Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
395,957 CVEs1,717 in CISA KEV17,157 with EPSS ≥ 10%25,049 with a public exploitUpdated 22 September 2026
25,049 results · page 96 of 501
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2017-6097 | A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. | EXPLOITHIGH 7.2EPSS 3.49% | 21 February 2017 |
| CVE-2017-6096 | A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. | EXPLOITHIGH 7.2EPSS 3.49% | 21 February 2017 |
| CVE-2017-6095 | A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. | EXPLOITCRITICAL 9.8EPSS 3.90% | 21 February 2017 |
| CVE-2017-5881 | GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted fpx file. | EXPLOIT ✓HIGH 7.8EPSS 8.43% | 21 February 2017 |
| CVE-2016-9316 | Multiple stored Cross-Site-Scripting (XSS) vulnerabilities in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier allow authenticated, remote… | EXPLOIT ✓MEDIUM 5.4EPSS 3.55% | 21 February 2017 |
| CVE-2016-9315 | Privilege Escalation Vulnerability in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier allows authenticated, remote users with least… | EXPLOIT ✓HIGH 8.8EPSS 7.15% | 21 February 2017 |
| CVE-2016-9314 | Sensitive Information Disclosure in com.trend.iwss.gui.servlet.ConfigBackup in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier allows authenticated, remote users with least privileges to backup… | EXPLOIT ✓HIGH 7.8EPSS 3.65% | 21 February 2017 |
| CVE-2016-9269 | Remote Command Execution in com.trend.iwss.gui.servlet.ManagePatches in Trend Micro Interscan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier allows authenticated, remote users with least privileges to run arbitrary… | EXPLOIT ✓CRITICAL 9.9EPSS 11.2% | 21 February 2017 |
| CVE-2017-0038 | gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to… | EXPLOIT ✓MEDIUM 5.5EPSS 71.9% | 20 February 2017 |
| CVE-2017-2373 | It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. | EXPLOIT ✓HIGH 8.8EPSS 7.09% | 20 February 2017 |
| CVE-2017-2371 | The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site. | EXPLOIT ✓MEDIUM 6.5EPSS 5.77% | 20 February 2017 |
| CVE-2017-2370 | It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (buffer overflow) via a crafted app. | EXPLOIT ✓HIGH 7.8EPSS 19.2% | 20 February 2017 |
| CVE-2017-2369 | It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. | EXPLOIT ✓HIGH 8.8EPSS 7.15% | 20 February 2017 |
| CVE-2017-2365 | It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site. | EXPLOIT ✓MEDIUM 6.5EPSS 6.70% | 20 February 2017 |
| CVE-2017-2364 | It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site. | EXPLOIT ✓MEDIUM 6.5EPSS 6.33% | 20 February 2017 |
| CVE-2017-2363 | It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site. | EXPLOIT ✓MEDIUM 6.5EPSS 6.62% | 20 February 2017 |
| CVE-2017-2362 | It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. | EXPLOIT ✓HIGH 8.8EPSS 6.87% | 20 February 2017 |
| CVE-2017-2361 | The issue involves the "Help Viewer" component, which allows XSS attacks via a crafted web site. | EXPLOIT ✓MEDIUM 6.1EPSS 11.0% | 20 February 2017 |
| CVE-2017-2360 | It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app. | EXPLOIT ✓HIGH 7.8EPSS 8.59% | 20 February 2017 |
| CVE-2017-2353 | It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app. | EXPLOIT ✓HIGH 7.8EPSS 6.39% | 20 February 2017 |
| CVE-2016-7661 | It allows local users to gain privileges via unspecified vectors related to Mach port name references. | EXPLOIT ×2 ✓HIGH 7.8EPSS 1.12% | 20 February 2017 |
| CVE-2016-7660 | It allows local users to gain privileges via unspecified vectors related to Mach port name references. | EXPLOIT ✓HIGH 7.8EPSS 1.08% | 20 February 2017 |
| CVE-2016-7644 | It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app. | EXPLOIT ✓HIGH 7.8EPSS 14.7% | 20 February 2017 |
| CVE-2016-7637 | It allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. | EXPLOIT ×2 ✓HIGH 7.8EPSS 1.06% | 20 February 2017 |
| CVE-2016-7633 | It allows local users to gain privileges or cause a denial of service (use-after-free) via unspecified vectors. | EXPLOIT ✓HIGH 7.8EPSS 1.15% | 20 February 2017 |
| CVE-2016-7626 | It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted certificate profile. | EXPLOIT ✓HIGH 8.8EPSS 6.13% | 20 February 2017 |
| CVE-2016-7621 | It allows local users to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via unspecified vectors. | EXPLOIT ✓HIGH 7.8EPSS 1.32% | 20 February 2017 |
| CVE-2016-7617 | It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (type confusion) via a crafted app. | EXPLOIT ×2 ✓HIGH 7.8EPSS 9.35% | 20 February 2017 |
| CVE-2016-7612 | It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. | EXPLOIT ✓HIGH 7.8EPSS 8.24% | 20 February 2017 |
| CVE-2016-7608 | The issue involves the "IOFireWireFamily" component, which allows local users to obtain sensitive information from kernel memory via unspecified vectors. | EXPLOITMEDIUM 5.5EPSS 1.08% | 20 February 2017 |
| CVE-2016-4669 | It allows local users to execute arbitrary code in a privileged context or cause a denial of service (MIG code mishandling and system crash) via unspecified vectors. | EXPLOIT ✓HIGH 7.8EPSS 3.50% | 20 February 2017 |
| CVE-2017-6074 | The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double… | EXPLOIT ×2HIGH 7.8EPSS 5.96% | 18 February 2017 |
| CVE-2017-5344 | The findChildrenByFilter() function which is called by the web accessible path /categoriesServlet performs string interpolation and direct SQL query execution. | EXPLOIT ✓CRITICAL 9.8EPSS 4.52% | 17 February 2017 |
| CVE-2016-4316 | Multiple cross-site scripting (XSS) vulnerabilities in WSO2 Carbon 4.4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) setName parameter to identity-mgt/challenges-mgt.jsp; the (2) webappType or (3) httpPort parameter to… | EXPLOIT ✓MEDIUM 6.1EPSS 4.23% | 17 February 2017 |
| CVE-2016-4315 | Cross-site request forgery (CSRF) vulnerability in WSO2 Carbon 4.4.5 allows remote attackers to hijack the authentication of privileged users for requests that shutdown a server via a shutdown action to server-admin/proxy_ajaxprocessor.jsp. | EXPLOIT ✓MEDIUM 5.7EPSS 2.78% | 17 February 2017 |
| CVE-2016-4314 | Directory traversal vulnerability in the LogViewer Admin Service in WSO2 Carbon 4.4.5 allows remote authenticated administrators to read arbitrary files via a .. | EXPLOIT ✓MEDIUM 4.9EPSS 10.6% | 17 February 2017 |
| CVE-2016-4312 | XML external entity (XXE) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 before WSO2-CARBON-PATCH-4.4.0-0231 allows remote authenticated users with access to XACML features to read arbitrary files, cause a denial of service,… | EXPLOIT ✓HIGH 7.5EPSS 5.54% | 17 February 2017 |
| CVE-2016-4311 | Cross-site request forgery (CSRF) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 allows remote attackers to hijack the authentication of privileged users for requests that process XACML requests via an… | EXPLOIT ✓HIGH 8.8EPSS 3.19% | 17 February 2017 |
| CVE-2017-0313 | All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) implementation of the SubmitCommandVirtual DDI (DxgkDdiSubmitCommandVirtual) where untrusted input is used to reference memory outside of… | EXPLOIT ✓HIGH 7.8EPSS 1.30% | 15 February 2017 |
| CVE-2017-0312 | All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscapeID 0x100008b where user provided input is used as the limit for a loop may lead to denial of service or potential… | EXPLOIT ✓HIGH 7.8EPSS 1.24% | 15 February 2017 |
| CVE-2016-8972 | IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the bellmail client. | EXPLOITHIGH 7.8EPSS 1.38% | 15 February 2017 |
| CVE-2016-6079 | IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. | EXPLOIT ✓HIGH 7.8EPSS 2.39% | 15 February 2017 |
| CVE-2016-3694 | Multiple SQL injection vulnerabilities in modified eCommerce Shopsoftware 2.0.0.0 revision 9678, when the easybill-module is not installed, allow remote attackers to execute arbitrary SQL commands via the (1) orders_status or (2) customers_status… | EXPLOITCRITICAL 9.8EPSS 3.05% | 15 February 2017 |
| CVE-2017-5991 | An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. | EXPLOIT ✓HIGH 7.5EPSS 15.2% | 15 February 2017 |
| CVE-2017-2992 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 header. | EXPLOIT ✓HIGH 8.8EPSS 32.7% | 15 February 2017 |
| CVE-2017-2988 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection. | EXPLOIT ✓HIGH 8.8EPSS 18.1% | 15 February 2017 |
| CVE-2017-2986 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video (FLV) codec. | EXPLOIT ✓HIGH 8.8EPSS 30.9% | 15 February 2017 |
| CVE-2017-2985 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class. | EXPLOIT ✓HIGH 8.8EPSS 21.8% | 15 February 2017 |
| CVE-2017-5972 | The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows remote attackers to cause a denial of service (CPU consumption) by sending many TCP SYN packets,… | EXPLOITHIGH 7.5EPSS 23.9% | 14 February 2017 |
| CVE-2016-9351 | The directory traversal/file upload error allows an attacker to upload and unpack a zip file. | EXPLOITHIGH 7.0EPSS 4.18% | 13 February 2017 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.