Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
393,123 CVEs1,710 in CISA KEV17,380 with EPSS ≥ 10%Updated 16 September 2026
1,710 results · page 32 of 35
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2015-0666 | Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability | KEVHIGH 7.5EPSS 40.4% | 3 April 2015 |
| CVE-2015-2051 | D-Link DIR-645 Router Remote Code Execution Vulnerability | KEVHIGH 8.8EPSS 97.1% | 23 February 2015 |
| CVE-2015-1427 | Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability | KEVCRITICAL 9.8EPSS 99.9% | 17 February 2015 |
| CVE-2015-0071 | Microsoft Internet Explorer ASLR Bypass Vulnerability | KEVMEDIUM 6.5EPSS 33.6% | 11 February 2015 |
| CVE-2015-0313 | Adobe Flash Player Use-After-Free Vulnerability | KEVCRITICAL 9.8EPSS 95.3% | 2 February 2015 |
| CVE-2015-0311 | Adobe Flash Player Remote Code Execution Vulnerability | KEVCRITICAL 9.8EPSS 85.8% | 23 January 2015 |
| CVE-2015-0310 | Adobe Flash Player ASLR Bypass Vulnerability | KEVHIGH 7.8EPSS 15.2% | 23 January 2015 |
| CVE-2015-0016 | Microsoft Windows TS WebProxy Directory Traversal Vulnerability | KEVHIGH 7.8EPSS 75.9% | 13 January 2015 |
| CVE-2014-100005 | D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability | KEVHIGH 8.0EPSS 48.1% | 13 January 2015 |
| CVE-2014-9163 | Adobe Flash Player Stack-Based Buffer Overflow Vulnerability | KEVHIGH 7.8EPSS 20.4% | 10 December 2014 |
| CVE-2014-8439 | Adobe Flash Player Dereferenced Pointer Vulnerability | KEVHIGH 8.8EPSS 20.0% | 25 November 2014 |
| CVE-2014-6324 | Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability | KEVHIGH 8.8EPSS 87.4% | 18 November 2014 |
| CVE-2014-6332 | Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability | KEVHIGH 8.8EPSS 95.0% | 11 November 2014 |
| CVE-2014-4077 | Microsoft IME Japanese Privilege Escalation Vulnerability | KEVHIGH 7.8EPSS 54.9% | 11 November 2014 |
| CVE-2014-6352 | Microsoft Windows Code Injection Vulnerability | KEVHIGH 7.8EPSS 77.6% | 22 October 2014 |
| CVE-2014-4148 | Microsoft Windows Remote Code Execution Vulnerability | KEVHIGH 8.8EPSS 59.8% | 15 October 2014 |
| CVE-2014-4123 | Microsoft Internet Explorer Privilege Escalation Vulnerability | KEVHIGH 8.8EPSS 47.3% | 15 October 2014 |
| CVE-2014-4114 | Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability | KEVHIGH 7.8EPSS 81.6% | 15 October 2014 |
| CVE-2014-4113 | Microsoft Win32k Privilege Escalation Vulnerability | KEVHIGH 7.8EPSS 87.0% | 15 October 2014 |
| CVE-2014-6287 | Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability | KEVCRITICAL 9.8EPSS 99.3% | 7 October 2014 |
| CVE-2014-6278 | GNU Bash OS Command Injection Vulnerability | KEVHIGH 8.8EPSS 99.5% | 30 September 2014 |
| CVE-2014-7169 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability | KEVCRITICAL 9.8EPSS 99.9% | 25 September 2014 |
| CVE-2014-6271 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability | KEVCRITICAL 9.8EPSS 100.0% | 24 September 2014 |
| CVE-2014-4404 | Apple OS X Heap-Based Buffer Overflow Vulnerability | KEVHIGH 7.8EPSS 49.0% | 18 September 2014 |
| CVE-2013-2597 | Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability | KEVHIGH 8.4EPSS 1.52% | 31 August 2014 |
| CVE-2014-2817 | Microsoft Internet Explorer Privilege Escalation Vulnerability | KEVHIGH 8.8EPSS 26.3% | 12 August 2014 |
| CVE-2014-0546 | Adobe Reader and Acrobat Sandbox Bypass Vulnerability | KEVCRITICAL 9.8EPSS 22.3% | 12 August 2014 |
| CVE-2014-3120 | Elasticsearch Remote Code Execution Vulnerability | KEVHIGH 8.1EPSS 88.6% | 28 July 2014 |
| CVE-2013-3993 | IBM InfoSphere BigInsights Invalid Input Vulnerability | KEVMEDIUM 6.5EPSS 5.24% | 7 July 2014 |
| CVE-2014-3153 | Linux Kernel Privilege Escalation Vulnerability | KEVHIGH 7.8EPSS 37.2% | 7 June 2014 |
| CVE-2014-1812 | Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability | KEVHIGH 8.8EPSS 65.1% | 14 May 2014 |
| CVE-2014-0196 | Linux Kernel Race Condition Vulnerability | KEVMEDIUM 5.5EPSS 22.5% | 7 May 2014 |
| CVE-2014-0130 | Ruby on Rails Directory Traversal Vulnerability | KEVHIGH 7.5EPSS 53.7% | 7 May 2014 |
| CVE-2014-1776 | Microsoft Internet Explorer Memory Corruption Vulnerability | KEVCRITICAL 9.8EPSS 88.0% | 27 April 2014 |
| CVE-2014-0780 | InduSoft Web Studio NTWebServer Directory Traversal Vulnerability | KEVCRITICAL 9.8EPSS 74.0% | 25 April 2014 |
| CVE-2014-0160 | OpenSSL Information Disclosure Vulnerability | KEVHIGH 7.5EPSS 100.0% | 7 April 2014 |
| CVE-2014-1761 | Microsoft Word Memory Corruption Vulnerability | KEVHIGH 7.8EPSS 77.5% | 25 March 2014 |
| CVE-2014-2120 | Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability | KEVMEDIUM 6.1EPSS 18.9% | 19 March 2014 |
| CVE-2013-7331 | Microsoft Internet Explorer Information Disclosure Vulnerability | KEVMEDIUM 6.5EPSS 58.0% | 26 February 2014 |
| CVE-2014-0502 | Adobe Flash Player Double Free Vulnerablity | KEVHIGH 8.8EPSS 24.2% | 21 February 2014 |
| CVE-2014-0322 | Microsoft Internet Explorer Use-After-Free Vulnerability | KEVHIGH 8.8EPSS 85.2% | 14 February 2014 |
| CVE-2014-0497 | Adobe Flash Player Integer Underflow Vulnerablity | KEVCRITICAL 9.8EPSS 99.9% | 5 February 2014 |
| CVE-2014-0496 | Adobe Reader and Acrobat Use-After-Free Vulnerability | KEVHIGH 8.8EPSS 40.2% | 15 January 2014 |
| CVE-2013-3900 | Microsoft WinVerifyTrust function Remote Code Execution | KEVMEDIUM 5.5EPSS 44.6% | 11 December 2013 |
| CVE-2013-5065 | Microsoft Windows Kernel Privilege Escalation Vulnerability | KEVHIGH 7.8EPSS 34.9% | 28 November 2013 |
| CVE-2013-6282 | Linux Kernel Improper Input Validation Vulnerability | KEVHIGH 8.8EPSS 39.7% | 20 November 2013 |
| CVE-2013-5223 | D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability | KEVMEDIUM 5.4EPSS 33.6% | 19 November 2013 |
| CVE-2013-3918 | Microsoft Windows Out-of-Bounds Write Vulnerability | KEVHIGH 8.8EPSS 73.9% | 12 November 2013 |
| CVE-2013-3906 | Microsoft Graphics Component Memory Corruption Vulnerability | KEVHIGH 7.8EPSS 85.0% | 6 November 2013 |
| CVE-2013-3897 | Microsoft Internet Explorer Use-After-Free Vulnerability | KEVHIGH 8.8EPSS 77.5% | 9 October 2013 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. Patch KEV entries first, then anything with an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS and the CISA KEV catalogue. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.