Vulnerabilities exploitable today
401,110in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,436
- High15,682
- Medium14,709
- Low1,445
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-48976—98.4%
——30——CVE-2005-0044—98.4%
——30——CVE-2009-1394—98.4%
——30——CVE-2014-1766—98.4%
——30——CVE-2010-2730—98.4%
——30——CVE-2008-3364—98.4%
——30——CVE-2026-21445—98.4%
——30——CVE-2020-11546—98.4%
——30——CVE-2007-1754—98.4%
——30——CVE-2000-0673—98.4%
——30——CVE-2001-0505—98.4%
——30——CVE-2009-1612—98.4%
——30——CVE-1999-0509—98.4%
——30——CVE-2005-1979—98.4%
——30——CVE-2005-1205—98.4%
——30——CVE-2019-0697—98.4%
——30——CVE-2010-1262—98.4%
——30——CVE-2023-33625—98.4%
——30——CVE-2022-24502—98.4%
——30——CVE-2011-1772—98.4%
——30——CVE-2018-19458—98.4%
——30——CVE-2014-8682—98.4%
——30——CVE-2008-4025—98.4%
——30——CVE-2025-64409.8 CRI98.4%
——30The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress theme, is vulnerable to arbitrary file uploads due to missing file type validation in the 'wcdp_save_canvas_design_ajax' function in all versions up to, and including, 1.9.26. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.14dCVE-2017-7588—98.4%
——30——CVE-2018-11690—98.4%
——30——CVE-2022-31680—98.4%
——30——CVE-2017-11779—98.4%
——30——CVE-2017-6187—98.4%
——30——CVE-2005-1980—98.4%
——30——CVE-2018-12850—98.4%
——30——CVE-2022-24491—98.4%
——30——CVE-2016-4231—98.4%
——30——CVE-2016-10000279.8 CRI98.4%
——30Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data. Depending on how the library is implemented within a product, this issue may or not occur, and authentication may be required. NOTE: the vendor's position is that untrusted data is not an intended use case. The product's behavior will not be changed because some users rely on deserialization of trusted data.15dCVE-2000-0711—98.4%
——30——CVE-2006-2218—98.4%
——30——CVE-2019-15813—98.4%
——30——CVE-2015-1376—98.4%
——30——CVE-2021-20093—98.4%
——30——CVE-2024-13181—98.4%
——30——