CVEs with an EPSS score above 30%
Every CVE with at least a 30% EPSS chance of exploitation in the next 30 days: 7,162 as of 2026-11-09, highest first.
- CVE-2005-2830Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in…
- CVE-2018-13109All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerability where attackers…
- CVE-2022-29337C-DATA FD702XW-X-R430 v2.1.13_X001 was discovered to contain a command injection vulnerability via the va_cmd parameter in formlanipv6.
- CVE-2024-6220简数采集器 (Keydatas) <= 2.5.2 - Unauthenticated Arbitrary File Uploadzhengdon 简数采集器
- CVE-2021-43858User privilege escalation in MinIOminio
- CVE-2023-37941Apache Superset: Metadata db write access can lead to remote code executionApache Software Foundation Apache Superset · apache-superset
- CVE-2014-0038The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to…
- CVE-2024-39573Apache HTTP Server: mod_rewrite proxy handler substitutionApache Software Foundation Apache HTTP Server
- CVE-1999-0015Teardrop IP denial of service.
- CVE-2018-4416Multiple memory corruption issues were addressed with improved memory handling.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2022-0848OS Command Injection in part-db/part-dbpart-db/part-db
- CVE-2022-4606PHP Remote File Inclusion in flatpressblog/flatpressflatpressblog/flatpress
- CVE-2008-2908Multiple stack-based buffer overflows in a certain ActiveX control in ienipp.ocx in Novell iPrint Client for Windows before 4.36 allow…
- CVE-2007-3435Stack-based buffer overflow in the BeginPrint method in a certain ActiveX control in RKD Software (barcodetools.com) BarCodeAx.dll 4.9…
- CVE-2007-0325Multiple buffer overflows in the Trend Micro OfficeScan Web-Deployment SetupINICtrl ActiveX control in OfficeScanSetupINI.dll, as used in…
- CVE-2020-24214An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders.
- CVE-2021-1384Cisco IOx for IOS XE Software Command Injection VulnerabilityCisco IOS XE Software
- CVE-2017-6639A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center Network Manager (DCNM) could allow an…Cisco Prime Data Center Network Manager Debug Remote Code E…
- CVE-2024-45242EnGenius ENH1350EXT A8J-ENH1350EXT devices through 3.9.3.2_c1.9.51 allow (blind) OS Command Injection via shell metacharacters to the Ping…
- CVE-2025-2264Santesoft Sante PACS Server Path Traversal Information DisclosureSantesoft Sante PACS Server
- CVE-2024-25126Rack ReDos in content type parsing (2nd degree polynomial)rack
- CVE-2017-8225On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not correctly checked.
- CVE-2008-0106Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to…
- CVE-2004-0568HyperTerminal application for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the length of a…
- CVE-2012-6442Rockwell Automation ControlLogix PLC Improper Access ControlRockwell Automation 1756-ENBT, 1756-EWEB, 1768-ENBT, 176… +6
- CVE-2023-48023Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRF.
- CVE-2026-20133A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affectCisco Catalyst SD-WAN Manager
- CVE-2015-6103The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1…
- CVE-2015-6104The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1…
- CVE-2017-0063The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and R2; and Windows 7…Microsoft Color Management
Get alerts when a CVE crosses 30% EPSS
Only want the packages you use? Check a lockfile to get a feed for your stack.
https://cve.now/epss/feed
Paste into Feedly or any RSS reader, or run /feed subscribe https://cve.now/epss/feed in Slack. For email alerts, give it to an RSS-to-email service.
https://cve.now/epss/feed?format=atom
The same entries as Atom, for readers that prefer it.
https://cve.now/epss/feed?format=json
The same entries as JSON Feed 1.1, for scripts and readers that support it.
Frequently asked questions
What is an EPSS score?
The Exploit Prediction Scoring System (EPSS) estimates the probability that a CVE will be exploited in the wild in the next 30 days, from 0 to 100%. FIRST.org publishes a new score for every published CVE each day, using a model trained on observed exploitation activity.
What does the EPSS percentile mean?
The percentile ranks a CVE's score against every other CVE's. A CVE in the 95th percentile scores higher than 95% of all CVEs, even when its probability looks small, because most CVEs score well under 1%. For example, a CVE with EPSS 0.42 and percentile 0.99 has a 42% chance of exploitation within 30 days and scores higher than 99% of CVEs.
What is the difference between EPSS and CVSS?
CVSS measures how severe a vulnerability would be if exploited; EPSS measures how likely exploitation is. A CVSS 9.8 bug nobody targets can have an EPSS under 1%, while a CVSS 6.5 bug in a widely scanned product can score above 50%. Use both: CVSS for impact, EPSS for likelihood.
What is a good EPSS threshold?
There is no single cutoff. Many teams prioritize CVEs above 10% (roughly the top 4% of all CVEs) and treat anything above 30% as urgent. cve.now flags a high-severity CVE as critical once its EPSS reaches 10%.
How do EPSS and CISA KEV work together?
KEV lists vulnerabilities already exploited; EPSS predicts which will be. Patch everything on KEV first, then work down by EPSS score, starting with the highest-severity CVEs in your stack.