Vulnerabilities exploitable today
402,516in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,756
New KEV · 24H0
Exploit Today ≥ 701,669
Distribution · last window
- Critical3,929
- High16,909
- Medium15,761
- Low1,523
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-6671—97.3%
——29——CVE-2021-23394—97.3%
——29——CVE-2018-8013—97.3%
——29——CVE-2014-0263—97.3%
——29——CVE-2015-2673—97.3%
——29——CVE-2018-15932—97.3%
——29——CVE-2017-3117—97.3%
——29——CVE-2015-0061—97.3%
——29——CVE-2024-25850—97.3%
——29——CVE-2022-2480—97.3%
——29——CVE-2007-1094—97.3%
——29——CVE-2018-6910—97.3%
——29——CVE-2014-1817—97.3%
——29——CVE-2017-2960—97.3%
——29——CVE-2018-19877—97.3%
——29——CVE-2018-5782—97.3%
——29——CVE-2022-30011—97.3%
——29——CVE-2025-5623—97.3%
——29——CVE-2015-64209.8 CRI97.3%
——29Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Service Provider; Unified Computing; Voice and Unified Communications Devices; Video, Streaming, TelePresence, and Transcoding Devices; Wireless; and Cisco Hosted Services products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.17dCVE-2020-2733—97.3%
——29——CVE-2025-560059.8 CRI97.3%
——29An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in the `yacc()` function. This parameter accepts a `.pkl` file that is deserialized with `pickle.load()` without validation. Because `pickle` allows execution of embedded code via `__reduce__()`, an attacker can achieve code execution by passing a malicious pickle file. The parameter is not mentioned in official documentation or the GitHub repository, yet it is active in the PyPI version. This introduces a stealthy backdoor and persistence risk. NOTE: A third-party states that this vulnerability should be rejected because the proof of concept does not demonstrate arbitrary code execution and fails to complete successfully.37dCVE-2019-1372—97.3%
——29——CVE-2017-0265—97.3%
——29——CVE-2005-3653—97.3%
——29——CVE-2015-2440—97.3%
——29——CVE-2023-6065—97.3%
——29——CVE-2004-0526—97.3%
——29——CVE-2000-0742—97.3%
——29——CVE-2014-1824—97.3%
——29——CVE-2012-6495—97.3%
——29——CVE-2022-37060—97.3%
——29——CVE-2018-0739—97.3%
——29——CVE-2023-0324—97.3%
——29——CVE-2016-3244—97.3%
——29——CVE-2010-0257—97.3%
——29——CVE-2016-0184—97.3%
——29——CVE-2013-0680—97.3%
——29——CVE-2013-1861—97.3%
——29——CVE-2008-5515—97.3%
——29——CVE-2002-1148—97.3%
——29——