Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
417,841 CVEs1,766 in CISA KEV17,507 with EPSS ≥ 10%25,055 with a public exploitUpdated 2 November 2026
17,507 results · page 12 of 351
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2024-53945 | The KuWFi 4G AC900 LTE router 1.0.13 is vulnerable to command injection on the HTTP API endpoints /goform/formMultiApnSetting and /goform/atCmd. | HIGH 8.8EPSS 23.2% | 14 August 2025 |
| CVE-2025-8956 | A vulnerability was found in D-Link DIR‑818L up to 1.05B01. | LOW 2.1EPSS 23.5% | 14 August 2025 |
| CVE-2025-8943 | The Custom MCPs feature is designed to execute OS commands, for instance, using tools like `npx` to spin up local MCP Servers. | CRITICAL 9.8EPSS 75.2% | 14 August 2025 |
| CVE-2025-55346 | User-controlled input flows to an unsafe implementation of a dynamic Function constructor, allowing network attackers to run arbitrary unsandboxed JS code in the context of the host, by sending a simple POST request. | CRITICAL 9.8EPSS 22.5% | 14 August 2025 |
| CVE-2025-52970 | A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.10 and below, and 7.0.10 and below may allow an unauthenticated remote attacker with non-public information pertaining to the device… | HIGH 8.1EPSS 10.1% | 12 August 2025 |
| CVE-2025-25256 | An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiSIEM 7.3.0 through 7.3.1, FortiSIEM 7.2.0 through 7.2.5, FortiSIEM 7.1.0 through 7.1.7, FortiSIEM 7.0.0… | CRITICAL 9.8EPSS 65.3% | 12 August 2025 |
| CVE-2025-53778 | Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network. | HIGH 8.8EPSS 51.5% | 12 August 2025 |
| CVE-2025-53772 | Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network. | HIGH 8.8EPSS 28.0% | 12 August 2025 |
| CVE-2025-53760 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | HIGH 7.1EPSS 18.9% | 12 August 2025 |
| CVE-2025-53722 | Uncontrolled resource consumption in Windows Remote Desktop Services allows an unauthorized attacker to deny service over a network. | HIGH 7.5EPSS 22.7% | 12 August 2025 |
| CVE-2025-50165 | Untrusted pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. | CRITICAL 9.8EPSS 10.5% | 12 August 2025 |
| CVE-2025-50154 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network. | EXPLOITMEDIUM 6.5EPSS 30.0% | 12 August 2025 |
| CVE-2025-49712 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | HIGH 8.8EPSS 20.7% | 12 August 2025 |
| CVE-2024-32640 | Versions prior to 7.4.5, 7.3.12, and 7.2.7 contain a SQL injection vulnerability in the `processAsyncObject` method that can result in remote code execution. | CRITICAL 9.8EPSS 78.4% | 11 August 2025 |
| CVE-2025-25231 | Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. | HIGH 7.5EPSS 25.1% | 11 August 2025 |
| CVE-2025-8356 | In Xerox FreeFlow Core version 8.0.4, an attacker can exploit a Path Traversal vulnerability to access unauthorized files on the server. | CRITICAL 9.8EPSS 19.4% | 8 August 2025 |
| CVE-2025-8088 | RARLAB WinRAR Path Traversal Vulnerability | KEVHIGH 8.4EPSS 94.0% | 8 August 2025 |
| CVE-2025-34152 | An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) via the 'time' parameter of the '/protocol.csp?' endpoint. | CRITICAL 9.4EPSS 85.3% | 7 August 2025 |
| CVE-2025-47188 | A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones through 6.4 SP4 (R6.4.0.4006), and the 6970 Conference Unit through 6.4 SP4 (R6.4.0.4006) or version V1 R0.1.0, could allow an unauthenticated attacker to conduct a… | MEDIUM 6.5EPSS 47.5% | 7 August 2025 |
| CVE-2025-7769 | Tigo Energy's CCA is vulnerable to a command injection vulnerability in the /cgi-bin/mobile_api endpoint when the DEVICE_PING command is called, allowing remote code execution due to improper handling of user input. | EXPLOITHIGH 8.7EPSS 19.4% | 6 August 2025 |
| CVE-2025-50286 | A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated admin to upload a malicious plugin via the /admin/tools/direct-install interface. | EXPLOITHIGH 8.1EPSS 14.7% | 6 August 2025 |
| CVE-2013-10069 | The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), contains an unauthenticated OS command injection vulnerability in command.php, which improperly handles the cmd POST parameter. | CRITICAL 10.0EPSS 16.5% | 5 August 2025 |
| CVE-2025-54254 | Adobe Experience Manager versions 6.5.23 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. | HIGH 8.6EPSS 70.1% | 5 August 2025 |
| CVE-2025-54253 | Adobe Experience Manager Forms Code Execution Vulnerability | KEVCRITICAL 10.0EPSS 88.8% | 5 August 2025 |
| CVE-2025-54987 | A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. | CRITICAL 9.8EPSS 21.5% | 5 August 2025 |
| CVE-2025-54948 | Trend Micro Apex One OS Command Injection Vulnerability | KEVCRITICAL 9.8EPSS 25.4% | 5 August 2025 |
| CVE-2025-53417 | DIAView (v4.2.0 and prior) - Directory Traversal Information Disclosure Vulnerability | CRITICAL 9.3EPSS 15.4% | 5 August 2025 |
| CVE-2025-36604 | Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. | CRITICAL 9.8EPSS 66.6% | 4 August 2025 |
| CVE-2025-6205 | Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability | KEVCRITICAL 9.1EPSS 73.7% | 4 August 2025 |
| CVE-2025-6204 | Dassault Systèmes DELMIA Apriso Code Injection Vulnerability | KEVHIGH 8.0EPSS 79.6% | 4 August 2025 |
| CVE-2025-20702 | In the Airoha Bluetooth audio SDK, there is a possible unauthorized access to the RACE protocol. | HIGH 8.8EPSS 10.7% | 4 August 2025 |
| CVE-2025-54782 | In versions 0.2.0 and below, a critical Remote Code Execution (RCE) vulnerability was discovered in the @nestjs/devtools-integration package. | CRITICAL 9.4EPSS 53.3% | 2 August 2025 |
| CVE-2025-54136 | In versions 1.2.4 and below, attackers can achieve remote and persistent code execution by modifying an already trusted MCP configuration file inside a shared GitHub repository or editing the file locally on the target's machine. | HIGH 8.8EPSS 28.5% | 2 August 2025 |
| CVE-2013-10059 | An authenticated OS command injection vulnerability exists in various D-Link routers (tested on DIR-615H1 running firmware version 8.04) via the tools_vct.htm endpoint. | HIGH 8.6EPSS 26.3% | 1 August 2025 |
| CVE-2013-10050 | An OS command injection vulnerability exists in multiple D-Link routers (confirmed on DIR-300 rev A v1.05 and DIR-615 rev D v4.13) via the authenticated tools_vct.xgi CGI endpoint. | HIGH 8.7EPSS 13.5% | 1 August 2025 |
| CVE-2013-10048 | An OS command injection vulnerability exists in various legacy D-Link routers—including DIR-300 rev B and DIR-600 (firmware ≤ 2.13 and ≤ 2.14b01, respectively)—due to improper input handling in the unauthenticated command.php endpoint. | CRITICAL 9.3EPSS 16.9% | 1 August 2025 |
| CVE-2025-54574 | In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. | CRITICAL 9.8EPSS 24.0% | 1 August 2025 |
| CVE-2013-10037 | An OS command injection vulnerability exists in WebTester version 5.x via the install2.php installation script. | CRITICAL 9.3EPSS 14.1% | 31 July 2025 |
| CVE-2025-46811 | A Missing Authorization vulnerability in SUSE Linux Manager allows anyone with the ability to connect to port 443 of SUSE Manager is able to run any command as root on any client. | EXPLOITCRITICAL 9.3EPSS 13.6% | 30 July 2025 |
| CVE-2025-54381 | In versions 1.4.0 until 1.4.19, the file upload processing system contains an SSRF vulnerability that allows unauthenticated remote attackers to force the server to make arbitrary HTTP requests. | CRITICAL 9.9EPSS 13.2% | 29 July 2025 |
| CVE-2025-54766 | The endpoint can be used to export the appliance configuration, exposing sensitive information. | MEDIUM 5.3EPSS 10.2% | 29 July 2025 |
| CVE-2025-54765 | The endpoint can be used to import the appliance configuration, allowing an attacker to control the configuration of the appliance, to include granting themselves administrative level permissions. | MEDIUM 5.3EPSS 10.2% | 29 July 2025 |
| CVE-2025-5120 | A sandbox escape vulnerability was identified in huggingface/smolagents version 1.14.0, allowing attackers to bypass the restricted execution environment and achieve remote code execution (RCE). | CRITICAL 10.0EPSS 31.2% | 27 July 2025 |
| CVE-2025-8184 | A vulnerability was found in D-Link DIR-513 up to 1.10 and classified as critical. | HIGH 7.4EPSS 15.4% | 26 July 2025 |
| CVE-2025-8180 | A vulnerability, which was classified as critical, has been found in Tenda CH22 1.0.0.1. | HIGH 7.4EPSS 12.3% | 26 July 2025 |
| CVE-2025-8159 | A vulnerability was found in D-Link DIR-513 1.0. | HIGH 7.4EPSS 20.6% | 25 July 2025 |
| CVE-2025-8155 | A vulnerability has been found in D-Link DCS-6010L 1.15.03 and classified as problematic. | LOW 2.0EPSS 25.3% | 25 July 2025 |
| CVE-2025-8140 | A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. | HIGH 7.4EPSS 11.3% | 25 July 2025 |
| CVE-2025-8138 | A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. | HIGH 7.4EPSS 11.3% | 25 July 2025 |
| CVE-2019-25224 | The WP Database Backup plugin for WordPress is vulnerable to OS Command Injection in versions before 5.2 via the mysqldump function. | CRITICAL 9.8EPSS 22.1% | 25 July 2025 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.