cross-site scripting (XSS) vulnerability in the management interface on Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11, and 5.7.1 allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCux24935. | EXPLOITMEDIUM 4.3EPSS 7.18% | 14 December 2015 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.