Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
417,841 CVEs1,766 in CISA KEV17,507 with EPSS ≥ 10%25,055 with a public exploitUpdated 2 November 2026
17,507 results · page 14 of 351
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2025-6970 | The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 7.0.3 due to insufficient escaping on the user supplied… | HIGH 7.5EPSS 56.4% | 9 July 2025 |
| CVE-2025-6514 | mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URL | CRITICAL 9.6EPSS 77.0% | 9 July 2025 |
| CVE-2025-34077 | An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. | EXPLOITCRITICAL 10.0EPSS 16.5% | 9 July 2025 |
| CVE-2025-7206 | A vulnerability, which was classified as critical, has been found in D-Link DIR-825 2.10. | HIGH 8.9EPSS 21.7% | 9 July 2025 |
| CVE-2025-49533 | Adobe Experience Manager (MS) versions 6.5.23.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. | CRITICAL 9.8EPSS 51.7% | 8 July 2025 |
| CVE-2025-49719 | Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network. | HIGH 7.5EPSS 15.5% | 8 July 2025 |
| CVE-2025-49706 | Microsoft SharePoint Improper Authentication Vulnerability | KEVMEDIUM 6.5EPSS 99.1% | 8 July 2025 |
| CVE-2025-49704 | Microsoft SharePoint Code Injection Vulnerability | KEVHIGH 8.8EPSS 100.0% | 8 July 2025 |
| CVE-2025-47984 | Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network. | HIGH 7.5EPSS 23.3% | 8 July 2025 |
| CVE-2025-47981 | Heap-based buffer overflow in Windows SPNEGO Extended Negotiation allows an unauthorized attacker to execute code over a network. | CRITICAL 9.8EPSS 41.1% | 8 July 2025 |
| CVE-2025-6771 | OS command injection in Ivanti Endpoint Manager Mobile (EPMM) before version 12.5.0.2,12.4.0.3 and 12.3.0.3 allows a remote authenticated attacker with high privileges to achieve remote code execution | HIGH 7.2EPSS 23.0% | 8 July 2025 |
| CVE-2025-6770 | OS command injection in Ivanti Endpoint Manager Mobile (EPMM) before version 12.5.0.2 allows a remote authenticated attacker with high privileges to achieve remote code execution | HIGH 7.2EPSS 19.5% | 8 July 2025 |
| CVE-2025-40738 | A vulnerability has been identified in SINEC NMS (All versions < V4.0). | HIGH 8.7EPSS 13.4% | 8 July 2025 |
| CVE-2025-40737 | A vulnerability has been identified in SINEC NMS (All versions < V4.0). | HIGH 8.7EPSS 13.4% | 8 July 2025 |
| CVE-2025-6793 | Marvell QConvergeConsole QLogicDownloadImpl Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability. | CRITICAL 9.4EPSS 17.5% | 7 July 2025 |
| CVE-2025-7088 | A vulnerability, which was classified as critical, was found in Belkin F9K1122 1.00.33. | HIGH 7.4EPSS 13.8% | 6 July 2025 |
| CVE-2025-7087 | A vulnerability classified as critical was found in Belkin F9K1122 1.00.33. | HIGH 7.4EPSS 13.4% | 6 July 2025 |
| CVE-2025-7083 | A vulnerability was found in Belkin F9K1122 1.00.33. | LOW 2.1EPSS 46.3% | 6 July 2025 |
| CVE-2025-7082 | A vulnerability was found in Belkin F9K1122 1.00.33 and classified as critical. | LOW 2.1EPSS 17.1% | 6 July 2025 |
| CVE-2025-7081 | A vulnerability has been found in Belkin F9K1122 1.00.33 and classified as critical. | LOW 2.1EPSS 19.9% | 6 July 2025 |
| CVE-2025-47228 | In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connection settings allows authenticated attackers to execute system commands via crafted HTTP requests. | EXPLOITMEDIUM 6.7EPSS 23.1% | 5 July 2025 |
| CVE-2025-5961 | The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpvivid_upload_import_files' function in all versions up to, and including, 0.9.116. | HIGH 7.2EPSS 55.5% | 3 July 2025 |
| CVE-2025-34067 | An unauthenticated remote command execution vulnerability exists in the applyCT component of the Hikvision Integrated Security Management Platform due to the use of a vulnerable version of the Fastjson library. | CRITICAL 10.0EPSS 22.0% | 2 July 2025 |
| CVE-2025-34057 | An information disclosure vulnerability exists in Ruijie NBR series routers (known to affect NBR2000G, NBR1300G, and NBR1000 models) via the /WEB_VMS/LEVEL15/ endpoint. | HIGH 8.7EPSS 10.1% | 2 July 2025 |
| CVE-2025-6463 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'entry_delete_upload_files' function in all versions up to, and… | HIGH 8.8EPSS 15.1% | 2 July 2025 |
| CVE-2025-4380 | The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.89 via the 'bsa_template' parameter of the `bsa_preview_callback` function. | CRITICAL 9.8EPSS 42.5% | 2 July 2025 |
| CVE-2025-53107 | Prior to version 2.1.5, there is a command injection vulnerability caused by the unsanitized use of input parameters within a call to child_process.exec, enabling an attacker to inject arbitrary system commands. | HIGH 7.5EPSS 24.5% | 1 July 2025 |
| CVE-2025-37098 | A path traversal vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646. | HIGH 7.5EPSS 46.3% | 1 July 2025 |
| CVE-2025-41656 | An unauthenticated remote attacker can run arbitrary commands on the affected devices with high privileges because the authentication for the Node_RED server is not configured by default. | CRITICAL 10.0EPSS 12.4% | 1 July 2025 |
| CVE-2025-6934 | The Opal Estate Pro – Property Management and Submission plugin for WordPress, used by the FullHouse - Real Estate Responsive WordPress Theme, is vulnerable to privilege escalation via in all versions up to, and including, 1.7.5. | CRITICAL 9.8EPSS 25.4% | 1 July 2025 |
| CVE-2025-6554 | Google Chromium V8 Type Confusion Vulnerability | KEVHIGH 8.1EPSS 14.1% | 30 June 2025 |
| CVE-2025-32463 | Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability | KEVEXPLOITHIGH 7.8EPSS 55.5% | 30 June 2025 |
| CVE-2025-6898 | A vulnerability, which was classified as critical, has been found in D-Link DI-7300G+ 19.12.25A1. | LOW 2.1EPSS 17.1% | 30 June 2025 |
| CVE-2025-5306 | Improper Neutralization of Special Elements in the Netflow directory field may allow OS command injection. | HIGH 7.0EPSS 35.7% | 27 June 2025 |
| CVE-2025-36038 | IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially crafted sequence of serialized objects. | CRITICAL 9.8EPSS 13.3% | 25 June 2025 |
| CVE-2025-20282 | A vulnerability in an internal API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device and then execute those files on the underlying operating system as root. | CRITICAL 10.0EPSS 38.7% | 25 June 2025 |
| CVE-2025-20281 | Cisco Identity Services Engine Injection Vulnerability | KEVCRITICAL 10.0EPSS 97.6% | 25 June 2025 |
| CVE-2025-6543 | Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability | KEVCRITICAL 9.2EPSS 10.4% | 25 June 2025 |
| CVE-2024-51983 | An unauthenticated attacker who can connect to the Web Services feature (HTTP TCP port 80) can issue a WS-Scan SOAP request containing an unexpected JobToken value which will crash the target device. | HIGH 7.5EPSS 11.8% | 25 June 2025 |
| CVE-2024-51982 | An unauthenticated attacker who can connect to TCP port 9100 can issue a Printer Job Language (PJL) command that will crash the target device. | HIGH 7.5EPSS 10.7% | 25 June 2025 |
| CVE-2024-51978 | An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. | CRITICAL 9.8EPSS 15.8% | 25 June 2025 |
| CVE-2024-51977 | An unauthenticated attacker who can access either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631), can leak several pieces of sensitive information from a vulnerable device. | MEDIUM 5.3EPSS 46.6% | 25 June 2025 |
| CVE-2025-34040 | An arbitrary file upload vulnerability exists in the Zhiyuan OA platform via the wpsAssistServlet interface. | EXPLOITCRITICAL 10.0EPSS 15.4% | 24 June 2025 |
| CVE-2025-34037 | An OS command injection vulnerability exists in various models of E-Series Linksys routers via the /tmUnblock.cgi and /hndUnblock.cgi endpoints over HTTP on port 8080. | CRITICAL 10.0EPSS 96.2% | 24 June 2025 |
| CVE-2025-34036 | An OS command injection vulnerability exists in white-labeled DVRs manufactured by TVT, affecting a custom HTTP service called "Cross Web Server" that listens on TCP ports 81 and 82. | CRITICAL 10.0EPSS 30.9% | 24 June 2025 |
| CVE-2025-34035 | An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier. | CRITICAL 10.0EPSS 24.8% | 24 June 2025 |
| CVE-2025-34033 | An OS command injection vulnerability exists in the Blue Angel Software Suite running on embedded Linux devices via the ping_addr parameter in the webctrl.cgi script. | HIGH 7.7EPSS 13.2% | 24 June 2025 |
| CVE-2025-2828 | A Server-Side Request Forgery (SSRF) vulnerability exists in the RequestsToolkit component of the langchain-community package (specifically, langchain_community.agent_toolkits.openapi.toolkit.RequestsToolkit) in langchain-ai/langchain version 0.0.27. | CRITICAL 10.0EPSS 21.0% | 23 June 2025 |
| CVE-2025-52877 | In JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possible | MEDIUM 4.8EPSS 37.0% | 23 June 2025 |
| CVE-2025-52876 | In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possible | MEDIUM 5.4EPSS 38.6% | 23 June 2025 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.