CVEs with an EPSS score above 30%

Every CVE with at least a 30% EPSS chance of exploitation in the next 30 days: 7,160 as of 2026-11-07, highest first.

CVE-2005-2373Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long directory name to (1)…UnratedEPSS 45.7%Jul 26, 2005
CVE-2023-51573Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass VulnerabilityVoltronic Power ViewPower ProCritical · 9.8EPSS 45.7%Apr 1, 2024
CVE-2017-16651Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host's fileHigh · 7.8KEVEPSS 45.7%Nov 9, 2017
CVE-2020-8165A deserialization of untrusted data vulnernerability exists in rails < 5.2.4.3, rails < 6.0.3.1 that can allow an attacker to unmarshal…https://github.com/rails/rails · activesupportUnratedEPSS 45.7%Fix availableJun 19, 2020
CVE-2008-4696Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML…UnratedEPSS 45.7%Oct 23, 2008
CVE-2024-28254SpEL Injection in `GET /api/v1/events/subscriptions/validation/condition/<expr>` in OpenMetadataopen-metadata OpenMetadataHigh · 8.8EPSS 45.7%Fix availableMar 15, 2024
CVE-2019-6444An issue was discovered in NTPsec before 1.1.3.UnratedEPSS 45.7%Jan 16, 2019
CVE-2020-8958Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers…UnratedEPSS 45.7%Jul 15, 2020
CVE-2023-31133Ghost vulnerable to disclosure of private API fieldsTryGhost Ghost · ghostHigh · 7.5EPSS 45.7%Fix availableMay 8, 2023
CVE-2007-4814Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft…UnratedEPSS 45.7%Sep 11, 2007
CVE-2016-8706An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary…MemcachedHigh · 8.1EPSS 45.7%Jan 6, 2017
CVE-2019-3993ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability.ELOGUnratedEPSS 45.7%Dec 17, 2019
CVE-2022-38423Adobe ColdFusion Application Server Directory Traversal Information Disclosure VulnerabilityAdobe ColdFusionMedium · 4.9EPSS 45.7%Oct 14, 2022
CVE-2007-2093Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) 1.0 allows remote attackers to inject…UnratedEPSS 45.7%Apr 18, 2007
CVE-2019-9879The WPGraphQL 0.2.3 plugin for WordPress allows remote attackers to register a new user with admin privileges, whenever new user…UnratedEPSS 45.7%Jun 10, 2019
CVE-2024-6646Netgear WN604 Web Interface downloadFile.php information disclosureNetgear WN604Medium · 6.9EPSS 45.7%Jul 10, 2024
CVE-2005-1989Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly execute code when…UnratedEPSS 45.7%Aug 10, 2005
CVE-2000-0126Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a ..UnratedEPSS 45.7%Feb 8, 2000
CVE-2000-0970IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remote attackers to…UnratedEPSS 45.7%Jan 22, 2001
CVE-2017-0202A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory.Microsoft Internet ExplorerUnratedEPSS 45.6%Apr 12, 2017
CVE-2025-61678FreePBX Endpoint Manager vulnerable to authenticated arbitrary file upload via fwbrand parameterFreePBX endpointmanHigh · 8.6EPSS 45.6%Fix availableOct 14, 2025
CVE-2024-54146Cacti has a SQL Injection vulnerability when view host templatecactiHigh · 7.6EPSS 45.6%Fix availableJan 27, 2025
CVE-2018-8736A privilege escalation vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to leverage an RCE vulnerability…UnratedEPSS 45.6%Apr 18, 2018
CVE-2005-1988Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web site or an HTML…UnratedEPSS 45.6%Aug 10, 2005
CVE-2021-27886rakibtg Docker Dashboard before 2021-02-28 allows command injection in backend/utilities/terminal.js via shell metacharacters in the…UnratedEPSS 45.6%Mar 1, 2021
CVE-2006-4704Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in…UnratedEPSS 45.6%Nov 1, 2006
CVE-2006-5051Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute…UnratedEPSS 45.6%Sep 27, 2006
CVE-2006-0002Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office…UnratedEPSS 45.6%Jan 10, 2006
CVE-2023-32562An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker…Ivanti AvalancheMedium · 6.8EPSS 45.6%Aug 10, 2023
CVE-2016-1606Multiple stack-based buffer overflows in COM objects in Micro Focus Rumba 9.4.x before 9.4 HF 13960 allow remote attackers to execute…UnratedEPSS 45.6%Jul 3, 2016

Frequently asked questions

What is an EPSS score?

The Exploit Prediction Scoring System (EPSS) estimates the probability that a CVE will be exploited in the wild in the next 30 days, from 0 to 100%. FIRST.org publishes a new score for every published CVE each day, using a model trained on observed exploitation activity.

What does the EPSS percentile mean?

The percentile ranks a CVE's score against every other CVE's. A CVE in the 95th percentile scores higher than 95% of all CVEs, even when its probability looks small, because most CVEs score well under 1%. For example, a CVE with EPSS 0.42 and percentile 0.99 has a 42% chance of exploitation within 30 days and scores higher than 99% of CVEs.

What is the difference between EPSS and CVSS?

CVSS measures how severe a vulnerability would be if exploited; EPSS measures how likely exploitation is. A CVSS 9.8 bug nobody targets can have an EPSS under 1%, while a CVSS 6.5 bug in a widely scanned product can score above 50%. Use both: CVSS for impact, EPSS for likelihood.

What is a good EPSS threshold?

There is no single cutoff. Many teams prioritize CVEs above 10% (roughly the top 4% of all CVEs) and treat anything above 30% as urgent. cve.now flags a high-severity CVE as critical once its EPSS reaches 10%.

How do EPSS and CISA KEV work together?

KEV lists vulnerabilities already exploited; EPSS predicts which will be. Patch everything on KEV first, then work down by EPSS score, starting with the highest-severity CVEs in your stack.

CVEs with an EPSS score above 30%

Get alerts when a CVE crosses 30% EPSS

Frequently asked questions