${item.summary || "No description."}
+ ${item.vendor ? `${item.vendor}
` : ""}
+ ${item.product ? `${item.product}
` : ""}
+ Not found
+Redirecting…
+Trying to find the right page.
+Not found
+Trying to find the right page.
+${item.summary || "No description."}
+ ${item.vendor ? `No data available.
'; + return; + } + el.innerHTML = items.map(cardTemplate).join(""); + } + + function renderDiffTable(diff) { + const tbody = document.getElementById("diff-table-body"); + if (!tbody) return; + const kevCount = (diff.new_kev_entries || []).length; + const kevExamples = (diff.new_kev_entries || []).slice(0, 5).map((row) => `${row.cve}`).join(", ") || "None"; + + const epssCount = (diff.new_high_epss || []).length; + const epssExamples = (diff.new_high_epss || []).slice(0, 5).map((row) => `${row.cve}`).join(", ") || "None"; + + const moverCount = (diff.epss_movers || []).length; + const moverExamples = (diff.epss_movers || []).slice(0, 5).map((row) => `${row.cve} (${row.delta.toFixed(3)})`).join(", ") || "None"; + + tbody.innerHTML = ` +CVE detail
+Fetching CVE data.
+ + +Newest changes from /api/v1/diff/latest.json.
| CVE | Vendor | Product | Date Added |
|---|
| CVE | EPSS | Percentile |
|---|
| CVE | Δ EPSS | Current |
|---|
High-probability EPSS picks that are not in KEV. Data from /api/v1/epss_top.json.
| CVE | EPSS | Percentile | PoCs | Description |
|---|
KEV items that also carry high EPSS probability.
-No description.
Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) o...
The authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V9.This issue affects Archer C7(EU) V2: before 241108 and TL-WR841N/N...
Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: before 2025.3.1.
Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1.
A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovere...
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a...
The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.
Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl...
ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart/form-data encoded form with a parameter name that references t...
Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object po...
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonst...
masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during...
Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: this issue might be...
High-probability EPSS items that are not yet in the KEV list.
-No description.
The Custom MCPs feature is designed to execute OS commands, for instance, using tools like `npx` to spin up local MCP Servers. However, Flowise's inherent authentication and authorization model is minimal and lacks ro...
Fresh GitHub PoCs by stars and recency.
| Stars | Updated | Name | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Type | Count | Examples |
|---|---|---|
| New KEV entries | 75 | - CVE-2025-9242, CVE-2025-7775, CVE-2025-9377, CVE-2025-8876, CVE-2025-8875 | + CVE-2025-9242, CVE-2025-7775, CVE-2025-9377, CVE-2025-8876, CVE-2025-8875
| New high EPSS | 2 | - CVE-2025-9316, CVE-2025-8943 | + CVE-2025-9316, CVE-2025-8943
| Top EPSS movers | @@ -362,4 +363,4 @@ None -