Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
417,825 CVEs1,766 in CISA KEV17,507 with EPSS ≥ 10%25,055 with a public exploitUpdated 2 November 2026
17,507 results · page 11 of 351
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2025-54918 | Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network. | HIGH 8.8EPSS 25.3% | 9 September 2025 |
| CVE-2025-54897 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | HIGH 8.8EPSS 21.7% | 9 September 2025 |
| CVE-2025-54261 | ColdFusion versions 2025.3, 2023.15, 2021.21 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary code execution by an attacker. | CRITICAL 10.0EPSS 26.5% | 9 September 2025 |
| CVE-2025-9872 | Insufficient filename validation in Ivanti Endpoint Manager before 2024 SU3 SR1 and 2022 SU8 SR2 allows a remote unauthenticated attacker to achieve remote code execution. | HIGH 8.8EPSS 16.7% | 9 September 2025 |
| CVE-2025-9712 | Insufficient filename validation in Ivanti Endpoint Manager before 2024 SU3 SR1 and 2022 SU8 SR2 allows a remote unauthenticated attacker to achieve remote code execution. | HIGH 8.8EPSS 23.9% | 9 September 2025 |
| CVE-2025-54236 | Adobe Commerce and Magento Improper Input Validation Vulnerability | KEVCRITICAL 9.1EPSS 95.4% | 9 September 2025 |
| CVE-2025-53609 | A Relative Path Traversal vulnerability [CWE-23] in FortiWeb 7.6.0 through 7.6.4, 7.4.0 through 7.4.8, 7.2.0 through 7.2.11, 7.0.2 through 7.0.11 may allow an authenticated attacker to perform an arbitrary file read on the underlying system via crafted… | MEDIUM 4.9EPSS 10.6% | 9 September 2025 |
| CVE-2025-8085 | The Ditty WordPress plugin before 3.1.58 lacks authorization and authentication for requests to its displayItems endpoint, allowing unauthenticated visitors to make requests to arbitrary URLs. | HIGH 8.6EPSS 20.2% | 8 September 2025 |
| CVE-2025-58443 | Versions 1.5.10.1673 and below contain an authentication bypass vulnerability. | CRITICAL 9.9EPSS 20.9% | 6 September 2025 |
| CVE-2025-9961 | An authenticated attacker may remotely execute arbitrary code via the CWMP binary on the devices AX10 and AX1500. | HIGH 8.6EPSS 10.3% | 6 September 2025 |
| CVE-2025-57833 | FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed QuerySet.annotate() or QuerySet.alias(). | HIGH 8.1EPSS 26.1% | 3 September 2025 |
| CVE-2025-53690 | Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability | KEVCRITICAL 9.0EPSS 60.6% | 3 September 2025 |
| CVE-2025-53693 | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Cache Poisoning.This issue affects Sitecore Experience Manager (XM):… | CRITICAL 9.8EPSS 19.9% | 3 September 2025 |
| CVE-2024-28988 | SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. | CRITICAL 9.8EPSS 41.7% | 1 September 2025 |
| CVE-2025-9769 | The manipulation of the argument addr with the input `echo 12345 > poc.txt` results in command injection. | LOW 0.9EPSS 33.0% | 1 September 2025 |
| CVE-2025-6507 | A vulnerability in the h2oai/h2o-3 repository allows attackers to exploit deserialization of untrusted data, potentially leading to arbitrary code execution and reading of system files. | CRITICAL 9.8EPSS 17.3% | 1 September 2025 |
| CVE-2025-9752 | A security vulnerability has been detected in D-Link DIR-852 1.00CN B09. | MEDIUM 5.5EPSS 18.9% | 1 September 2025 |
| CVE-2025-9745 | A security vulnerability has been detected in D-Link DI-500WF 14.04.10A1T. | LOW 2.0EPSS 12.7% | 31 August 2025 |
| CVE-2025-9377 | TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability | KEVHIGH 8.6EPSS 41.3% | 29 August 2025 |
| CVE-2025-55177 | Meta Platforms WhatsApp Incorrect Authorization Vulnerability | KEVMEDIUM 5.4EPSS 13.5% | 29 August 2025 |
| CVE-2025-57819 | Sangoma FreePBX Authentication Bypass Vulnerability | KEVEXPLOITCRITICAL 10.0EPSS 95.2% | 28 August 2025 |
| CVE-2024-13985 | A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows unauthenticated remote attackers to execute arbitrary system commands via the capture_handle.action interface. | CRITICAL 10.0EPSS 15.1% | 27 August 2025 |
| CVE-2018-25115 | Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands… | CRITICAL 10.0EPSS 10.4% | 27 August 2025 |
| CVE-2025-50979 | NodeBB v4.3.0 is vulnerable to SQL injection in its search-categories API endpoint (/api/v3/search/categories). | HIGH 8.6EPSS 10.6% | 27 August 2025 |
| CVE-2025-9533 | A vulnerability has been found in TOTOLINK T10 4.1.8cu.5241_B20210927. | MEDIUM 5.5EPSS 12.2% | 27 August 2025 |
| CVE-2025-50989 | OPNsense before 25.1.8 contains an authenticated command injection vulnerability in its Bridge Interface Edit endpoint (interfaces_bridge_edit.php). | CRITICAL 9.1EPSS 10.9% | 27 August 2025 |
| CVE-2025-9528 | A vulnerability was determined in Linksys E1700 1.0.0.4.003. | LOW 2.0EPSS 54.5% | 27 August 2025 |
| CVE-2025-9491 | Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. | MEDIUM 4.6EPSS 76.0% | 26 August 2025 |
| CVE-2025-9482 | A vulnerability was detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. | HIGH 7.4EPSS 10.1% | 26 August 2025 |
| CVE-2025-7775 | Citrix NetScaler Memory Overflow Vulnerability | KEVCRITICAL 9.2EPSS 20.7% | 26 August 2025 |
| CVE-2025-9424 | A vulnerability was identified in Ruijie WS7204-A 2017.06.15. | LOW 2.0EPSS 15.2% | 25 August 2025 |
| CVE-2025-57772 | Prior to version 2.10.12, there is a H2 JDBC RCE bypass in DataEase. | HIGH 8.2EPSS 10.9% | 25 August 2025 |
| CVE-2025-53120 | A path traversal vulnerability in unauthenticated upload functionality allows a malicious actor to upload binaries and scripts to the server’s configuration and web root directories, achieving remote code execution on the Unified PAM server. | CRITICAL 9.4EPSS 11.7% | 25 August 2025 |
| CVE-2025-53119 | An unauthenticated unrestricted file upload vulnerability allows an attacker to upload malicious binaries and scripts to the server. | HIGH 7.5EPSS 15.0% | 25 August 2025 |
| CVE-2025-53118 | An authentication bypass vulnerability exists which allows an unauthenticated attacker to control administrator backup functions, leading to compromise of passwords, secrets, and application session tokens stored by the Unified PAM. | CRITICAL 9.8EPSS 35.1% | 25 August 2025 |
| CVE-2025-43300 | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | KEVCRITICAL 10.0EPSS 65.2% | 21 August 2025 |
| CVE-2025-54988 | Critical XXE in Apache Tika (tika-parser-pdf-module) in Apache Tika 1.13 through and including 3.2.1 on all platforms allows an attacker to carry out XML External Entity injection via a crafted XFA file inside of a PDF. | HIGH 8.4EPSS 47.9% | 20 August 2025 |
| CVE-2010-20103 | A malicious backdoor was embedded in the official ProFTPD 1.3.3c source tarball distributed between November 28 and December 2, 2010. | CRITICAL 9.3EPSS 13.8% | 20 August 2025 |
| CVE-2025-48148 | Unrestricted Upload of File with Dangerous Type vulnerability in StoreKeeper B.V. | CRITICAL 10.0EPSS 16.9% | 20 August 2025 |
| CVE-2025-57791 | A security vulnerability has been identified that allows remote attackers to inject or manipulate command-line arguments passed to internal components due to insufficient input validation. | MEDIUM 6.9EPSS 38.8% | 20 August 2025 |
| CVE-2025-57790 | A security vulnerability has been identified that allows remote attackers to perform unauthorized file system access through a path traversal issue. | HIGH 8.7EPSS 43.9% | 20 August 2025 |
| CVE-2025-38562 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference error in generate_encryptionkey If client send two session setups with krb5 authenticate to ksmbd, null pointer dereference error in… | MEDIUM 5.5EPSS 11.9% | 19 August 2025 |
| CVE-2025-8723 | The Cloudflare Image Resizing plugin for WordPress is vulnerable to Remote Code Execution due to missing authentication and insufficient sanitization within its hook_rest_pre_dispatch() method in all versions up to, and including, 1.5.6. | CRITICAL 9.8EPSS 18.0% | 19 August 2025 |
| CVE-2025-55296 | A stored Cross-Site Scripting (XSS) vulnerability exists in LibreNMS (<= 25.6.0) in the Alert Template creation feature. | MEDIUM 5.4EPSS 17.0% | 18 August 2025 |
| CVE-2025-9090 | A vulnerability was identified in Tenda AC20 16.03.08.12. | EXPLOITLOW 2.1EPSS 16.7% | 17 August 2025 |
| CVE-2023-3866 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compound request This patch validate session id and tree id in compound request. | MEDIUM 5.5EPSS 12.5% | 16 August 2025 |
| CVE-2025-7441 | The StoryChief plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 1.0.42. | EXPLOITCRITICAL 9.8EPSS 50.2% | 16 August 2025 |
| CVE-2025-54466 | Improper Control of Generation of Code ('Code Injection') vulnerability leading to a possible RCE in Apache OFBiz scrum plugin. | CRITICAL 9.8EPSS 26.5% | 15 August 2025 |
| CVE-2025-20265 | A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the device. This vulnerability… | CRITICAL 10.0EPSS 15.8% | 14 August 2025 |
| CVE-2025-43984 | They are vulnerable to unauthenticated /goform/goform_set_cmd_process requests. | CRITICAL 9.8EPSS 23.5% | 14 August 2025 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.