Vulnerabilities exploitable today
402,516in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,756
New KEV · 24H0
Exploit Today ≥ 701,669
Distribution · last window
- Critical3,928
- High16,900
- Medium15,748
- Low1,521
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2013-0082—97.3%
——29——CVE-2018-0849—97.3%
——29——CVE-2007-5322—97.3%
——29——CVE-2010-0257—97.3%
——29——CVE-2015-4026—97.3%
——29——CVE-2007-4033—97.3%
——29——CVE-2002-0860—97.3%
——29——CVE-2018-5782—97.3%
——29——CVE-2000-0858—97.3%
——29——CVE-2013-0023—97.3%
——29——CVE-2010-3936—97.3%
——29——CVE-2016-3204—97.3%
——29——CVE-2011-1564—97.3%
——29——CVE-2010-1714—97.3%
——29——CVE-2025-560059.8 CRI97.3%
——29An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in the `yacc()` function. This parameter accepts a `.pkl` file that is deserialized with `pickle.load()` without validation. Because `pickle` allows execution of embedded code via `__reduce__()`, an attacker can achieve code execution by passing a malicious pickle file. The parameter is not mentioned in official documentation or the GitHub repository, yet it is active in the PyPI version. This introduces a stealthy backdoor and persistence risk. NOTE: A third-party states that this vulnerability should be rejected because the proof of concept does not demonstrate arbitrary code execution and fails to complete successfully.37dCVE-2023-0324—97.3%
——29——CVE-2019-1372—97.3%
——29——CVE-2004-0501—97.3%
——29——CVE-2004-0526—97.3%
——29——CVE-2022-28346—97.3%
——29——CVE-2000-0742—97.3%
——29——CVE-2004-1623—97.3%
——29——CVE-2003-0815—97.3%
——29——CVE-2008-1391—97.3%
——29——CVE-2013-3891—97.3%
——29——CVE-2025-5623—97.3%
——29——CVE-2008-5161—97.3%
——29——CVE-2016-3319—97.3%
——29——CVE-2018-19877—97.3%
——29——CVE-2019-9858—97.3%
——29——CVE-2008-2650—97.3%
——29——CVE-2021-3018—97.3%
——29——CVE-2017-16227—97.3%
——29——CVE-2005-0199—97.3%
——29——CVE-2015-64209.8 CRI97.3%
——29Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Service Provider; Unified Computing; Voice and Unified Communications Devices; Video, Streaming, TelePresence, and Transcoding Devices; Wireless; and Cisco Hosted Services products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.17dCVE-2016-3364—97.3%
——29——CVE-2004-0771—97.3%
——29——CVE-2024-5230—97.3%
——29——CVE-2011-1988—97.3%
——29——CVE-2002-1148—97.3%
——29——