Vulnerabilities exploitable today
402,479in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,668
Distribution · last window
- Critical3,953
- High16,976
- Medium15,803
- Low1,539
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2004-0569—97.4%
——29——CVE-2012-2557—97.4%
——29——CVE-2002-0379—97.4%
——29——CVE-2019-8287—97.4%
——29——CVE-2019-1003005—97.4%
——29——CVE-2019-10008—97.4%
——29——CVE-2008-3533—97.4%
——29——CVE-2004-1331—97.4%
——29——CVE-2015-6142—97.4%
——29——CVE-2024-38666—97.4%
——29——CVE-2015-6065—97.4%
——29——CVE-2005-1827—97.4%
——29——CVE-2000-0258—97.4%
——29——CVE-2016-0186—97.4%
——29——CVE-2006-2726—97.4%
——29——CVE-2010-1119—97.4%
——29——CVE-2014-3569—97.4%
——29——CVE-2010-3228—97.4%
——29——CVE-2006-5710—97.4%
——29——CVE-2019-10891—97.4%
——29——CVE-2019-6715—97.4%
——29——CVE-2019-0856—97.4%
——29——CVE-2014-6357—97.4%
——29——CVE-2013-3141—97.4%
——29——CVE-2000-1113—97.4%
——29——CVE-2025-32778—97.4%
——29——CVE-2013-03406.8 NO 97.4%
——29expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue. NOTE: it could be argued that because expat already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed, and each affected application would need its own CVE.10dCVE-2018-12031—97.4%
——29——CVE-2017-3164—97.4%
——29——CVE-2023-48725—97.4%
——29——CVE-2017-11769—97.4%
——29——CVE-2012-1879—97.4%
——29——CVE-2015-6159—97.4%
——29——CVE-2020-16137—97.4%
——29——CVE-2016-0140—97.4%
——29——CVE-2016-4372—97.4%
——29——CVE-2016-4275—97.4%
——29——CVE-2010-1901—97.4%
——29——CVE-2019-0617—97.4%
——29——CVE-2023-5702—97.4%
——29——