Vulnerabilities exploitable today
402,558in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,756
New KEV · 24H0
Exploit Today ≥ 701,669
Distribution · last window
- Critical4,455
- High18,103
- Medium16,660
- Low1,668
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2014-2802—97.0%
——29——CVE-2014-2794—97.0%
——29——CVE-2016-3279—97.0%
——29——CVE-2016-0139—97.0%
——29——CVE-2014-2813—97.0%
——29——CVE-2011-0411—97.0%
——29——CVE-2002-1289—97.0%
——29——CVE-2018-12857—97.0%
——29——CVE-2013-3166—97.0%
——29——CVE-2013-1491—97.0%
——29——CVE-2007-3075—97.0%
——29——CVE-2014-2797—97.0%
——29——CVE-2006-4052—97.0%
——29——CVE-2014-2809—97.0%
——29——CVE-2014-2789—97.0%
——29——CVE-2014-2811—97.0%
——29——CVE-2007-1578—97.0%
——29——CVE-2017-10784—97.0%
——29——CVE-2012-2552—97.0%
——29——CVE-2014-2795—97.0%
——29——CVE-2007-5327—96.9%
——29——CVE-2007-3389—96.9%
——29——CVE-2006-5864—96.9%
——29——CVE-2022-3924—96.9%
——29——CVE-2001-0726—96.9%
——29——CVE-2024-21407—96.9%
——29——CVE-2015-9499—96.9%
——29——CVE-2011-4313—96.9%
——29——CVE-2018-4901—96.9%
——29——CVE-2023-335329.8 CRI96.9%
——29There is a command injection vulnerability in the Netgear R6250 router with Firmware Version 1.0.4.48. If an attacker gains web management privileges, they can inject commands into the post request parameters, thereby gaining shell privileges.108dCVE-2011-1277—96.9%
——29——CVE-2021-28809—96.9%
——29——CVE-2007-0103—96.9%
——29——CVE-2006-0028—96.9%
——29——CVE-2020-11749—96.9%
——29——CVE-2018-0472—96.9%
——29——CVE-2013-42865.8 NO 96.9%
——29Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is used, does not properly handle certain inconsistent HTTP request headers, which allows remote attackers to trigger incorrect identification of a request's length and conduct request-smuggling attacks via (1) multiple Content-Length headers or (2) a Content-Length header and a "Transfer-Encoding: chunked" header. NOTE: this vulnerability exists because of an incomplete fix for CVE-2005-2090.16dCVE-2019-0583—96.9%
——29——CVE-2017-7981—96.9%
——29——CVE-2015-1686—96.9%
——29——