Vulnerabilities exploitable today
402,460in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,668
Distribution · last window
- Critical3,956
- High16,982
- Medium15,818
- Low1,541
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2010-2265—97.6%
——29——CVE-2020-25111—97.6%
——29——CVE-2014-02276.4 NO 97.6%
——29java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to conduct HTTP request smuggling attacks or cause a denial of service (resource consumption) by streaming data with malformed chunked transfer coding.9dCVE-2021-46387—97.6%
——29——CVE-2014-7859—97.6%
——29——CVE-2008-4256—97.6%
——29——CVE-2021-21234—97.6%
——29——CVE-2014-0294—97.6%
——29——CVE-2019-5063—97.6%
——29——CVE-2010-3241—97.6%
——29——CVE-2006-5647—97.6%
——29——CVE-2021-44701—97.6%
——29——CVE-2008-4253—97.6%
——29——CVE-2016-3223—97.6%
——29——CVE-2015-1579—97.6%
——29——CVE-2006-1490—97.6%
——29——CVE-2010-3242—97.6%
——29——CVE-2002-0201—97.6%
——29——CVE-2022-34046—97.6%
——29——CVE-2023-5149—97.6%
——29——CVE-2025-584439.1 CRI97.6%
——29FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1673 and below contain an authentication bypass vulnerability. It is possible for an attacker to perform an unauthenticated DB dump where they could pull a full SQL DB without credentials. A fix is expected to be released 9/15/2025. To address this vulnerability immediately, upgrade to the latest version of either the dev-branch or working-1.6 branch. This will patch the issue for users concerned about immediate exposure. See the FOG Project documentation for step-by-step upgrade instructions: https://docs.fogproject.org/en/latest/install-fog-server#choosing-a-fog-version.10dCVE-2016-3271—97.5%
——29——CVE-2013-0633—97.6%
——29——CVE-2012-2521—97.6%
——29——CVE-2012-0173—97.6%
——29——CVE-2005-2871—97.6%
——29——CVE-2023-36052—97.6%
——29——CVE-2016-00107.8 HIG97.6%
——29Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Excel for Mac 2011, PowerPoint for Mac 2011, Word for Mac 2011, Excel 2016 for Mac, PowerPoint 2016 for Mac, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."9dCVE-2004-0203—97.6%
——29——CVE-2015-1731—97.6%
——29——CVE-2014-4143—97.6%
——29——CVE-2009-2504—97.6%
——29——CVE-2024-49122—97.6%
——29——CVE-2018-8290—97.6%
——29——CVE-2009-3671—97.6%
——29——CVE-2020-11901—97.6%
——29——CVE-1999-0153—97.6%
——29——CVE-2024-0265—97.6%
——29——CVE-2010-3238—97.6%
——29——CVE-2008-4252—97.6%
——29——