Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
418,608 CVEs1,766 in CISA KEV17,508 with EPSS ≥ 10%25,055 with a public exploitUpdated 3 November 2026
17,508 results · page 21 of 351
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2025-0994 | Trimble Cityworks Deserialization Vulnerability | KEVHIGH 8.6EPSS 31.3% | 6 February 2025 |
| CVE-2025-20125 | A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker with valid read-only credentials to obtain sensitive information, change node configurations, and restart the node. | EXPLOITHIGH 7.2EPSS 16.4% | 5 February 2025 |
| CVE-2025-20124 | A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands as the root user on an affected device. | EXPLOITHIGH 7.2EPSS 18.5% | 5 February 2025 |
| CVE-2024-2878 | It was possible for an attacker to cause a denial of service by crafting unusual search terms for branch names. | HIGH 7.5EPSS 19.7% | 5 February 2025 |
| CVE-2025-1025 | Versions of the package cockpit-hq/cockpit before 2.4.1 are vulnerable to Arbitrary File Upload where an attacker can use different extension to bypass the upload filter. | HIGH 7.7EPSS 18.9% | 5 February 2025 |
| CVE-2025-0890 | **UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an attacker to log in to the management interface if the administrators have… | CRITICAL 9.8EPSS 14.4% | 4 February 2025 |
| CVE-2024-40891 | Zyxel DSL CPE OS Command Injection Vulnerability | KEVHIGH 8.8EPSS 22.9% | 4 February 2025 |
| CVE-2024-40890 | Zyxel DSL CPE OS Command Injection Vulnerability | KEVHIGH 8.8EPSS 20.7% | 4 February 2025 |
| CVE-2024-56902 | Information disclosure vulnerability in Geovision GV-ASManager web application with the version v6.1.0.0 or less, which discloses account information, including cleartext password. | EXPLOITHIGH 7.5EPSS 23.4% | 3 February 2025 |
| CVE-2023-52163 | Digiever DS-2105 Pro Missing Authorization Vulnerability | KEVHIGH 8.8EPSS 96.9% | 3 February 2025 |
| CVE-2025-25181 | Advantive VeraCore SQL Injection Vulnerability | KEVHIGH 7.5EPSS 55.5% | 3 February 2025 |
| CVE-2025-25064 | SQL injection vulnerability in the ZimbraSync Service SOAP endpoint in Zimbra Collaboration 10.0.x before 10.0.12 and 10.1.x before 10.1.4 due to insufficient sanitization of a user-supplied parameter. | HIGH 8.8EPSS 36.7% | 3 February 2025 |
| CVE-2024-57968 | Advantive VeraCore Unrestricted File Upload Vulnerability | KEVHIGH 8.8EPSS 32.3% | 3 February 2025 |
| CVE-2024-57004 | Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail 1.6.9 allows remote authenticated users to upload a malicious file as an email attachment, leading to the triggering of the XSS by visiting the SENT session. | MEDIUM 6.1EPSS 39.7% | 3 February 2025 |
| CVE-2024-53942 | The /cgi-bin/luci/nradio/basic/radio endpoint is vulnerable to command injection via the 2.4 GHz and 5 GHz name parameters, allowing a remote attacker to execute arbitrary OS commands on the device (with root-level permissions) via crafted input. | MEDIUM 4.8EPSS 15.0% | 3 February 2025 |
| CVE-2024-52875 | This can be exploited to perform Open Redirect or HTTP Response Splitting attacks, which in turn lead to Reflected Cross-Site Scripting (XSS). | HIGH 8.8EPSS 29.6% | 31 January 2025 |
| CVE-2024-55417 | DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. | MEDIUM 4.3EPSS 14.1% | 30 January 2025 |
| CVE-2024-55416 | DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. | LOW 3.5EPSS 20.5% | 30 January 2025 |
| CVE-2024-55415 | DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass. | MEDIUM 5.7EPSS 15.7% | 30 January 2025 |
| CVE-2025-0851 | A path traversal issue in ZipUtils.unzip and TarUtils.untar in Deep Java Library (DJL) on all platforms allows a bad actor to write files to arbitrary locations. | CRITICAL 9.3EPSS 23.3% | 29 January 2025 |
| CVE-2024-12705 | Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. | HIGH 7.5EPSS 18.2% | 29 January 2025 |
| CVE-2024-11187 | An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. | HIGH 7.5EPSS 15.7% | 29 January 2025 |
| CVE-2025-24085 | Apple Multiple Products Use-After-Free Vulnerability | KEVEXPLOITCRITICAL 10.0EPSS 17.5% | 27 January 2025 |
| CVE-2025-24367 | An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. | HIGH 8.7EPSS 54.3% | 27 January 2025 |
| CVE-2024-54146 | Cacti has a SQL injection vulnerability in the template function of host_templates.php using the graph_template parameter. | HIGH 8.8EPSS 46.1% | 27 January 2025 |
| CVE-2024-52012 | Relative Path Traversal vulnerability in Apache Solr. | MEDIUM 5.4EPSS 41.2% | 27 January 2025 |
| CVE-2025-0411 | 7-Zip Mark of the Web Bypass Vulnerability | KEVHIGH 7.0EPSS 47.6% | 25 January 2025 |
| CVE-2024-57041 | A persistent cross-site scripting (XSS) vulnerability in NodeBB v3.11.0 allows remote attackers to store arbitrary code in the 'about me' section of their profile. | MEDIUM 4.6EPSS 40.1% | 24 January 2025 |
| CVE-2025-24587 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nks Email Subscription Popup email-subscribe allows Blind SQL Injection.This issue affects Email Subscription Popup: from n/a through <= 1.2.23. | HIGH 7.6EPSS 33.3% | 24 January 2025 |
| CVE-2025-23006 | SonicWall SMA1000 Appliances Deserialization Vulnerability | KEVCRITICAL 9.8EPSS 26.6% | 23 January 2025 |
| CVE-2024-54794 | The script input feature of SpagoBI 3.5.1 allows arbitrary code execution. | CRITICAL 9.1EPSS 13.2% | 21 January 2025 |
| CVE-2024-51818 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in radykal Fancy Product Designer fancy-product-designer.This issue affects Fancy Product Designer: from n/a through <= 6.4.3. | CRITICAL 9.3EPSS 16.2% | 21 January 2025 |
| CVE-2025-23209 | Craft CMS Code Injection Vulnerability | KEVHIGH 8.1EPSS 21.6% | 18 January 2025 |
| CVE-2025-23200 | Affected versions are subject to a stored XSS on the parameter: `ajax_form.php` -> param: state. | MEDIUM 5.4EPSS 31.6% | 16 January 2025 |
| CVE-2024-57684 | An access control issue in the component formDMZ.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the DMZ service of the device via a crafted POST request. | CRITICAL 9.8EPSS 14.8% | 16 January 2025 |
| CVE-2024-57728 | SimpleHelp Path Traversal Vulnerability | KEVHIGH 7.2EPSS 64.5% | 15 January 2025 |
| CVE-2024-57727 | SimpleHelp Path Traversal Vulnerability | KEVHIGH 7.5EPSS 96.8% | 15 January 2025 |
| CVE-2024-57726 | SimpleHelp Missing Authorization Vulnerability | KEVCRITICAL 9.9EPSS 66.4% | 15 January 2025 |
| CVE-2024-47002 | A html code injection vulnerability exists in the vlan management part of Observium CE 24.4.13528. | MEDIUM 5.4EPSS 15.6% | 15 January 2025 |
| CVE-2024-12084 | A heap-based buffer overflow flaw was found in the rsync daemon. | CRITICAL 9.8EPSS 72.5% | 15 January 2025 |
| CVE-2024-48760 | An issue in GestioIP v3.5.7 allows a remote attacker to execute arbitrary code via the file upload function. | EXPLOITCRITICAL 9.8EPSS 45.8% | 14 January 2025 |
| CVE-2025-21333 | Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability | KEVEXPLOITHIGH 7.8EPSS 10.1% | 14 January 2025 |
| CVE-2025-21309 | Windows Remote Desktop Services Remote Code Execution Vulnerability | HIGH 8.1EPSS 15.1% | 14 January 2025 |
| CVE-2025-21298 | Windows OLE Remote Code Execution Vulnerability | CRITICAL 9.8EPSS 74.4% | 14 January 2025 |
| CVE-2025-21293 | Active Directory Domain Services Elevation of Privilege Vulnerability | HIGH 8.8EPSS 15.0% | 14 January 2025 |
| CVE-2025-21285 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability | HIGH 7.5EPSS 56.2% | 14 January 2025 |
| CVE-2025-21277 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability | HIGH 7.5EPSS 39.1% | 14 January 2025 |
| CVE-2024-13171 | Insufficient filename validation in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. | HIGH 7.8EPSS 17.5% | 14 January 2025 |
| CVE-2024-13162 | SQL injection in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution. | HIGH 7.2EPSS 65.0% | 14 January 2025 |
| CVE-2024-13161 | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | KEVHIGH 7.5EPSS 89.8% | 14 January 2025 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.