Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
417,841 CVEs1,766 in CISA KEV17,507 with EPSS ≥ 10%25,055 with a public exploitUpdated 2 November 2026
17,507 results · page 13 of 351
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2025-32429 | In versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, it's possible for anyone to inject SQL using the parameter sort of the getdeleteddocuments.vm. | EXPLOITCRITICAL 9.3EPSS 85.5% | 24 July 2025 |
| CVE-2025-51087 | Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/saveParentControlInfo. | HIGH 8.6EPSS 12.9% | 24 July 2025 |
| CVE-2025-40598 | A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unauthenticated attacker to potentially execute arbitrary JavaScript code. | MEDIUM 6.1EPSS 46.2% | 23 July 2025 |
| CVE-2025-40597 | A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution. | HIGH 7.5EPSS 22.7% | 23 July 2025 |
| CVE-2025-40596 | A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution. | HIGH 7.3EPSS 45.3% | 23 July 2025 |
| CVE-2025-54453 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. | CRITICAL 9.8EPSS 34.3% | 23 July 2025 |
| CVE-2025-54445 | Improper Restriction of XML External Entity Reference vulnerability in Samsung Electronics MagicINFO 9 Server allows Server Side Request Forgery.This issue affects MagicINFO 9 Server: less than 21.1080.0. | CRITICAL 9.8EPSS 17.7% | 23 July 2025 |
| CVE-2025-54441 | Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. | HIGH 8.8EPSS 15.4% | 23 July 2025 |
| CVE-2025-54439 | Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. | HIGH 8.8EPSS 13.5% | 23 July 2025 |
| CVE-2025-51471 | Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and bypass access controls via a malicious realm value in a WWW-Authenticate header returned by the /api/pull endpoint. | MEDIUM 6.9EPSS 18.5% | 22 July 2025 |
| CVE-2025-8017 | A vulnerability was found in Tenda AC7 15.03.06.44. | HIGH 7.4EPSS 13.2% | 22 July 2025 |
| CVE-2025-34143 | An authentication bypass vulnerability exists in ETQ Reliance on the CG (legacy) platform. | CRITICAL 9.3EPSS 38.0% | 22 July 2025 |
| CVE-2025-7952 | A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748. | LOW 2.1EPSS 24.5% | 22 July 2025 |
| CVE-2025-53832 | Versions 0.0.11 and below contain a command injection vulnerability which exists in the @translated/lara-mcp MCP Server. | HIGH 7.5EPSS 10.9% | 21 July 2025 |
| CVE-2025-7624 | An SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to remote code execution, if a quarantining policy is active for Email and SFOS was upgraded from a version older… | CRITICAL 9.8EPSS 10.5% | 21 July 2025 |
| CVE-2025-6704 | An arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to pre-auth remote code execution, if a specific configuration of SPX is enabled in combination with the… | CRITICAL 9.8EPSS 11.8% | 21 July 2025 |
| CVE-2024-13973 | A post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR1 (21.0.1) can potentially lead to administrators achieving arbitrary code execution. | HIGH 7.2EPSS 12.3% | 21 July 2025 |
| CVE-2025-53771 | Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | MEDIUM 6.5EPSS 99.9% | 20 July 2025 |
| CVE-2025-53770 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | KEVEXPLOITCRITICAL 9.8EPSS 100.0% | 20 July 2025 |
| CVE-2025-27210 | This vulnerability affects Windows users of `path.join` API. | EXPLOITHIGH 7.5EPSS 14.3% | 18 July 2025 |
| CVE-2025-54309 | CrushFTP Unprotected Alternate Channel Vulnerability | KEVCRITICAL 9.8EPSS 93.5% | 18 July 2025 |
| CVE-2025-54073 | A command injection vulnerability exists in the `mcp-package-docs` MCP Server prior to the fix in commit cb4ad49615275379fd6f2f1cf1ec4731eec56eb9. | HIGH 7.5EPSS 11.3% | 18 July 2025 |
| CVE-2025-6197 | An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. | MEDIUM 4.2EPSS 70.1% | 18 July 2025 |
| CVE-2025-6023 | An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks. | HIGH 7.6EPSS 57.7% | 18 July 2025 |
| CVE-2025-54068 | Laravel Livewire Code Injection Vulnerability | KEVCRITICAL 9.2EPSS 96.3% | 17 July 2025 |
| CVE-2025-25257 | Fortinet FortiWeb SQL Injection Vulnerability | KEVEXPLOITCRITICAL 9.8EPSS 99.9% | 17 July 2025 |
| CVE-2025-34117 | A remote code execution vulnerability exists in multiple Netcore and Netis routers models with firmware released prior to August 2014 due to the presence of an undocumented backdoor listener on UDP port 53413. | CRITICAL 9.3EPSS 20.8% | 16 July 2025 |
| CVE-2025-20337 | Cisco Identity Services Engine Injection Vulnerability | KEVCRITICAL 10.0EPSS 74.5% | 16 July 2025 |
| CVE-2025-20284 | A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as root. | HIGH 7.2EPSS 25.1% | 16 July 2025 |
| CVE-2025-20283 | A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as root. | HIGH 7.2EPSS 13.2% | 16 July 2025 |
| CVE-2025-34300 | A template injection vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14 via the ciwweb.pl http://ciwweb.pl/ Perl web application. | CRITICAL 10.0EPSS 81.3% | 16 July 2025 |
| CVE-2025-52690 | Successful exploitation of the vulnerability could allow an attacker to execute arbitrary commands as root, potentially leading to the loss of confidentiality, integrity, availability, and full control of the access point. | HIGH 8.1EPSS 14.4% | 16 July 2025 |
| CVE-2025-52689 | Successful exploitation of the vulnerability could allow an unauthenticated attacker to obtain a valid session ID with administrator privileges by spoofing the login request, potentially allowing the attacker to modify the behaviour of the access point. | CRITICAL 9.8EPSS 16.7% | 16 July 2025 |
| CVE-2025-52688 | Successful exploitation of the vulnerability could allow an attacker to inject commands with root privileges on the access point, potentially leading to the loss of confidentiality, integrity, availability, and full control of the access point. | CRITICAL 9.8EPSS 37.1% | 16 July 2025 |
| CVE-2025-7656 | Integer overflow in V8 in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | HIGH 8.8EPSS 11.0% | 15 July 2025 |
| CVE-2025-6558 | Google Chromium ANGLE and GPU Improper Input Validation Vulnerability | KEVHIGH 8.8EPSS 10.9% | 15 July 2025 |
| CVE-2025-52379 | Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below contains an authenticated command injection vulnerability in the firmware update feature. | MEDIUM 5.4EPSS 15.7% | 15 July 2025 |
| CVE-2025-52378 | Cross-Site Scripting (XSS) vulnerability in Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below allowing attackers to inject JavaScript code that is executed in the context of administrator sessions when viewing the device management page… | MEDIUM 5.4EPSS 17.2% | 15 July 2025 |
| CVE-2025-52377 | Command injection vulnerability in Nexxt Solutions NCM-X1800 Mesh Router versions UV1.2.7 and below, allowing authenticated attackers to execute arbitrary commands on the device. | MEDIUM 5.4EPSS 14.4% | 15 July 2025 |
| CVE-2025-6965 | There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. | EXPLOITHIGH 7.2EPSS 73.5% | 15 July 2025 |
| CVE-2025-52376 | An authentication bypass vulnerability in the /web/um_open_telnet.cgi endpoint in Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below, allowing an attacker to remotely enable the Telnet service without authentication, bypassing security… | CRITICAL 9.8EPSS 13.8% | 15 July 2025 |
| CVE-2025-5394 | The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the alone_import_pack_install_plugin() function in all versions up to, and including, 7.8.3. | CRITICAL 9.8EPSS 53.2% | 15 July 2025 |
| CVE-2024-58258 | SugarCRM before 13.0.4 and 14.x before 14.0.1 allows SSRF in the API module because a limited type of code injection can occur. | EXPLOITHIGH 7.2EPSS 22.4% | 13 July 2025 |
| CVE-2020-36847 | The Simple-File-List Plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.2.2 via the rename function which can be used to rename uploaded PHP code with a png extension to use a php extension. | EXPLOITCRITICAL 9.8EPSS 43.5% | 12 July 2025 |
| CVE-2013-3307 | Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell metacharacters in the apply.cgi ping_ip parameter on TCP port 52000. | EXPLOITHIGH 8.3EPSS 63.1% | 11 July 2025 |
| CVE-2025-50121 | A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause unauthenticated remote code execution when a malicious folder is created over the web interface HTTP when enabled. | CRITICAL 9.5EPSS 22.1% | 11 July 2025 |
| CVE-2025-7414 | A vulnerability classified as critical was found in Tenda O3V2 1.0.0.12(3880). | LOW 2.1EPSS 12.6% | 10 July 2025 |
| CVE-2025-47813 | Wing FTP Server Information Disclosure Vulnerability | KEVMEDIUM 4.3EPSS 62.5% | 10 July 2025 |
| CVE-2025-47812 | Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability | KEVEXPLOITCRITICAL 10.0EPSS 93.9% | 10 July 2025 |
| CVE-2025-7407 | A vulnerability, which was classified as critical, was found in Netgear D6400 1.0.0.114. | LOW 2.1EPSS 12.1% | 10 July 2025 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.