Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
419,343 CVEs1,768 in CISA KEV17,514 with EPSS ≥ 10%25,055 with a public exploitUpdated 5 November 2026
17,514 results · page 162 of 351
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2018-0825 | StructuredQuery in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a remote code execution… | HIGH 7.5EPSS 16.5% | 15 February 2018 |
| CVE-2018-2393 | Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server (IGS) to become unavailable. | HIGH 7.5EPSS 15.5% | 14 February 2018 |
| CVE-2018-2392 | Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server (IGS) to become unavailable. | HIGH 7.5EPSS 41.1% | 14 February 2018 |
| CVE-2018-6910 | DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/inc_archives_functions.php. | HIGH 7.5EPSS 18.8% | 13 February 2018 |
| CVE-2017-15709 | When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel version) are exposed as plain text. | LOW 3.7EPSS 22.8% | 13 February 2018 |
| CVE-2018-6911 | The VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers to execute arbitrary OS commands via a single argument (aka the command parameter). | EXPLOITCRITICAL 9.8EPSS 12.8% | 13 February 2018 |
| CVE-2018-1297 | This could allow an attacker to get Access to JMeterEngine and send unauthorized code. | CRITICAL 9.8EPSS 11.5% | 13 February 2018 |
| CVE-2018-6892 | An unauthenticated remote attacker that can connect to the "CloudMe Sync" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition. | EXPLOIT ×4 ✓CRITICAL 9.8EPSS 93.4% | 11 February 2018 |
| CVE-2018-1000049 | Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner API. | EXPLOIT ×2 ✓HIGH 7.5EPSS 76.9% | 9 February 2018 |
| CVE-2018-1000035 | A heap-based buffer overflow exists in Info-Zip UnZip version <= 6.00 in the processing of password-protected archives that allows an attacker to perform a denial of service or to possibly achieve code execution. | HIGH 7.8EPSS 30.1% | 9 February 2018 |
| CVE-2018-1000027 | The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in HTTP Response X-Forwarded-For header processing that can result in Denial of Service to all clients of the proxy. | HIGH 7.5EPSS 12.9% | 9 February 2018 |
| CVE-2018-3607 | XXXTreeNode method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations. | HIGH 8.8EPSS 14.4% | 9 February 2018 |
| CVE-2018-3606 | XXXStatusXXX, XXXSummary, TemplateXXX and XXXCompliance method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations. | HIGH 8.8EPSS 49.2% | 9 February 2018 |
| CVE-2018-3605 | TopXXX, ViolationXXX, and IncidentXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations. | HIGH 8.8EPSS 19.9% | 9 February 2018 |
| CVE-2018-3604 | GetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations. | HIGH 8.8EPSS 67.8% | 9 February 2018 |
| CVE-2018-6871 | LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function. | EXPLOITCRITICAL 9.8EPSS 22.8% | 9 February 2018 |
| CVE-2018-6789 | Exim Buffer Overflow Vulnerability | KEVEXPLOIT ×2CRITICAL 9.8EPSS 82.1% | 8 February 2018 |
| CVE-2018-5550 | Versions of Epson AirPrint released prior to January 19, 2018 contain a reflective cross-site scripting (XSS) vulnerability, which can allow untrusted users on the network to hijack a session cookie or perform other reflected XSS attacks on a currently… | MEDIUM 6.1EPSS 36.9% | 8 February 2018 |
| CVE-2018-1163 | This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Quest NetVault Backup 11.2.0.13. | CRITICAL 9.8EPSS 16.0% | 8 February 2018 |
| CVE-2018-1161 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13. | CRITICAL 9.8EPSS 66.7% | 8 February 2018 |
| CVE-2017-17420 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. | CRITICAL 9.8EPSS 48.2% | 8 February 2018 |
| CVE-2018-0127 | A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to view configuration parameters for an affected device, which could lead… | CRITICAL 9.8EPSS 77.7% | 8 February 2018 |
| CVE-2018-0125 | Cisco VPN Routers Remote Code Execution Vulnerability | KEVCRITICAL 9.8EPSS 55.2% | 8 February 2018 |
| CVE-2018-6794 | Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c. | EXPLOITMEDIUM 5.3EPSS 23.7% | 7 February 2018 |
| CVE-2018-4878 | Adobe Flash Player Use-After-Free Vulnerability | KEVEXPLOIT ×3HIGH 7.8EPSS 90.3% | 6 February 2018 |
| CVE-2018-6389 | In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registered .js files (from wp-includes/script-loader.php) to construct a series of requests to load every file many… | EXPLOITHIGH 7.5EPSS 72.7% | 6 February 2018 |
| CVE-2017-7525 | A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the… | CRITICAL 9.8EPSS 37.7% | 6 February 2018 |
| CVE-2018-6605 | SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request. | EXPLOITCRITICAL 9.8EPSS 57.7% | 5 February 2018 |
| CVE-2017-9414 | Cross-site request forgery (CSRF) vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote attackers to hijack the authentication of unspecified victims for requests that conduct cross-site scripting (XSS) attacks or possibly… | EXPLOIT ✓HIGH 8.8EPSS 15.4% | 5 February 2018 |
| CVE-2018-6317 | The remote management interface in Claymore Dual Miner 10.5 and earlier is vulnerable to an unauthenticated format string vulnerability, allowing remote attackers to read memory or cause a denial of service. | EXPLOITCRITICAL 9.1EPSS 43.7% | 2 February 2018 |
| CVE-2018-6580 | Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! via a view=upload&task=upload&pop=true&tmpl=component request. | EXPLOITCRITICAL 9.8EPSS 36.3% | 2 February 2018 |
| CVE-2018-5701 | In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, the amp.sys driver file contains an Arbitrary Write vulnerability due to not validating input values from IOCtl 0x00226003. | EXPLOIT ×2CRITICAL 9.8EPSS 18.5% | 31 January 2018 |
| CVE-2014-1632 | htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter. | EXPLOIT ✓HIGH 8.1EPSS 10.5% | 31 January 2018 |
| CVE-2018-6460 | User controlled input is not sufficiently filtered: an unauthenticated attacker can send a POST request to /status.js with the parameter func=$_APPLOG.Rfunc and extract sensitive information about the machine, including whether the user is connected to… | EXPLOITHIGH 7.5EPSS 11.0% | 31 January 2018 |
| CVE-2018-1000001 | In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution. | EXPLOIT ×2 ✓HIGH 7.8EPSS 13.4% | 31 January 2018 |
| CVE-2018-6407 | An unauthenticated attacker can crash a device by sending a POST request with a huge body size to /hy-cgi/devices.cgi?cmd=searchlandevice. | HIGH 7.5EPSS 32.3% | 30 January 2018 |
| CVE-2016-6599 | 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service (ConfigurationService) on port 9010. | EXPLOITCRITICAL 9.8EPSS 12.3% | 30 January 2018 |
| CVE-2016-6598 | 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service (FileStorageService) on port 9010. | EXPLOITCRITICAL 9.8EPSS 19.2% | 30 January 2018 |
| CVE-2018-6377 | In Joomla! before 3.8.4, inadequate input filtering in com_fields leads to an XSS vulnerability in multiple field types, i.e., list, radio, and checkbox | MEDIUM 6.1EPSS 56.5% | 30 January 2018 |
| CVE-2018-6397 | Directory Traversal exists in the Picture Calendar 3.1.4 component for Joomla! via the list.php folder parameter. | EXPLOITHIGH 7.5EPSS 11.9% | 30 January 2018 |
| CVE-2018-0101 | A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. | EXPLOITCRITICAL 10.0EPSS 86.8% | 29 January 2018 |
| CVE-2018-6383 | Monstra CMS through 3.0.4 has an incomplete "forbidden types" list that excludes .php (and similar) file extensions but not the .pht or .phar extension, which allows remote authenticated Admins or Editors to execute arbitrary PHP code by uploading a… | EXPLOITHIGH 8.8EPSS 13.5% | 29 January 2018 |
| CVE-2017-12626 | Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: 1) Infinite Loops while parsing crafted WMF, EMF, MSG and macros (POI bugs 61338 and 61294), and 2) Out of Memory Exceptions while parsing crafted DOC, PPT and XLS… | HIGH 7.5EPSS 10.1% | 29 January 2018 |
| CVE-2017-1000353 | Jenkins Remote Code Execution Vulnerability | KEVEXPLOITCRITICAL 9.8EPSS 99.7% | 29 January 2018 |
| CVE-2018-6008 | Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the download_file parameter. | EXPLOITHIGH 7.5EPSS 36.8% | 29 January 2018 |
| CVE-2017-17976 | In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution. | EXPLOITCRITICAL 9.8EPSS 12.5% | 26 January 2018 |
| CVE-2017-12379 | ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or potentially execute arbitrary code on an affected device. | CRITICAL 9.8EPSS 12.5% | 26 January 2018 |
| CVE-2017-12377 | ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or potentially execute arbitrary code on an affected device. | CRITICAL 9.8EPSS 11.6% | 26 January 2018 |
| CVE-2018-5997 | Due to an unrestricted upload feature and a path traversal vulnerability, it is possible to upload a file on a filesystem with root privileges: this will lead to remote code execution as root. | EXPLOITCRITICAL 9.8EPSS 23.5% | 25 January 2018 |
| CVE-2018-5973 | SQL Injection exists in Professional Local Directory Script 1.0 via the sellers_subcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter. | EXPLOITCRITICAL 9.8EPSS 20.1% | 25 January 2018 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.