Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
395,996 CVEs1,717 in CISA KEV17,157 with EPSS ≥ 10%25,049 with a public exploitUpdated 22 September 2026
25,049 results · page 113 of 501
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2015-5374 | A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module… | EXPLOITHIGH 7.8EPSS 74.5% | 18 July 2015 |
| CVE-2015-4460 | Cross-site request forgery (CSRF) vulnerability in SecuritySetting/UserSecurity/UserManagement.aspx in B.A.S C2Box before 4.0.0 (r19171) allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts… | EXPLOITMEDIUM 6.8EPSS 2.66% | 16 July 2015 |
| CVE-2015-5530 | Multiple cross-site request forgery (CSRF) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to hijack the authentication of administrators for requests that add an administrator account via a request to dashboard/users/create/. | EXPLOITMEDIUM 6.8EPSS 1.94% | 16 July 2015 |
| CVE-2015-5529 | Multiple cross-site scripting (XSS) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter to dashboard/settings/categories/, (2) title or (3) rel parameter to… | EXPLOITMEDIUM 4.3EPSS 4.00% | 16 July 2015 |
| CVE-2015-2370 | The authentication implementation in the RPC subsystem in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold… | EXPLOITHIGH 7.2EPSS 4.01% | 14 July 2015 |
| CVE-2015-2366 | win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka… | EXPLOIT ✓HIGH 7.2EPSS 3.46% | 14 July 2015 |
| CVE-2015-2365 | win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows… | EXPLOIT ✓HIGH 7.2EPSS 3.46% | 14 July 2015 |
| CVE-2015-2419 | Microsoft Internet Explorer Memory Corruption Vulnerability | KEVEXPLOITHIGH 8.8EPSS 53.1% | 14 July 2015 |
| CVE-2015-5520 | Cross-site scripting (XSS) vulnerability in the Users module in Orchard 1.7.3 through 1.8.2 and 1.9.x before 1.9.1 allows remote attackers to inject arbitrary web script or HTML via the username when creating a new user account, which is not properly… | EXPLOITMEDIUM 4.3EPSS 3.98% | 14 July 2015 |
| CVE-2015-1561 | The escape_command function in include/Administration/corePerformance/getStats.php in Centreon (formerly Merethis Centreon) 2.5.4 and earlier (fixed in Centreon 19.10.0) uses an incorrect regular expression, which allows remote authenticated users to… | EXPLOITMEDIUM 6.5EPSS 9.15% | 14 July 2015 |
| CVE-2015-1560 | SQL injection vulnerability in the isUserAdmin function in include/common/common-Func.php in Centreon (formerly Merethis Centreon) 2.5.4 and earlier (fixed in Centreon web 2.7.0) allows remote attackers to execute arbitrary SQL commands via the sid… | EXPLOITHIGH 7.5EPSS 6.69% | 14 July 2015 |
| CVE-2015-5122 | Adobe Flash Player Use-After-Free Vulnerability | KEVEXPLOIT ✓CRITICAL 9.8EPSS 94.0% | 14 July 2015 |
| CVE-2015-1793 | The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote attackers to… | EXPLOITMEDIUM 6.5EPSS 71.2% | 9 July 2015 |
| CVE-2015-5118 | Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler… | EXPLOIT ✓HIGH 10.0EPSS 27.7% | 9 July 2015 |
| CVE-2015-5116 | Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow remote… | EXPLOIT ✓MEDIUM 5.0EPSS 22.5% | 9 July 2015 |
| CVE-2015-4432 | Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler… | EXPLOIT ✓HIGH 10.0EPSS 34.2% | 9 July 2015 |
| CVE-2015-4430 | Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler… | EXPLOIT ✓HIGH 10.0EPSS 32.8% | 9 July 2015 |
| CVE-2015-3137 | Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler… | EXPLOIT ✓HIGH 10.0EPSS 32.8% | 9 July 2015 |
| CVE-2015-3134 | Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow… | EXPLOIT ✓HIGH 10.0EPSS 26.5% | 9 July 2015 |
| CVE-2015-3128 | Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler… | EXPLOIT ✓HIGH 10.0EPSS 39.2% | 9 July 2015 |
| CVE-2015-3124 | Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler… | EXPLOIT ✓HIGH 10.0EPSS 33.4% | 9 July 2015 |
| CVE-2015-3118 | Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler… | EXPLOIT ✓HIGH 10.0EPSS 40.4% | 9 July 2015 |
| CVE-2015-4616 | Directory traversal vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.2.5 for WordPress allows remote attackers to create arbitrary files via a .. | EXPLOITMEDIUM 5.0EPSS 10.5% | 8 July 2015 |
| CVE-2015-4614 | Multiple SQL injection vulnerabilities in includes/Function.php in the Easy2Map plugin before 1.2.5 for WordPress allow remote attackers to execute arbitrary SQL commands via the mapName parameter in an e2m_img_save_map_name action to… | EXPLOITHIGH 7.5EPSS 5.25% | 8 July 2015 |
| CVE-2015-5453 | Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the id parameter to ADMIN/mailqueue.spl. | EXPLOIT ✓MEDIUM 6.5EPSS 57.3% | 8 July 2015 |
| CVE-2015-5452 | SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitrary SQL commands via the sid cookie, as demonstrated by a request to borderpost/imp/compose.php3. | EXPLOIT ×2 ✓HIGH 7.5EPSS 3.42% | 8 July 2015 |
| CVE-2015-5119 | Adobe Flash Player Use-After-Free Vulnerability | KEVEXPLOIT ✓CRITICAL 9.8EPSS 99.3% | 8 July 2015 |
| CVE-2015-2866 | SQL injection vulnerability on the Grandstream GXV3611_HD camera with firmware before 1.0.3.9 beta allows remote attackers to execute arbitrary SQL commands by attempting to establish a TELNET session with a crafted username. | EXPLOITHIGH 7.5EPSS 1.56% | 8 July 2015 |
| CVE-2015-3704 | runner in Install.framework in the Install Framework Legacy subsystem in Apple OS X before 10.10.4 does not properly drop privileges, which allows attackers to execute arbitrary code in a privileged context via a crafted app. | EXPLOIT ✓HIGH 9.3EPSS 9.30% | 3 July 2015 |
| CVE-2015-3693 | Apple Mac EFI before 2015-001, as used in OS X before 10.10.4 and other products, does not properly set refresh rates for DDR3 RAM, which might make it easier for remote attackers to conduct row-hammer attacks, and consequently gain privileges or cause… | EXPLOIT ✓HIGH 9.3EPSS 7.66% | 3 July 2015 |
| CVE-2015-3673 | Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obtain root privileges by moving and then modifying Directory Utility. | EXPLOIT ✓HIGH 7.2EPSS 5.81% | 3 July 2015 |
| CVE-2015-3202 | fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is used by mount's… | EXPLOIT ✓LOW 3.6EPSS 1.00% | 2 July 2015 |
| CVE-2015-3443 | Cross-site scripting (XSS) vulnerability in the basic dashboard in Thycotic Secret Server 8.6.x, 8.7.x, and 8.8.x before 8.8.000005 allows remote authenticated users to inject arbitrary web script or HTML via a password entry, which is not properly… | EXPLOITLOW 3.5EPSS 2.02% | 2 July 2015 |
| CVE-2015-5354 | Open redirect vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to admin/nos/login. | EXPLOITMEDIUM 5.8EPSS 12.5% | 1 July 2015 |
| CVE-2015-5353 | Directory traversal vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers to include and execute arbitrary local files via a .. | EXPLOITHIGH 7.5EPSS 7.14% | 1 July 2015 |
| CVE-2014-1836 | Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the image_path parameter in a cancel action. | EXPLOIT ✓MEDIUM 6.4EPSS 3.71% | 1 July 2015 |
| CVE-2015-5150 | Multiple cross-site scripting (XSS) vulnerabilities in Zoho ManageEngine SupportCenter Plus 7.90 allow remote authenticated users to inject arbitrary web script or HTML via the (1) query parameter in the run_query_editor_query module to… | EXPLOITLOW 3.5EPSS 4.26% | 30 June 2015 |
| CVE-2015-5149 | Directory traversal vulnerability in Zoho ManageEngine SupportCenter Plus 7.90 allows remote authenticated users to write to arbitrary files via a .. | EXPLOITMEDIUM 5.5EPSS 10.4% | 30 June 2015 |
| CVE-2015-5148 | SQL injection vulnerability in LivelyCart 1.2.0 allows remote attackers to execute arbitrary SQL commands via the search_query parameter to product/search. | EXPLOIT ✓HIGH 7.5EPSS 1.26% | 30 June 2015 |
| CVE-2014-9735 | The ThemePunch Slider Revolution (revslider) plugin before 3.0.96 for WordPress and Showbiz Pro plugin 1.7.1 and earlier for Wordpress does not properly restrict access to administrator AJAX functionality, which allows remote attackers to (1) upload and… | EXPLOIT ✓HIGH 7.5EPSS 75.7% | 30 June 2015 |
| CVE-2014-9734 | Directory traversal vulnerability in the Slider Revolution (revslider) plugin before 4.2 for WordPress allows remote attackers to read arbitrary files via a .. | EXPLOIT ×2 ✓MEDIUM 5.0EPSS 20.6% | 30 June 2015 |
| CVE-2015-1158 | The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via… | EXPLOIT ×2 ✓HIGH 10.0EPSS 29.9% | 26 June 2015 |
| CVE-2015-5066 | Multiple cross-site scripting (XSS) vulnerabilities in the MetalGenix GeniXCMS 0.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) content or (2) title field in an add action in the posts page to index.php or the (3) q… | EXPLOITMEDIUM 4.3EPSS 3.76% | 24 June 2015 |
| CVE-2015-5065 | Absolute path traversal vulnerability in proxy.php in the google currency lookup in the Paypal Currency Converter Basic For WooCommerce plugin before 1.4 for WordPress allows remote attackers to read arbitrary files via a full pathname in the requrl… | EXPLOIT ✓MEDIUM 5.0EPSS 16.3% | 24 June 2015 |
| CVE-2015-2169 | Cross-site scripting (XSS) vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112 allows remote attackers to inject arbitrary web script or HTML via a Publisher registry entry, which is not properly handled when the machine is scanned. | EXPLOITMEDIUM 4.3EPSS 7.74% | 24 June 2015 |
| CVE-2015-3112 | Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. | EXPLOIT ✓HIGH 10.0EPSS 14.3% | 24 June 2015 |
| CVE-2015-3111 | Heap-based buffer overflow in Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allows attackers to execute arbitrary code via unspecified vectors. | EXPLOIT ✓HIGH 10.0EPSS 19.5% | 24 June 2015 |
| CVE-2015-3110 | Integer overflow in Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allows attackers to execute arbitrary code via unspecified vectors. | EXPLOIT ✓HIGH 10.0EPSS 16.5% | 24 June 2015 |
| CVE-2015-3113 | Adobe Flash Player Heap-Based Buffer Overflow Vulnerability | KEVEXPLOIT ✓CRITICAL 9.8EPSS 99.9% | 23 June 2015 |
| CVE-2015-4677 | Cross-site request forgery (CSRF) vulnerability in FiverrScript (aka Fiverr Script) 7.2 allows remote attackers to hijack the authentication of administrators for requests that create a new admin via a request to administrator/admins_create.php. | EXPLOITMEDIUM 6.8EPSS 1.11% | 19 June 2015 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.