Vulnerabilities exploitable today
405,327in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,762
New KEV · 24H0
Exploit Today ≥ 701,694
Distribution · last window
- Critical5,648
- High21,801
- Medium20,239
- Low2,110
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-107037——
———Insecure permissions in the NotificationHelper component of NoNonsense Notes versionCode 72600 allows unauthorized attackers to write in another user's notes via supplying a note id.2hCVE-2026-1180837.5 HIG—
———Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions.3hCVE-2026-426915.4 MED—
———Authorization Bypass Through User-Controlled Key vulnerability in EventPrime EventPrime eventprime-event-calendar-management allows Privilege Abuse.This issue affects EventPrime: from n/a through 4.3.6.0.4hCVE-2026-1180828.8 HIG—
———Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions.3hCVE-2026-1180818.8 HIG—
———Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions.3hCVE-2026-107036——
———Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized attackers to invoke an exported component, impacting the tracker blocker mechanism of the application.2hCVE-2026-1180808.8 HIG—
———Contributor PHP Object Injection in Social Snap <= 1.5.4 versions.3h