Vulnerabilities exploitable today
401,106in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,441
- High15,704
- Medium14,720
- Low1,446
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2020-9374—98.7%
——30——CVE-2023-32714—98.7%
——30——CVE-2021-43421—98.7%
——30——CVE-2022-43568—98.7%
——30——CVE-2025-686649.3 CRI98.7%
——30LangChain is a framework for building agents and LLM-powered applications. Prior to versions 0.3.81 and 1.2.5, a serialization injection vulnerability exists in LangChain's dumps() and dumpd() functions. The functions do not escape dictionaries with 'lc' keys when serializing free-form dictionaries. The 'lc' key is used internally by LangChain to mark serialized objects. When user-controlled data contains this key structure, it is treated as a legitimate LangChain object during deserialization rather than plain user data. This issue has been patched in versions 0.3.81 and 1.2.5.2dCVE-2019-12988—98.7%
——30——CVE-2008-4841—98.7%
——30——CVE-2007-5054—98.7%
——30——CVE-2008-0113—98.7%
——30——CVE-2025-1128—98.7%
——30——CVE-2016-5360—98.7%
——30——CVE-2006-6134—98.7%
——30——CVE-2012-0266—98.7%
——30——CVE-2012-0840—98.7%
——30——CVE-2003-0659—98.7%
——30——CVE-2022-34267—98.7%
——30——CVE-2011-1774—98.7%
——30——CVE-2018-12905—98.7%
——30——CVE-2022-2234—98.7%
——30——CVE-2019-12987—98.7%
——30——CVE-2007-2340—98.7%
——30——CVE-2015-1587—98.7%
——30——CVE-2010-2709—98.7%
——30——CVE-2016-2171—98.7%
——30——CVE-2004-0573—98.7%
——30——CVE-2023-0448—98.7%
——30——CVE-2018-11139—98.7%
——30——CVE-2014-1691—98.7%
——30——CVE-2021-30833—98.7%
——30——CVE-2016-7274—98.7%
——30——CVE-2018-0114—98.7%
——30——CVE-2022-0819—98.7%
——30——CVE-2013-2492—98.7%
——30——CVE-2023-2796—98.7%
——30——CVE-2006-3449—98.7%
——30——CVE-2017-0121—98.7%
——30——CVE-2009-0836—98.7%
——30——CVE-2009-0815—98.7%
——30——CVE-2023-28662—98.7%
——30——CVE-2022-365335.4 MED98.7%
——30Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and below was discovered to contain a cross-site scripting (XSS) vulnerability.105d