Vulnerabilities exploitable today
401,106in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,441
- High15,704
- Medium14,720
- Low1,446
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2023-49231—98.7%
——30——CVE-2020-9374—98.7%
——30——CVE-2015-0231—98.7%
——30——CVE-2020-10977—98.7%
——30——CVE-2025-1128—98.7%
——30——CVE-2023-2986—98.7%
——30——CVE-2023-41887—98.7%
——30——CVE-2021-24284—98.7%
——30——CVE-2018-1235—98.7%
——30——CVE-2009-3028—98.7%
——30——CVE-2007-2340—98.7%
——30——CVE-2011-0978—98.7%
——30——CVE-2017-0087—98.7%
——30——CVE-2018-16752—98.7%
——30——CVE-2022-4060—98.7%
——30——CVE-2020-4000—98.7%
——30——CVE-2006-3445—98.7%
——30——CVE-2025-686159.8 CRI98.7%
——30net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and 5.10.pre2.2dCVE-2024-21644—98.7%
——30——CVE-2016-7478—98.7%
——30——CVE-2019-12987—98.7%
——30——CVE-2025-295136.1 MED98.7%
——30Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code in the admin API Access token generator.109dCVE-2019-19307—98.7%
——30——CVE-2012-0840—98.7%
——30——CVE-2008-4841—98.7%
——30——CVE-2023-218187.5 HIG98.7%
——30Windows Secure Channel Denial of Service Vulnerability63dCVE-2023-32714—98.7%
——30——CVE-2015-3082—98.7%
——30——CVE-2007-5065—98.7%
——30——CVE-2014-1610—98.7%
——30——CVE-2025-686649.3 CRI98.7%
——30LangChain is a framework for building agents and LLM-powered applications. Prior to versions 0.3.81 and 1.2.5, a serialization injection vulnerability exists in LangChain's dumps() and dumpd() functions. The functions do not escape dictionaries with 'lc' keys when serializing free-form dictionaries. The 'lc' key is used internally by LangChain to mark serialized objects. When user-controlled data contains this key structure, it is treated as a legitimate LangChain object during deserialization rather than plain user data. This issue has been patched in versions 0.3.81 and 1.2.5.2dCVE-2019-14928—98.7%
——30——CVE-2009-0836—98.7%
——30——CVE-2017-6553—98.7%
——30——CVE-2016-5360—98.7%
——30——CVE-2017-0083—98.7%
——30——CVE-2023-2796—98.7%
——30——CVE-2017-11284—98.7%
——30——CVE-2014-1691—98.7%
——30——CVE-2005-3644—98.7%
——30——