Vulnerabilities exploitable today
401,738in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,667
Distribution · last window
- Critical3,395
- High15,513
- Medium14,772
- Low1,419
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2007-1910—97.9%
——29——CVE-2016-9147—97.9%
——29——CVE-2012-0185—97.9%
——29——CVE-2022-1952—97.9%
——29——CVE-2022-41772—97.9%
——29——CVE-2008-2959—97.9%
——29——CVE-2024-7470—97.9%
——29——CVE-2004-0748—97.9%
——29——CVE-2009-1140—97.9%
——29——CVE-2010-3331—97.9%
——29——CVE-2010-3951—97.9%
——29——CVE-2010-3326—97.9%
——29——CVE-2011-1732—97.9%
——29——CVE-2023-6112—97.9%
——29——CVE-2002-200017.5 HIG97.9%
——29The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE.30dCVE-2000-0631—97.9%
——29——CVE-2008-4265—97.9%
——29——CVE-2018-0797—97.9%
——29——CVE-2017-8717—97.9%
——29——CVE-2012-4776—97.9%
——29——CVE-2022-36667—97.9%
——29——CVE-2013-2121—97.9%
——29——CVE-2016-3216—97.9%
——29——CVE-2011-1965—97.9%
——29——CVE-2014-1791—97.9%
——29——CVE-2010-2570—97.9%
——29——CVE-2013-4002—97.9%
——29——CVE-2002-0056—97.9%
——29——CVE-2024-7469—97.9%
——29——CVE-2024-50630—97.9%
——29——CVE-2018-17157—97.9%
——29——CVE-2017-18370—97.9%
——29——CVE-2010-3714—97.9%
——29——CVE-1999-0702—97.9%
——29——CVE-2008-7182—97.9%
——29——CVE-2008-5793—97.9%
——29——CVE-2023-35719—97.9%
——29——CVE-2013-1592—97.9%
——29——CVE-2021-27114—97.9%
——29——CVE-2017-9544—97.9%
——29——