Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
418,508 CVEs1,766 in CISA KEV17,508 with EPSS ≥ 10%25,055 with a public exploitUpdated 3 November 2026
17,508 results · page 18 of 351
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2025-31324 | SAP NetWeaver Unrestricted File Upload Vulnerability | KEVCRITICAL 9.8EPSS 99.5% | 24 April 2025 |
| CVE-2025-2760 | GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability. | HIGH 7.8EPSS 17.2% | 23 April 2025 |
| CVE-2025-32969 | In versions starting from 1.8 and prior to 15.10.16, 16.4.6, and 16.10.1, it is possible for a remote unauthenticated user to escape from the HQL execution context and perform a blind SQL injection to execute arbitrary SQL statements on the database… | CRITICAL 9.3EPSS 80.0% | 23 April 2025 |
| CVE-2025-2703 | The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. | MEDIUM 6.8EPSS 16.0% | 23 April 2025 |
| CVE-2025-34028 | Commvault Command Center Path Traversal Vulnerability | KEVCRITICAL 9.3EPSS 97.6% | 22 April 2025 |
| CVE-2025-3577 | **UNSUPPORTED WHEN ASSIGNED** A path traversal vulnerability in the web management interface of the Zyxel AMG1302-T10B firmware version 2.00(AAJC.16)C0 could allow an authenticated attacker with administrator privileges to access restricted directories… | MEDIUM 4.9EPSS 12.6% | 22 April 2025 |
| CVE-2025-3820 | A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644) and classified as critical. | HIGH 8.7EPSS 12.7% | 19 April 2025 |
| CVE-2025-29513 | Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code in the admin API Access token generator. | MEDIUM 6.1EPSS 42.8% | 18 April 2025 |
| CVE-2025-3785 | A vulnerability has been found in D-Link DWR-M961 1.1.36 and classified as critical. | HIGH 8.7EPSS 12.8% | 18 April 2025 |
| CVE-2025-32583 | Improper Control of Generation of Code ('Code Injection') vulnerability in termel PDF 2 Post pdf2post allows Remote Code Inclusion.This issue affects PDF 2 Post: from n/a through <= 2.4.0. | CRITICAL 9.9EPSS 20.3% | 17 April 2025 |
| CVE-2025-32433 | Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability | KEVCRITICAL 10.0EPSS 98.9% | 16 April 2025 |
| CVE-2025-31201 | Apple Multiple Products Arbitrary Read and Write Vulnerability | KEVCRITICAL 9.8EPSS 14.0% | 16 April 2025 |
| CVE-2025-31200 | Apple Multiple Products Memory Corruption Vulnerability | KEVCRITICAL 9.8EPSS 20.9% | 16 April 2025 |
| CVE-2025-22037 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in alloc_preauth_hash() The Client send malformed smb2 negotiate request. ksmbd return error response. | HIGH 7.5EPSS 68.8% | 16 April 2025 |
| CVE-2025-3663 | A vulnerability, which was classified as critical, has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513. | MEDIUM 6.9EPSS 11.3% | 16 April 2025 |
| CVE-2025-27892 | Shopware prior to version 6.5.8.13 is affected by a SQL injection vulnerability in the /api/search/order endpoint. | MEDIUM 6.8EPSS 12.9% | 15 April 2025 |
| CVE-2025-32778 | A command injection vulnerability exists in the screenshot API of the Web Check project (Lissy93/web-check). | CRITICAL 9.3EPSS 19.6% | 15 April 2025 |
| CVE-2025-28137 | The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter. | CRITICAL 9.8EPSS 34.1% | 15 April 2025 |
| CVE-2025-32103 | CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows directory traversal via the /WebInterface/function/ URI to read files accessible by SMB at UNC share pathnames, bypassing SecurityManager restrictions. | MEDIUM 5.0EPSS 18.1% | 15 April 2025 |
| CVE-2025-2563 | The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges | HIGH 8.1EPSS 49.1% | 14 April 2025 |
| CVE-2025-3538 | A vulnerability was found in D-Link DI-8100 16.07.26A1. | HIGH 8.7EPSS 13.2% | 13 April 2025 |
| CVE-2025-2636 | The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 0.1.0.85 via the 'instawp-database-manager' parameter. | HIGH 8.1EPSS 10.6% | 11 April 2025 |
| CVE-2025-3102 | The SureTriggers: All-in-One Automation Platform plugin for WordPress is vulnerable to an authentication bypass leading to administrative account creation due to a missing empty value check on the 'secret_key' value in the 'autheticate_user' function in… | HIGH 8.1EPSS 76.2% | 10 April 2025 |
| CVE-2024-58136 | Yiiframework Yii Improper Protection of Alternate Path Vulnerability | KEVCRITICAL 9.8EPSS 87.8% | 10 April 2025 |
| CVE-2025-32375 | Prior to 1.4.8, there was an insecure deserialization in BentoML's runner server. | CRITICAL 9.8EPSS 52.4% | 9 April 2025 |
| CVE-2025-30294 | ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. | MEDIUM 6.8EPSS 17.2% | 8 April 2025 |
| CVE-2025-30292 | ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. | MEDIUM 6.1EPSS 15.5% | 8 April 2025 |
| CVE-2025-30290 | ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to a security feature bypass. | HIGH 8.7EPSS 19.5% | 8 April 2025 |
| CVE-2025-30285 | ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. | HIGH 8.4EPSS 30.9% | 8 April 2025 |
| CVE-2025-30281 | ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code execution. | CRITICAL 9.1EPSS 23.6% | 8 April 2025 |
| CVE-2025-29824 | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability | KEVHIGH 7.8EPSS 19.3% | 8 April 2025 |
| CVE-2025-29793 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | HIGH 7.2EPSS 23.6% | 8 April 2025 |
| CVE-2025-27480 | Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. | HIGH 8.1EPSS 12.6% | 8 April 2025 |
| CVE-2025-26670 | Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. | HIGH 8.1EPSS 11.1% | 8 April 2025 |
| CVE-2024-48887 | A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin passwords via a specially crafted request | CRITICAL 9.8EPSS 15.7% | 8 April 2025 |
| CVE-2025-25254 | An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in FortiWeb version 7.6.2 and below, version 7.4.6 and below, 7.2 all versions, 7.0 all versions endpoint may allow an authenticated admin to access… | HIGH 7.2EPSS 17.1% | 8 April 2025 |
| CVE-2025-3248 | Langflow Missing Authentication Vulnerability | KEVEXPLOIT ×2CRITICAL 9.8EPSS 100.0% | 7 April 2025 |
| CVE-2025-30401 | A maliciously crafted mismatch could have caused the recipient to inadvertently execute arbitrary code rather than view the attachment when manually opening the attachment inside WhatsApp. | MEDIUM 6.7EPSS 21.0% | 5 April 2025 |
| CVE-2021-47667 | An OS command injection vulnerability in lib/NSSDropoff.php in ZendTo 5.24-3 through 6.x before 6.10-7 allows unauthenticated remote attackers to execute arbitrary commands via shell metacharacters in the tmp_name parameter when dropping off a file via… | CRITICAL 10.0EPSS 36.6% | 5 April 2025 |
| CVE-2025-27520 | A Remote Code Execution (RCE) vulnerability caused by insecure deserialization has been identified in the latest version (v1.4.2) of BentoML. | CRITICAL 9.8EPSS 40.6% | 4 April 2025 |
| CVE-2025-28146 | Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via fota_url in /boafrm/formLtefotaUpgradeQuectel | CRITICAL 9.8EPSS 11.5% | 4 April 2025 |
| CVE-2025-31161 | CrushFTP Authentication Bypass Vulnerability | KEVEXPLOITCRITICAL 9.8EPSS 100.0% | 3 April 2025 |
| CVE-2025-30406 | Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability | KEVCRITICAL 9.8EPSS 94.3% | 3 April 2025 |
| CVE-2025-31486 | The contents of arbitrary files can be returned to the browser. | MEDIUM 5.3EPSS 40.5% | 3 April 2025 |
| CVE-2025-22457 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability | KEVCRITICAL 9.8EPSS 100.0% | 3 April 2025 |
| CVE-2025-3155 | The Gnome user help application allows the help document to execute arbitrary scripts. | HIGH 7.4EPSS 13.1% | 3 April 2025 |
| CVE-2025-2945 | Remote Code Execution security vulnerability in pgAdmin 4 (Query Tool and Cloud Deployment modules). | HIGH 8.8EPSS 56.3% | 3 April 2025 |
| CVE-2025-29085 | SQL injection vulnerability in vipshop Saturn v.3.5.1 and before allows a remote attacker to execute arbitrary code via /console/dashboard/executorCount?zkClusterKey component. | CRITICAL 9.8EPSS 31.2% | 2 April 2025 |
| CVE-2025-2005 | The Front End Users plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the file uploads field of the registration form in all versions up to, and including, 3.2.32. | CRITICAL 9.8EPSS 21.8% | 2 April 2025 |
| CVE-2024-36465 | A low privilege (regular) Zabbix user with API access can use SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL commands via the groupBy parameter. | HIGH 8.6EPSS 39.9% | 2 April 2025 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.