Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
417,841 CVEs1,766 in CISA KEV17,507 with EPSS ≥ 10%25,055 with a public exploitUpdated 2 November 2026
17,507 results · page 15 of 351
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2025-2172 | Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 fail to sanitize user input prior to passing the input to command line utilities, allowing command injection via special characters in filenames | MEDIUM 6.6EPSS 12.2% | 23 June 2025 |
| CVE-2025-52488 | In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted series of malicious interaction to potentially expose NTLM hashes to a third party SMB server. | HIGH 8.6EPSS 35.8% | 21 June 2025 |
| CVE-2025-6218 | RARLAB WinRAR Path Traversal Vulnerability | KEVHIGH 7.8EPSS 90.5% | 21 June 2025 |
| CVE-2025-6216 | Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability. | CRITICAL 9.8EPSS 47.8% | 21 June 2025 |
| CVE-2025-34030 | An OS command injection vulnerability exists in sar2html version 3.2.2 and prior via the plot parameter in index.php. | CRITICAL 10.0EPSS 52.2% | 20 June 2025 |
| CVE-2025-5121 | A missing authorization check may have allowed compliance frameworks to be applied to projects outside the compliance framework's group. | CRITICAL 9.9EPSS 12.4% | 20 June 2025 |
| CVE-2025-49132 | Prior to version 1.11.11, using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code without being authenticated. | EXPLOITCRITICAL 10.0EPSS 54.5% | 20 June 2025 |
| CVE-2025-6299 | A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525. | LOW 2.0EPSS 11.6% | 20 June 2025 |
| CVE-2025-24286 | A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code. | MEDIUM 4.9EPSS 19.1% | 19 June 2025 |
| CVE-2025-23121 | A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user | HIGH 8.8EPSS 24.7% | 19 June 2025 |
| CVE-2025-6191 | Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. | HIGH 8.8EPSS 11.6% | 18 June 2025 |
| CVE-2025-49213 | An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. | CRITICAL 9.8EPSS 13.3% | 17 June 2025 |
| CVE-2025-49212 | An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. | CRITICAL 9.8EPSS 13.3% | 17 June 2025 |
| CVE-2025-34511 | Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager (XM) and Experience Platform (XP), through version 7.0 is vulnerable to an unrestricted file upload issue. | HIGH 8.8EPSS 30.4% | 17 June 2025 |
| CVE-2025-34510 | Sitecore Experience Manager (XM), Experience Platform (XP), and Experience Commerce (XC) versions 9.0 through 9.3 and 10.0 through 10.4 are affected by a Zip Slip vulnerability. | HIGH 8.8EPSS 24.8% | 17 June 2025 |
| CVE-2025-34509 | 011941 PRE contain a hardcoded user account. | HIGH 7.5EPSS 55.9% | 17 June 2025 |
| CVE-2025-34508 | A path traversal vulnerability exists in the file dropoff functionality of ZendTo versions 6.15-7 and prior. | MEDIUM 5.3EPSS 73.8% | 17 June 2025 |
| CVE-2025-5777 | Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability | KEVEXPLOITCRITICAL 9.3EPSS 100.0% | 17 June 2025 |
| CVE-2025-48988 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. | HIGH 7.5EPSS 30.4% | 16 June 2025 |
| CVE-2025-48976 | Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. | HIGH 7.5EPSS 32.9% | 16 June 2025 |
| CVE-2025-5964 | A path traversal issue in the API endpoint in M-Files Server before version 25.6.14925.0 allows an authenticated user to read files in the server. | HIGH 8.4EPSS 13.0% | 15 June 2025 |
| CVE-2025-49596 | Versions of MCP Inspector below 0.14.1 are vulnerable to remote code execution due to lack of authentication between the Inspector client and proxy, allowing unauthenticated requests to launch MCP commands over stdio. | CRITICAL 9.4EPSS 44.5% | 13 June 2025 |
| CVE-2025-45988 | Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the… | CRITICAL 9.8EPSS 10.8% | 13 June 2025 |
| CVE-2025-47959 | Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code over a network. | HIGH 7.1EPSS 10.9% | 13 June 2025 |
| CVE-2025-4278 | Under certain conditions html injection in new search page could lead to account takeover. | HIGH 8.7EPSS 10.9% | 12 June 2025 |
| CVE-2025-5301 | ONLYOFFICE Docs (DocumentServer) in versions equal and below 8.3.1 are affected by a reflected cross-site scripting (XSS) issue when opening files via the WOPI protocol. | MEDIUM 6.1EPSS 62.4% | 12 June 2025 |
| CVE-2025-5959 | Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. | HIGH 8.8EPSS 13.3% | 11 June 2025 |
| CVE-2025-47166 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | EXPLOITHIGH 8.8EPSS 21.6% | 10 June 2025 |
| CVE-2025-47163 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | HIGH 8.8EPSS 20.9% | 10 June 2025 |
| CVE-2025-33073 | Microsoft Windows SMB Client Improper Access Control Vulnerability | KEVEXPLOITHIGH 8.8EPSS 82.7% | 10 June 2025 |
| CVE-2025-33071 | Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network. | HIGH 8.1EPSS 23.2% | 10 June 2025 |
| CVE-2025-33053 | Microsoft Windows External Control of File Name or Path Vulnerability | KEVHIGH 8.8EPSS 87.0% | 10 June 2025 |
| CVE-2025-30220 | GeoServer is an open source server that allows users to share and edit geospatial data. | CRITICAL 9.1EPSS 42.3% | 10 June 2025 |
| CVE-2025-27817 | A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. | HIGH 7.5EPSS 68.8% | 10 June 2025 |
| CVE-2025-5905 | A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. | HIGH 7.4EPSS 11.5% | 10 June 2025 |
| CVE-2025-5904 | A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. | HIGH 7.4EPSS 11.3% | 10 June 2025 |
| CVE-2025-5903 | A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. | HIGH 7.4EPSS 11.3% | 10 June 2025 |
| CVE-2025-49619 | Skyvern through 0.1.85 is vulnerable to server-side template injection (SSTI) in the Prompt field of workflow blocks such as the Navigation v2 Block. | EXPLOITHIGH 8.5EPSS 20.4% | 7 June 2025 |
| CVE-2025-5473 | GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability. | HIGH 8.8EPSS 23.5% | 6 June 2025 |
| CVE-2025-41646 | An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. | CRITICAL 9.8EPSS 51.3% | 6 June 2025 |
| CVE-2025-5623 | A vulnerability was found in D-Link DIR-816 1.10CNB05. | CRITICAL 9.3EPSS 19.5% | 5 June 2025 |
| CVE-2025-5573 | A vulnerability was found in D-Link DCS-932L 2.18.01. | MEDIUM 5.3EPSS 14.7% | 4 June 2025 |
| CVE-2025-5571 | A vulnerability was found in D-Link DCS-932L 2.18.01. | MEDIUM 5.3EPSS 14.7% | 4 June 2025 |
| CVE-2025-5548 | A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. | EXPLOITMEDIUM 6.9EPSS 15.9% | 4 June 2025 |
| CVE-2025-5527 | A vulnerability was found in Tenda RX3 16.03.13.11_multi_TDE01. | HIGH 8.7EPSS 12.7% | 3 June 2025 |
| CVE-2025-49002 | Versions prior to version 2.10.10 have a flaw in the patch for CVE-2025-32966 that allow the patch to be bypassed through case insensitivity because INIT and RUNSCRIPT are prohibited. | HIGH 8.2EPSS 50.4% | 3 June 2025 |
| CVE-2025-49001 | The vulnerability has been fixed in v2.10.10. | HIGH 7.7EPSS 22.0% | 3 June 2025 |
| CVE-2025-48999 | A bypass of CVE-2025-46566's patch exists in versions prior to 2.10.10. | MEDIUM 6.8EPSS 10.4% | 3 June 2025 |
| CVE-2025-44148 | Cross Site Scripting (XSS) vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx component | CRITICAL 9.8EPSS 55.3% | 3 June 2025 |
| CVE-2025-5504 | A vulnerability has been found in TOTOLINK X2000R 1.0.0-B20230726.1108 and classified as critical. | MEDIUM 5.3EPSS 14.0% | 3 June 2025 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.