CVE Watch404,907 in full archive

Vulnerabilities exploitable today

404,907in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,760

New KEV · 24H0

Exploit Today ≥ 701,693

Distribution · last window

Critical
5,619
High
21,800
Medium
20,176
Low
2,113

Filters

Window

Severity

Flags

Vulnerabilities404,121–404,160 · 404,907

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2023-53293—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.13d CVE-2023-35761—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused63d CVE-2016-7299—

—

——0Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none11d CVE-2026-73107—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.13d CVE-2025-62831—

—

——0Rejected reason: Not used11d CVE-2012-3778—

—

——0Rejected reason: This candidate is unused by its CNA.11d CVE-2026-24442—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.13d CVE-2017-13932—

—

——0Rejected reason: This candidate is unused by its CNA.11d CVE-2025-49205—

—

——0Rejected reason: Not used11d CVE-2023-53283—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.13d CVE-2025-24133—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.13d CVE-2026-1169005.4 MED

—

——0REDAXO before 5.21.4 contains a stored cross-site scripting vulnerability that allows content editors to inject HTML by storing unescaped values rendered by media, medialist, link and linklist widgets. Attackers can submit crafted REX_INPUT_MEDIA or REX_INPUT_LINK values that break out of the value attribute, executing script in administrators' backend sessions to hijack accounts.2d CVE-2025-34444—

—

——0Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.11d CVE-2026-1168996.5 MED

—

——0REDAXO before 5.21.4 contains a broken access control vulnerability that allows authenticated editors to modify slices in unauthorized categories by pairing a permitted article with a foreign slice id. Attackers can abuse content/edit delete and edit functions or the content_slice_status and content_move_slice APIs to delete, toggle, move, or overwrite other editors' slices.2d CVE-2016-2717—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.11d CVE-2023-3483—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.11d CVE-2026-15799—

—

——0Rejected reason: This is a duplicate.94d CVE-2017-4217—

—

——0Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none11d CVE-2016-2697—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.13d CVE-2024-4951—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.13d CVE-2020-12975—

—

——0Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none11d CVE-2026-27321—

—

——0Rejected reason: Not used11d CVE-2018-4658—

—

——0Rejected reason: This candidate is unused by its CNA.11d CVE-2023-46792—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.13d CVE-2023-46796—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.13d CVE-2023-46797—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.13d CVE-2026-1168875.4 MED

—

——0Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject HTML through Keyword-typed property values rendered unescaped on Special:Browse. Attackers can annotate a Keyword property with an event-handler payload that executes JavaScript in viewers' sessions, including administrators, to read tokens and perform actions.2d CVE-2026-106006—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.10d CVE-2020-35110—

—

——0Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none11d CVE-2026-1168865.4 MED

—

——0Semantic MediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject scripts via External identifier property values. Attackers can annotate markup payloads that ExternalIdentifierValue renders unescaped on Special:Browse, executing JavaScript in viewers' sessions, including administrators.2d CVE-2026-1168824.8 MED

—

——0Semantic MediaWiki from 4.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticated profile or schema editors to inject HTML through FacetedSearch exploration-link labels. Attackers can store markup in the label, which ExploreListBuilder::buildHTML() passes unescaped to Html::rawElement(), altering the Special:FacetedSearch page and potentially running scripts in viewers' browsers.2d CVE-2025-31515—

—

——0Rejected reason: Not used11d CVE-2025-48787—

—

——0Rejected reason: Not used11d CVE-2025-27766—

—

——0Rejected reason: Not used11d CVE-2025-0646—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.13d CVE-2026-65212—

—

——0Rejected reason: The reported issue was assessed as intended functionality. This CVE ID is unused by the CNA.3d CVE-2025-53751—

—

——0Rejected reason: Not used11d