Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
419,334 CVEs1,768 in CISA KEV17,511 with EPSS ≥ 10%25,055 with a public exploitUpdated 5 November 2026
17,511 results · page 80 of 351
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2021-43857 | Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue is patched in version 0.9.8. | EXPLOITHIGH 8.8EPSS 55.6% | 27 December 2021 |
| CVE-2021-45232 | In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework `droplet` on the basis of framework `gin`, all APIs and authentication middleware are developed based on framework `droplet`, but some API directly… | CRITICAL 9.8EPSS 86.3% | 27 December 2021 |
| CVE-2021-45511 | Certain NETGEAR devices are affected by authentication bypass. | CRITICAL 9.8EPSS 18.9% | 26 December 2021 |
| CVE-2021-45461 | FreePBX, when restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 is installed, allows remote attackers to execute arbitrary code, as exploited in the wild in December 2021. | CRITICAL 9.8EPSS 21.5% | 22 December 2021 |
| CVE-2021-40418 | Due to the object property being uninitialized, this can result in dereferencing an arbitrary pointer for the object’s virtual method table, which can result in code execution under the context of the application. | CRITICAL 9.8EPSS 17.9% | 22 December 2021 |
| CVE-2021-40417 | Due to an integer overflow with regards to this calculation, this can result in an undersized heap buffer being allocated. | CRITICAL 9.8EPSS 15.7% | 22 December 2021 |
| CVE-2021-31558 | DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “descr” of the script “DIAE_hierarchyHandler.ashx”. | MEDIUM 6.1EPSS 10.6% | 22 December 2021 |
| CVE-2021-21924 | A specially-crafted HTTP request can lead to SQL injection. | MEDIUM 6.5EPSS 20.2% | 22 December 2021 |
| CVE-2021-21892 | A stack-based buffer overflow vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). | CRITICAL 9.9EPSS 30.4% | 22 December 2021 |
| CVE-2021-21881 | An OS command injection vulnerability exists in the Web Manager Wireless Network Scanner functionality of Lantronix PremierWave 2050 8.9.0.0R4. | CRITICAL 9.9EPSS 36.9% | 22 December 2021 |
| CVE-2021-36750 | ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users (across USB drives sold under multiple brand names). | HIGH 8.1EPSS 13.5% | 22 December 2021 |
| CVE-2021-44207 | Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability | KEVHIGH 8.1EPSS 17.6% | 21 December 2021 |
| CVE-2021-24750 | The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 4.8 does not properly sanitise and escape the refUrl in the refDetails AJAX action, available to any authenticated user, which could allow users with a role as low as subscriber to… | EXPLOITHIGH 8.8EPSS 38.3% | 21 December 2021 |
| CVE-2021-44790 | A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). | EXPLOIT ✓CRITICAL 9.8EPSS 96.8% | 20 December 2021 |
| CVE-2021-44224 | A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix… | HIGH 8.2EPSS 82.3% | 20 December 2021 |
| CVE-2021-45105 | This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. | MEDIUM 5.9EPSS 100.0% | 18 December 2021 |
| CVE-2021-23450 | All versions of package dojo are vulnerable to Prototype Pollution via the setObject function. | CRITICAL 9.8EPSS 30.4% | 17 December 2021 |
| CVE-2021-22054 | Omnissa Workspace ONE Server-Side Request Forgery | KEVHIGH 7.5EPSS 99.7% | 17 December 2021 |
| CVE-2021-41843 | An authenticated SQL injection issue in the calendar search function of OpenEMR 6.0.0 before patch 3 allows an attacker to read data from all tables of the database via the parameter provider_id, as demonstrated by the… | MEDIUM 6.5EPSS 12.7% | 17 December 2021 |
| CVE-2021-42912 | FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability. | HIGH 8.8EPSS 10.1% | 16 December 2021 |
| CVE-2021-45092 | Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter. | EXPLOITCRITICAL 9.8EPSS 40.6% | 16 December 2021 |
| CVE-2021-4119 | bookstack is vulnerable to Improper Access Control | CRITICAL 9.8EPSS 26.9% | 15 December 2021 |
| CVE-2021-43891 | Visual Studio Code Remote Code Execution Vulnerability | HIGH 7.8EPSS 13.3% | 15 December 2021 |
| CVE-2021-43890 | Microsoft Windows AppX Installer Spoofing Vulnerability | KEVHIGH 7.1EPSS 11.3% | 15 December 2021 |
| CVE-2021-43883 | Windows Installer Elevation of Privilege Vulnerability | HIGH 7.8EPSS 12.1% | 15 December 2021 |
| CVE-2021-45043 | HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to read /etc/shadow via the /language/lang s_Language parameter. | EXPLOITHIGH 7.5EPSS 33.1% | 15 December 2021 |
| CVE-2021-41560 | OpenCATS through 0.9.6 allows remote attackers to execute arbitrary code by uploading an executable file via lib/FileUtility.php. | CRITICAL 9.8EPSS 11.3% | 15 December 2021 |
| CVE-2021-36450 | Verint Workforce Optimization (WFO) 15.2.8.10048 allows XSS via the control/my_notifications NEWUINAV parameter. | MEDIUM 6.1EPSS 64.3% | 15 December 2021 |
| CVE-2021-43829 | This vulnerability is capable of uploading dangerous type of file to server leading to XSS attacks and potentially other forms of code injection. | HIGH 8.8EPSS 59.2% | 14 December 2021 |
| CVE-2021-45046 | Apache Log4j2 Deserialization of Untrusted Data Vulnerability | KEVCRITICAL 9.0EPSS 100.0% | 14 December 2021 |
| CVE-2021-4044 | The exact behaviour will depend on the application but it could result in crashes, infinite loops or other similar incorrect responses. | HIGH 7.5EPSS 50.1% | 14 December 2021 |
| CVE-2021-42063 | A security vulnerability has been discovered in the SAP Knowledge Warehouse - versions 7.30, 7.31, 7.40, 7.50. | MEDIUM 6.1EPSS 23.4% | 14 December 2021 |
| CVE-2021-39312 | The True Ranker plugin <= 2.2.2 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be accessed via the src parameter found in the ~/admin/vendor/datatables/examples/resources/examples.php file. | EXPLOITHIGH 7.5EPSS 77.9% | 14 December 2021 |
| CVE-2021-4104 | JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. | HIGH 7.5EPSS 80.6% | 14 December 2021 |
| CVE-2021-39935 | GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability | KEVHIGH 7.5EPSS 36.1% | 13 December 2021 |
| CVE-2021-24946 | The Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the time parameter before using it in a SQL statement in the mec_load_single_page AJAX action, available to unauthenticated users, leading to an unauthenticated… | EXPLOITCRITICAL 9.8EPSS 72.8% | 13 December 2021 |
| CVE-2021-44152 | This allows an attacker to change the password of any known user, thereby preventing valid users from accessing the system and granting the attacker full access to that user's account. | CRITICAL 9.8EPSS 58.6% | 13 December 2021 |
| CVE-2021-40856 | Auerswald COMfortel 1400 IP and 2600 IP before 2.8G devices allow Authentication Bypass via the /about/../ substring. | HIGH 7.5EPSS 50.1% | 13 December 2021 |
| CVE-2021-44848 | In Cibele Thinfinity VirtualUI before 3.0, /changePassword returns different responses for invalid authentication requests depending on whether the username exists. | EXPLOITMEDIUM 5.3EPSS 23.0% | 13 December 2021 |
| CVE-2021-44515 | Zoho Desktop Central Authentication Bypass Vulnerability | KEVCRITICAL 9.8EPSS 99.9% | 12 December 2021 |
| CVE-2021-41805 | An ACL token (with the default operator:write permissions) in one namespace can be used for unintended privilege escalation in a different namespace. | HIGH 8.8EPSS 34.8% | 12 December 2021 |
| CVE-2021-43813 | Grafana prior to versions 8.3.2 and 7.5.12 contains a directory traversal vulnerability for fully lowercase or fully uppercase .md files. | MEDIUM 4.3EPSS 56.6% | 10 December 2021 |
| CVE-2021-44228 | Apache Log4j2 Remote Code Execution Vulnerability | KEVEXPLOIT ×3CRITICAL 10.0EPSS 100.0% | 10 December 2021 |
| CVE-2021-43803 | In versions of Next.js prior to 12.0.5 or 11.1.3, invalid or malformed URLs could lead to a server crash. | HIGH 7.5EPSS 47.3% | 10 December 2021 |
| CVE-2021-3817 | wbce_cms is vulnerable to Improper Neutralization of Special Elements used in an SQL Command | EXPLOITCRITICAL 9.8EPSS 38.4% | 9 December 2021 |
| CVE-2021-44529 | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability | KEVEXPLOITCRITICAL 9.8EPSS 99.1% | 8 December 2021 |
| CVE-2021-43527 | NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. | CRITICAL 9.8EPSS 17.6% | 8 December 2021 |
| CVE-2021-27860 | FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit | KEVHIGH 8.8EPSS 39.7% | 8 December 2021 |
| CVE-2021-20045 | A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a remote unauthenticated attacker to potentially execute code as the 'nobody' user in the appliance. | CRITICAL 9.8EPSS 25.2% | 8 December 2021 |
| CVE-2021-20044 | A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker to execute OS system commands in the appliance. | HIGH 8.8EPSS 40.1% | 8 December 2021 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.