Nutter Tools
Nutter Tools

A free toolbox that runs in your browser. A tool for every job.

Your files never leave your device

Images

  • Convert images
  • Compress images
  • Resize images
  • Crop
  • Watermark

PDF & files

  • Merge PDFs
  • Split a PDF
  • Images to PDF
  • PDF to images
  • Remove photo location

Video & audio

  • Compress video
  • Convert video
  • Video to GIF
  • Convert audio
  • Trim audio

Everyday

  • QR codes
  • Passwords
  • Time zones
  • Unit converter
  • Word count
  • Webcam test

Developer

  • JSON formatter
  • Base64
  • Regex tester
  • Hashes
  • JWT decoder

Site

  • About
  • Contact
  • Settings
  • Privacy
  • Terms
  • Site map
  • llms.txt

Everyday

  • Images
  • Video
  • Audio
  • PDF & files
  • Text
  • QR codes
  • Units & math
  • Time & dates
  • Color
  • Passwords & IDs
  • Device tests
  • Sun & moon

For developers

  • JSON
  • Encoding
  • Regex & cron
  • Web & auth
  • Hashing & encryption
  • Config files
  • Network
  • Browser
  • AI
  • Fake data
© Nutter Toolsnutter.tools
  1. Home
  2. Network
  3. EPSS scores
Your files stay on your device

EPSS score lookup

Paste CVE ids and look up the FIRST EPSS exploitation probability, percentile, and model date for each, straight to the public API.

This tool is in beta

Still being tested. If a result looks wrong, tell us.

Report a problem

Three different empties, kept distinct

A low score is a real answer. Not scored means FIRST publishes no EPSS entry for that id. Unknown means the request itself failed, so nothing is claimed. A score reused from this tab past its fresh window reads Stale and keeps its own model date.

EPSS is the probability that a vulnerability gets exploited in the wild within 30 days, published daily by FIRST (Forum of Incident Response and Security Teams). It reads next to severity, not instead of it: a critical CVE with a tiny probability and a mid-scored CVE with a high one need different handling, and EPSS says nothing about which is right for your environment. This page calls FIRST's API directly from your browser, so there is no server cache in between; repeat lookups of the same ids inside 12 hours are served from this tab and labeled as such. Batch lookups run as up to five requests, 100 ids each, matching the API's own page size.

CVE identifiers

Up to 500 per lookup; every id is picked out of the paste

A scanner export works as-is: every CVE id is picked out of the surrounding text, duplicates collapse, and only the identifiers are sent.

What leaves your browser

When you press Look up, the CVE identifiers go as one HTTPS GET per 100 ids to api.first.org, FIRST's public EPSS API. No keys, no other endpoint. This page leaves your browser only when you press the button; never on load, never in the background. Nothing is sent anywhere else. Google Analytics still measures the visit to this page, and it never receives what you run through this tool.

Runs on this device. Nothing is uploaded.

More network tools

  • RDAP lookup
  • DNS explainer
All network tools

Was this tool useful?