Vulnerabilities exploitable today
402,410in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,668
Distribution · last window
- Critical3,561
- High15,986
- Medium14,882
- Low1,459
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-24071—97.8%
——29——CVE-2017-15367—97.8%
——29——CVE-2021-27163—97.8%
——29——CVE-2007-1278—97.8%
——29——CVE-2022-34555—97.8%
——29——CVE-2010-1883—97.8%
——29——CVE-2018-8344—97.8%
——29——CVE-2011-4106—97.8%
——29——CVE-2016-7264—97.8%
——29——CVE-2021-22918—97.8%
——29——CVE-2026-0652—97.8%
——29——CVE-2010-3338—97.8%
——29——CVE-2021-42669—97.8%
——29——CVE-2020-1957—97.8%
——29——CVE-2009-1287—97.8%
——29——CVE-2025-577387.2 HIG97.8%
——29Apache Syncope offers the ability to extend / customize the base behavior on every deployment by allowing to provide custom implementations of a few Java interfaces; such implementations can be provided either as Java or Groovy classes, with the latter being particularly attractive as the machinery is set for runtime reload.
Such a feature has been available for a while, but recently it was discovered that a malicious administrator can inject Groovy code that can be executed remotely by a running Apache Syncope Core instance.
Users are recommended to upgrade to version 3.0.14 / 4.0.2, which fix this issue by forcing the Groovy code to run in a sandbox.15dCVE-2024-2434—97.8%
——29——CVE-2020-5777—97.8%
——29——CVE-2021-27159—97.8%
——29——CVE-1999-1223—97.8%
——29——CVE-2024-39914—97.8%
——29——CVE-2013-0189—97.8%
——29——CVE-2018-12453—97.8%
——29——CVE-2012-1863—97.8%
——29——CVE-2017-2885—97.8%
——29——CVE-2009-2497—97.8%
——29——CVE-2018-1015—97.8%
——29——CVE-2005-0562—97.8%
——29——CVE-2022-27474—97.8%
——29——CVE-2008-0503—97.8%
——29——CVE-2006-3897—97.8%
——29——CVE-2008-2281—97.8%
——29——CVE-2020-24719—97.8%
——29——CVE-2015-2555—97.8%
——29——CVE-2025-0851—97.8%
——29——CVE-2014-6270—97.8%
——29——CVE-2011-1970—97.8%
——29——CVE-2018-8430—97.8%
——29——CVE-2021-44567—97.8%
——29——CVE-2018-1013—97.8%
——29——