Vulnerabilities exploitable today
401,677in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,401
- High15,535
- Medium14,802
- Low1,423
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2022-2486—98.2%
——29——CVE-2007-3872—98.2%
——29——CVE-2018-7300—98.2%
——29——CVE-2018-8828—98.2%
——29——CVE-2024-41874—98.2%
——29——CVE-2006-5270—98.2%
——29——CVE-2010-0356—98.2%
——29——CVE-2020-29045—98.2%
——29——CVE-2015-3145—98.2%
——29——CVE-2009-1558—98.2%
——29——CVE-2025-633877.5 HIG98.2%
——29Dify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send HTTP GET requests to the /console/api/system-features endpoint without any authentication credentials or session tokens. The endpoint fails to implement proper authorization checks, allowing anonymous access to sensitive system configuration data. NOTE: The maintainer states that the endpoint is unauthenticated by design and serves as a bootstrap mechanism required for the dashboard initialization. They also state that the description inaccurately classifies the returned data as sensitive system configuration, stating that the data is non-sensitive and required for client-side rendering. No PII, credentials, or secrets are exposed.9dCVE-2014-2324—98.2%
——29——CVE-2012-6664—98.2%
——29——CVE-2016-2180—98.2%
——29——CVE-2017-2933—98.2%
——29——CVE-2015-0040—98.2%
——29——CVE-2008-2259—98.2%
——29——CVE-2024-53991—98.2%
——29——CVE-2018-7846—98.2%
——29——CVE-2004-0123—98.2%
——29——CVE-2007-0956—98.2%
——29——CVE-2026-0599—98.2%
——29——CVE-2019-1448—98.2%
——29——CVE-2017-2935—98.2%
——29——CVE-2009-4487—98.2%
——29——CVE-2013-3664—98.2%
——29——CVE-2024-25125—98.2%
——29——CVE-2024-20337—98.2%
——29——CVE-2024-55661—98.2%
——29——CVE-2013-0073—98.2%
——29——CVE-2012-0177—98.2%
——29——CVE-2024-47525—98.2%
——29——CVE-2017-5173—98.2%
——29——CVE-2018-16059—98.2%
——29——CVE-2013-0077—98.2%
——29——CVE-2019-1621—98.2%
——29——CVE-2019-0853—98.2%
——29——CVE-2015-2431—98.2%
——29——CVE-2013-2574—98.2%
——29——CVE-2015-1158—98.2%
——29——