Vulnerabilities exploitable today
402,574in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,756
New KEV · 24H0
Exploit Today ≥ 701,689
Distribution · last window
- Critical4,537
- High18,434
- Medium17,025
- Low1,707
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2017-15363—96.8%
——29——CVE-2005-2943—96.8%
——29——CVE-2010-1535—96.8%
——29——CVE-2018-8381—96.8%
——29——CVE-2018-1018—96.8%
——29——CVE-2018-4966—96.8%
——29——CVE-2023-0507—96.8%
——29——CVE-2013-1289—96.8%
——29——CVE-2012-1861—96.8%
——29——CVE-2018-20220—96.8%
——29——CVE-2018-8469—96.8%
——29——CVE-2023-2575—96.8%
——29——CVE-2015-2413—96.8%
——29——CVE-2014-3597—96.8%
——29——CVE-2002-1293—96.8%
——29——CVE-2016-3740—96.8%
——29——CVE-2018-0993—96.8%
——29——CVE-2007-2952—96.8%
——29——CVE-2019-0794—96.8%
——29——CVE-2016-8511—96.8%
——29——CVE-2025-2359—96.8%
——29——CVE-2012-0774—96.8%
——29——CVE-2016-7279—96.8%
——29——CVE-2008-1203—96.8%
——29——CVE-2017-18638—96.7%
——29——CVE-2021-213505.3 MED96.7%
——29XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to execute arbitrary code only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.18dCVE-2013-6924—96.7%
——29——CVE-2025-40775—96.7%
——29——CVE-2020-11188.6 HIG96.7%
——29A denial of service vulnerability exists in the Windows implementation of Transport Layer Security (TLS) when it improperly handles certain key exchanges. An attacker who successfully exploited the vulnerability could cause a target system to stop responding.
To exploit this vulnerability, a remote unauthenticated attacker could send a specially crafted request to a target system utilizing TLS 1.2 or lower, triggering the system to automatically reboot.
The update addresses the vulnerability by changing the way TLS key exchange messages are validated.67dCVE-2012-3575—96.7%
——29——CVE-2015-2556—96.7%
——29——CVE-2007-2031—96.7%
——29——CVE-2014-4106—96.7%
——29——CVE-2010-1185—96.7%
——29——CVE-2017-0208—96.7%
——29——CVE-2022-45275—96.7%
——29——CVE-2011-1263—96.7%
——29——CVE-2008-3790—96.7%
——29——CVE-2017-9380—96.7%
——29——CVE-2017-5799—96.7%
——29——