Vulnerabilities exploitable today
401,106in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,441
- High15,706
- Medium14,721
- Low1,447
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2021-33554—99.1%
——30——CVE-2010-1318—99.1%
——30——CVE-2008-2463—99.1%
——30——CVE-2024-10525—99.1%
——30——CVE-2021-301195.4 MED99.1%
——30Authenticated reflective XSS in HelpDeskTab/rcResults.asp The parameter result of /HelpDeskTab/rcResults.asp is insecurely returned in the requested web page and can be used to perform a Cross Site Scripting attack Example request: `https://x.x.x.x/HelpDeskTab/rcResults.asp?result=<script>alert(document.cookie)</script>` The same is true for the parameter FileName of /done.asp Eaxmple request: `https://x.x.x.x/done.asp?FileName=";</script><script>alert(1);a="&PathData=&originalName=shell.aspx&FileSize=4388&TimeElapsed=00:00:00.078`69dCVE-2018-0780—99.1%
——30——CVE-2021-43829—99.1%
——30——CVE-2008-4037—99.1%
——30——CVE-2015-1793—99.1%
——30——CVE-2008-0437—99.1%
——30——CVE-2008-5619—99.1%
——30——CVE-2016-3251—99.1%
——30——CVE-2007-3216—99.1%
——30——CVE-2019-12347—99.1%
——30——CVE-2004-0942—99.1%
——30——CVE-2018-8770—99.1%
——30——CVE-2019-0190—99.1%
——30——CVE-2020-1300—99.1%
——30——CVE-2023-39456—99.1%
——30——CVE-2022-39288—99.1%
——30——CVE-2013-3138—99.1%
——30——CVE-2018-11803—99.1%
——30——CVE-2011-4166—99.1%
——30——CVE-2015-7243—99.1%
——30——CVE-2013-1559—99.1%
——30——CVE-2013-2068—99.1%
——30——CVE-2022-31626—99.1%
——30——CVE-2021-40346—99.1%
——30——CVE-2006-1364—99.1%
——30——CVE-2019-61115.9 MED99.1%
——30An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).8dCVE-2006-1186—99.1%
——30——CVE-2024-11972—99.1%
——30——CVE-2021-33393—99.1%
——30——CVE-2013-3184—99.1%
——30——CVE-2012-0432—99.1%
——30——CVE-2017-1000170—99.1%
——30——CVE-2006-2212—99.1%
——30——CVE-2023-26361—99.1%
——30——CVE-2007-3386—99.1%
——30——CVE-2002-0654—99.1%
——30——