Vulnerabilities exploitable today
402,537in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,756
New KEV · 24H0
Exploit Today ≥ 701,669
Distribution · last window
- Critical4,456
- High18,108
- Medium16,661
- Low1,666
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2021-24274—97.1%
——29——CVE-2019-7838—97.1%
——29——CVE-2012-0881—97.1%
——29——CVE-2005-2308—97.1%
——29——CVE-2025-712584.3 MED97.1%
——29BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the searchWeb API component that allows authenticated attackers to cause the server to initiate arbitrary outbound requests. Attackers can exploit improper URL validation to perform internal network scanning or interact with internal services, impacting system availability. The following hotfixes remediate the vulnerability: 20.20.02, 20.20.03.002, 20.21.01.001, 20.21.02.002, 20.22.01, 20.22.01.001, 20.23.01, 20.23.01.002, and 20.24.01.79dCVE-2011-1272—97.1%
——29——CVE-2017-10075—97.1%
——29——CVE-2025-0283—97.1%
——29——CVE-2021-33357—97.1%
——29——CVE-2020-24916—97.1%
——29——CVE-2024-10456—97.1%
——29——CVE-2008-3068—97.1%
——29——CVE-2014-0267—97.1%
——29——CVE-2012-0164—97.1%
——29——CVE-2018-13859—97.1%
——29——CVE-2006-4075—97.1%
——29——CVE-2025-341764.3 MED97.1%
——29In pfSense CE /suricata/suricata_ip_reputation.php, the value of the iplist parameter is not sanitized of directory traversal-related strings/characters. This value is directly used in a file existence check operation. While the contents of the file cannot be read, the server reveals whether the file exists, which enables an attacker to enumerate files on the target. The attacker must be authenticated with at least "WebCfg - Services: suricata package" permissions.102dCVE-2019-1559—97.1%
——29——CVE-2023-2071—97.1%
——29——CVE-2007-6681—97.1%
——29——CVE-2018-14706—97.1%
——29——CVE-2023-43641—97.1%
——29——CVE-2009-1891—97.1%
——29——CVE-2017-11763—97.1%
——29——CVE-2019-8641—97.1%
——29——CVE-2020-0650—97.1%
——29——CVE-2017-14244—97.1%
——29——CVE-2019-1241—97.1%
——29——CVE-2014-4862—97.1%
——29——CVE-2014-0310—97.1%
——29——CVE-2017-2361—97.1%
——29——CVE-2002-0021—97.1%
——29——CVE-2005-3330—97.1%
——29——CVE-2024-5008—97.1%
——29——CVE-2022-3416—97.1%
——29——CVE-2019-12185—97.1%
——29——CVE-2021-25076—97.1%
——29——CVE-2016-3360—97.1%
——29——CVE-2015-0921—97.1%
——29——CVE-2019-0577—97.1%
——29——