Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
418,508 CVEs1,766 in CISA KEV17,508 with EPSS ≥ 10%25,055 with a public exploitUpdated 3 November 2026
17,508 results · page 19 of 351
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2025-31121 | Prior to 7.0.3.1, the Patient Image feature in OpenEMR is vulnerable to cross-site scripting attacks via the EXIF title in an image. | HIGH 7.0EPSS 17.3% | 1 April 2025 |
| CVE-2025-30676 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache OFBiz. | MEDIUM 6.1EPSS 67.6% | 1 April 2025 |
| CVE-2024-56325 | Authentication Bypass Issue If the path does not contain / and contain., authentication is not required. | CRITICAL 9.8EPSS 80.2% | 1 April 2025 |
| CVE-2025-30065 | Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code Users are recommended to upgrade to version 1.15.1, which fixes the issue. | CRITICAL 10.0EPSS 43.6% | 1 April 2025 |
| CVE-2025-31125 | Vite Vitejs Improper Access Control Vulnerability | KEVHIGH 7.5EPSS 74.9% | 31 March 2025 |
| CVE-2025-3002 | A vulnerability, which was classified as critical, has been found in Digital China DCME-520 up to 20250320. | MEDIUM 6.9EPSS 20.0% | 31 March 2025 |
| CVE-2025-30161 | A stored XSS vulnerability in the Bronchitis form component of OpenEMR allows anyone who is able to edit a bronchitis form to steal credentials from administrators. | HIGH 8.4EPSS 10.9% | 31 March 2025 |
| CVE-2025-2993 | A vulnerability, which was classified as critical, has been found in Tenda FH1202 1.2.0.14(408). | MEDIUM 6.9EPSS 10.9% | 31 March 2025 |
| CVE-2025-25579 | TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command Injection in /bin/boa via bandstr. | CRITICAL 9.8EPSS 10.4% | 28 March 2025 |
| CVE-2025-28219 | Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usb_adv.cgi, which allows remote attackers to execute arbitrary commands via parameter "deviceName" passed to the binary through a POST request. | CRITICAL 9.8EPSS 12.8% | 28 March 2025 |
| CVE-2025-2294 | The Kubio AI Page Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.1 via thekubio_hybrid_theme_load_template function. | EXPLOITCRITICAL 9.8EPSS 78.4% | 28 March 2025 |
| CVE-2025-29306 | An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component. | EXPLOITCRITICAL 9.8EPSS 47.2% | 27 March 2025 |
| CVE-2025-31140 | In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page | MEDIUM 6.1EPSS 28.0% | 27 March 2025 |
| CVE-2025-20229 | In Splunk Enterprise versions below 9.3.3, 9.2.5, and 9.1.8, and Splunk Cloud Platform versions below 9.3.2408.104, 9.2.2406.108, 9.2.2403.114, and 9.1.2312.208, a low-privileged user that does not hold the "admin" or "power" Splunk roles could perform… | HIGH 8.0EPSS 16.0% | 26 March 2025 |
| CVE-2024-55963 | This is still within the Appsmith container, and the impact is limited to Appsmith's own server only, but there is a denial of service because it can be continually restarted. | EXPLOITMEDIUM 6.5EPSS 32.9% | 26 March 2025 |
| CVE-2025-29635 | D-Link DIR-823X Command Injection Vulnerability | KEVHIGH 7.2EPSS 87.9% | 25 March 2025 |
| CVE-2025-24514 | A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingress annotation can be used to inject configuration into nginx. | EXPLOITHIGH 8.8EPSS 37.3% | 25 March 2025 |
| CVE-2025-1974 | A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. | EXPLOIT ×2 ✓CRITICAL 9.8EPSS 99.4% | 25 March 2025 |
| CVE-2025-1098 | A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `mirror-target` and `mirror-host` Ingress annotations can be used to inject arbitrary configuration into nginx. | EXPLOITHIGH 8.8EPSS 86.1% | 25 March 2025 |
| CVE-2025-1097 | A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-cn` Ingress annotation can be used to inject configuration into nginx. | EXPLOITHIGH 8.8EPSS 37.0% | 25 March 2025 |
| CVE-2025-2748 | The Kentico Xperience application does not fully validate or filter files uploaded via the multiple-file upload functionality, which allows for stored XSS.This issue affects Kentico Xperience through 13.0.178. | MEDIUM 6.1EPSS 60.6% | 24 March 2025 |
| CVE-2025-2747 | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability | KEVCRITICAL 9.8EPSS 97.2% | 24 March 2025 |
| CVE-2025-2746 | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability | KEVCRITICAL 9.8EPSS 74.1% | 24 March 2025 |
| CVE-2025-30208 | Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10. `@fs` denies access to files outside of Vite serving allow list. | EXPLOITHIGH 7.5EPSS 74.8% | 24 March 2025 |
| CVE-2023-25610 | A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0… | CRITICAL 9.8EPSS 18.3% | 24 March 2025 |
| CVE-2025-30349 | Horde IMP through 6.2.27, as used with Horde Application Framework through 5.2.23, allows XSS that leads to account takeover via a crafted text/html e-mail message with an onerror attribute (that may use base64-encoded JavaScript code), as exploited in… | HIGH 7.2EPSS 31.3% | 21 March 2025 |
| CVE-2025-29927 | Starting in version 1.11.4 and prior to versions 12.3.5, 13.5.9, 14.2.25, and 15.2.3, it is possible to bypass authorization checks within a Next.js application, if the authorization check occurs in middleware. | EXPLOITCRITICAL 9.1EPSS 99.2% | 21 March 2025 |
| CVE-2025-23120 | A vulnerability allowing remote code execution (RCE) for domain users. | HIGH 8.8EPSS 24.0% | 20 March 2025 |
| CVE-2025-2546 | A vulnerability classified as problematic was found in D-Link DIR-618 and DIR-605L 2.02/3.02. | MEDIUM 5.3EPSS 10.8% | 20 March 2025 |
| CVE-2025-0453 | In mlflow/mlflow version 2.17.2, the `/graphql` endpoint is vulnerable to a denial of service attack. | HIGH 7.5EPSS 11.3% | 20 March 2025 |
| CVE-2025-0317 | A vulnerability in ollama/ollama versions <=0.3.14 allows a malicious user to upload and create a customized GGUF model file on the Ollama server. | HIGH 7.5EPSS 14.5% | 20 March 2025 |
| CVE-2024-6842 | In version 1.5.5 of mintplex-labs/anything-llm, the `/setup-complete` API endpoint allows unauthorized users to access sensitive system settings. | HIGH 7.5EPSS 36.3% | 20 March 2025 |
| CVE-2024-4990 | In yiisoft/yii2 version 2.0.48, the base Component class contains a vulnerability where the `__set()` magic method does not validate that the value passed is a valid Behavior class name or configuration. | CRITICAL 9.1EPSS 80.1% | 20 March 2025 |
| CVE-2024-50631 | Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in the system syncing daemon in Synology Drive Server before 3.0.4-12699, 3.2.1-23280, 3.5.0-26085 and 3.5.1-26102 allows remote attackers to inject SQL… | HIGH 7.5EPSS 26.8% | 19 March 2025 |
| CVE-2024-50630 | Missing authentication for critical function vulnerability in the webapi component in Synology Drive Server before 3.0.4-12699, 3.2.1-23280, 3.5.0-26085 and 3.5.1-26102 allows remote attackers to obtain administrator credentials via unspecified vectors. | HIGH 7.5EPSS 24.6% | 19 March 2025 |
| CVE-2024-50629 | Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allow remote… | MEDIUM 5.3EPSS 31.9% | 19 March 2025 |
| CVE-2025-24801 | An authenticated user can upload and force the execution of *.php files located on the GLPI server. | HIGH 8.8EPSS 21.1% | 18 March 2025 |
| CVE-2025-24799 | An unauthenticated user can perform a SQL injection through the inventory endpoint. | CRITICAL 9.8EPSS 86.8% | 18 March 2025 |
| CVE-2025-2449 | NI FlexLogger usiReg URI File Parsing Directory Traversal Remote Code Execution Vulnerability. | HIGH 8.8EPSS 33.7% | 18 March 2025 |
| CVE-2024-12971 | Improper Neutralization of Special Elements used in a Command vulnerability allows OS Command Injection.This issue affects Pandora FMS from 700 to 777.6 | HIGH 8.6EPSS 61.5% | 17 March 2025 |
| CVE-2025-2359 | A vulnerability classified as critical has been found in D-Link DIR-823G 1.0.2B05_20181207. | MEDIUM 6.9EPSS 15.4% | 17 March 2025 |
| CVE-2025-30066 | tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability | KEVHIGH 8.6EPSS 72.1% | 15 March 2025 |
| CVE-2025-29775 | An attacker may be able to exploit a vulnerability in versions prior to 6.0.1, 3.2.1, and 2.1.6 to bypass authentication or authorization mechanisms in systems that rely on xml-crypto for verifying signed XML documents. | CRITICAL 9.3EPSS 10.1% | 14 March 2025 |
| CVE-2023-33300 | A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiNAC 7.2.1 and earlier, 9.4.3 and earlier allows attacker a limited, unauthorized file access via specifically crafted request in inter-server… | MEDIUM 5.3EPSS 14.1% | 14 March 2025 |
| CVE-2025-2264 | A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Server.exe". | HIGH 7.5EPSS 35.4% | 13 March 2025 |
| CVE-2025-25292 | An authentication bypass vulnerability was found in ruby-saml prior to versions 1.12.4 and 1.18.0 due to a parser differential. | CRITICAL 9.3EPSS 65.1% | 12 March 2025 |
| CVE-2025-25291 | An authentication bypass vulnerability was found in ruby-saml prior to versions 1.12.4 and 1.18.0 due to a parser differential. | CRITICAL 9.3EPSS 21.0% | 12 March 2025 |
| CVE-2025-29891 | Bypass/Injection vulnerability in Apache Camel. | MEDIUM 4.8EPSS 76.1% | 12 March 2025 |
| CVE-2025-22954 | GetLateOrMissingIssues in C4/Serials.pm in Koha before 24.11.02 allows SQL Injection in /serials/lateissues-export.pl via the supplierid or serialid parameter. | CRITICAL 10.0EPSS 25.6% | 12 March 2025 |
| CVE-2025-26633 | Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability | KEVEXPLOITHIGH 7.0EPSS 30.4% | 11 March 2025 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.