Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
418,443 CVEs1,766 in CISA KEV17,508 with EPSS ≥ 10%25,055 with a public exploitUpdated 3 November 2026
17,508 results · page 16 of 351
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2025-5086 | Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability | KEVCRITICAL 9.0EPSS 97.0% | 2 June 2025 |
| CVE-2025-20297 | In Splunk Enterprise versions below 9.4.2, 9.3.4 and 9.2.6, and Splunk Cloud Platform versions below 9.3.2411.102, 9.3.2408.111 and 9.2.2406.118, a low-privileged user that does not hold the "admin" or "power" Splunk roles could craft a malicious… | MEDIUM 5.4EPSS 31.2% | 2 June 2025 |
| CVE-2024-7074 | An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper validation of user input in SOAP admin services. | MEDIUM 6.8EPSS 17.7% | 2 June 2025 |
| CVE-2025-5447 | A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. | MEDIUM 5.3EPSS 30.5% | 2 June 2025 |
| CVE-2025-5446 | A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. | MEDIUM 5.3EPSS 13.7% | 2 June 2025 |
| CVE-2025-5445 | A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001 and classified as critical. | MEDIUM 5.3EPSS 13.6% | 2 June 2025 |
| CVE-2025-5444 | A vulnerability has been found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001 and classified as critical. | MEDIUM 5.3EPSS 13.6% | 2 June 2025 |
| CVE-2025-5443 | A vulnerability, which was classified as critical, was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. | MEDIUM 5.3EPSS 13.6% | 2 June 2025 |
| CVE-2025-5442 | A vulnerability, which was classified as critical, has been found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. | MEDIUM 5.3EPSS 13.7% | 2 June 2025 |
| CVE-2025-5441 | A vulnerability classified as critical was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. | MEDIUM 5.3EPSS 13.7% | 2 June 2025 |
| CVE-2025-5438 | A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. | MEDIUM 5.3EPSS 24.5% | 2 June 2025 |
| CVE-2025-49113 | RoundCube Webmail Deserialization of Untrusted Data Vulnerability | KEVEXPLOITHIGH 8.8EPSS 99.5% | 2 June 2025 |
| CVE-2025-48047 | An authenticated user can perform command injection via unsanitized input to the NetFax Server’s ping functionality via the /test.php endpoint. | CRITICAL 9.4EPSS 16.4% | 29 May 2025 |
| CVE-2025-48927 | TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability | KEVMEDIUM 5.3EPSS 11.6% | 28 May 2025 |
| CVE-2025-4009 | This device exposes a web management interface on port 80. | CRITICAL 9.3EPSS 72.9% | 28 May 2025 |
| CVE-2025-48828 | Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the template engine. | HIGH 8.1EPSS 57.3% | 27 May 2025 |
| CVE-2025-48827 | vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers' methods when running on PHP 8.1 or later, as demonstrated by the /api.php?method=protectedMethod pattern, as exploited in the wild in… | CRITICAL 9.8EPSS 75.6% | 27 May 2025 |
| CVE-2025-43860 | A stored cross-site scripting (XSS) vulnerability in versions prior to 7.0.3.4 allows any authenticated user with patient creation and editing privileges to inject arbitrary JavaScript code into the system by entering malicious payloads in the (1) Text… | HIGH 7.6EPSS 15.0% | 23 May 2025 |
| CVE-2025-32794 | A stored cross-site scripting (XSS) vulnerability in versions prior to 7.0.3.4 allows any authenticated user with patient creation privileges to inject arbitrary JavaScript code into the system by entering malicious payloads in the First and Last Name… | HIGH 7.6EPSS 10.5% | 23 May 2025 |
| CVE-2025-47646 | Weak Password Recovery Mechanism for Forgotten Password vulnerability in Gilblas Ngunte Possi PSW Front-end Login & Registration psw-login-and-registration allows Password Recovery Exploitation.This issue affects PSW Front-end Login & Registration: from… | CRITICAL 9.8EPSS 24.7% | 23 May 2025 |
| CVE-2025-47539 | Incorrect Privilege Assignment vulnerability in Arraytics Eventin wp-event-solution allows Privilege Escalation.This issue affects Eventin: from n/a through <= 4.0.26. | CRITICAL 9.8EPSS 25.4% | 23 May 2025 |
| CVE-2025-36527 | Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports. | HIGH 8.3EPSS 42.0% | 23 May 2025 |
| CVE-2024-52874 | In Infoblox NETMRI before 7.6.1, authenticated users can perform SQL injection attacks. | HIGH 8.8EPSS 11.9% | 22 May 2025 |
| CVE-2025-32815 | Authentication Bypass via a Hardcoded credential can occur. | MEDIUM 6.5EPSS 40.8% | 22 May 2025 |
| CVE-2025-32814 | Unauthenticated SQL Injection can occur. | CRITICAL 9.8EPSS 37.4% | 22 May 2025 |
| CVE-2025-32813 | Remote Unauthenticated Command Injection can occur. | HIGH 7.2EPSS 45.0% | 22 May 2025 |
| CVE-2024-54188 | Infoblox NETMRI before 7.6.1 has a vulnerability allowing remote authenticated users to read arbitrary files with root access. | MEDIUM 5.3EPSS 10.5% | 22 May 2025 |
| CVE-2025-3943 | Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection. | HIGH 7.5EPSS 11.4% | 22 May 2025 |
| CVE-2025-4123 | A cross-site scripting (XSS) vulnerability exists in Grafana caused by combining a client path traversal and open redirect. | EXPLOITMEDIUM 6.1EPSS 97.1% | 22 May 2025 |
| CVE-2025-34027 | The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. | CRITICAL 10.0EPSS 46.4% | 21 May 2025 |
| CVE-2025-34026 | Versa Concerto Improper Authentication Vulnerability | KEVCRITICAL 9.2EPSS 81.8% | 21 May 2025 |
| CVE-2025-4008 | Smartbedded Meteobridge Command Injection Vulnerability | KEVHIGH 8.7EPSS 93.3% | 21 May 2025 |
| CVE-2025-40775 | When an incoming DNS protocol message includes a Transaction Signature (TSIG), BIND always checks it. | HIGH 7.5EPSS 15.3% | 21 May 2025 |
| CVE-2025-4524 | The Madara – Responsive and modern WordPress theme for manga sites theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.2.2 via the 'template' parameter. | EXPLOITCRITICAL 9.8EPSS 10.6% | 21 May 2025 |
| CVE-2025-4094 | The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin before 8.4.6.1 does not rate limit OTP validation attempts, making it straightforward for attackers to bruteforce them. | EXPLOITCRITICAL 9.8EPSS 16.6% | 21 May 2025 |
| CVE-2025-44084 | D-link DI-8100 16.07.26A1 is vulnerable to Command Injection. | CRITICAL 9.8EPSS 22.6% | 20 May 2025 |
| CVE-2025-37924 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in kerberos authentication Setting sess->user = NULL was introduced to fix the dangling pointer created by ksmbd_free_user. | HIGH 7.8EPSS 24.5% | 20 May 2025 |
| CVE-2025-26086 | An unauthenticated blind SQL injection vulnerability exists in RSI Queue Management System v3.0 within the TaskID parameter of the get request handler. | HIGH 7.5EPSS 15.4% | 20 May 2025 |
| CVE-2025-4978 | A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA. | CRITICAL 9.3EPSS 21.6% | 20 May 2025 |
| CVE-2025-4322 | The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. | CRITICAL 9.8EPSS 15.3% | 20 May 2025 |
| CVE-2025-4902 | A vulnerability, which was classified as problematic, has been found in D-Link DI-7003GV2 24.04.18D1 R(68125). | MEDIUM 6.9EPSS 14.9% | 19 May 2025 |
| CVE-2025-4901 | A vulnerability classified as problematic was found in D-Link DI-7003GV2 24.04.18D1 R(68125). | MEDIUM 5.3EPSS 78.9% | 19 May 2025 |
| CVE-2025-47931 | LibreNMS v25.4.0 and prior suffers from a Stored Cross-Site Scripting (XSS) Vulnerability in the `group name` parameter of the `http://localhost/poller/groups` form. | LOW 2.1EPSS 10.1% | 17 May 2025 |
| CVE-2025-47916 | Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php. | EXPLOITCRITICAL 9.8EPSS 84.3% | 16 May 2025 |
| CVE-2025-0133 | A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect™ gateway and portal features of Palo Alto Networks PAN-OS® software enables execution of malicious JavaScript in the context of an authenticated Captive Portal user's browser when… | LOW 2.7EPSS 46.3% | 14 May 2025 |
| CVE-2025-3600 | In Progress® Telerik® UI for AJAX, versions 2011.2.712 to 2025.1.218, an unsafe reflection vulnerability exists that may lead to an unhandled exception resulting in a crash of the hosting process and denial of service. | HIGH 7.5EPSS 26.3% | 14 May 2025 |
| CVE-2024-54780 | Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds are vulnerable to command injection in the OpenVPN widget due to improper sanitization of user-supplied input to the OpenVPN management interface. | HIGH 8.8EPSS 12.7% | 14 May 2025 |
| CVE-2025-3833 | Zohocorp ManageEngine ADSelfService Plus versions 6513 and prior are vulnerable to authenticated SQL injection in the MFA reports. | HIGH 8.1EPSS 50.5% | 14 May 2025 |
| CVE-2025-43566 | ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. | MEDIUM 6.8EPSS 58.2% | 13 May 2025 |
| CVE-2025-43565 | ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Incorrect Authorization vulnerability that could lead to arbitrary code execution in the context of the current user. | HIGH 8.4EPSS 18.4% | 13 May 2025 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.