Vulnerabilities exploitable today
401,677in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,401
- High15,534
- Medium14,799
- Low1,422
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2018-8421—98.2%
——29——CVE-2008-4024—98.2%
——29——CVE-2012-2175—98.2%
——29——CVE-2008-0104—98.2%
——29——CVE-2007-1403—98.2%
——29——CVE-2010-0490—98.2%
——29——CVE-2013-1320—98.2%
——29——CVE-2008-0235—98.2%
——29——CVE-2008-1069—98.2%
——29——CVE-2024-11654—98.2%
——29——CVE-2024-11659—98.2%
——29——CVE-2019-7107—98.2%
——29——CVE-2008-2255—98.2%
——29——CVE-2020-35613—98.2%
——29——CVE-2021-31181—98.2%
——29——CVE-2002-0191—98.2%
——29——CVE-2010-3947—98.2%
——29——CVE-2005-1211—98.1%
——29——CVE-2018-19660—98.1%
——29——CVE-2019-100867.3 HIG98.1%
——29In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.14dCVE-2021-27513—98.1%
——29——CVE-2020-6116—98.1%
——29——CVE-2023-34991—98.1%
——29——CVE-2023-0084—98.1%
——29——CVE-2023-1861—98.1%
——29——CVE-2018-8266—98.1%
——29——CVE-2023-34800—98.1%
——29——CVE-2007-2903—98.1%
——29——CVE-2022-29034—98.1%
——29——CVE-2018-12692—98.1%
——29——CVE-2009-0520—98.1%
——29——CVE-2015-2515—98.1%
——29——CVE-2016-1000—98.1%
——29——CVE-2019-14974—98.1%
——29——CVE-2012-4914—98.1%
——29——CVE-2026-597749.8 CRI98.1%
——29Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files. An unauthenticated attacker can use a suitable public repository to read files accessible to the Gitea service account. If the disclosed files include app.ini and its INTERNAL_TOKEN, the attacker can chain the disclosure with internal logger access to modify a Git hook and execute commands as the Gitea service account.8dCVE-2014-6035—98.1%
——29——CVE-2015-1650—98.1%
——29——CVE-2010-3343—98.1%
——29——CVE-2011-2950—98.1%
——29——