Vulnerabilities exploitable today
402,574in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,756
New KEV · 24H0
Exploit Today ≥ 701,689
Distribution · last window
- Critical4,537
- High18,432
- Medium17,024
- Low1,707
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2017-0138—96.7%
——29——CVE-2017-8625—96.7%
——29——CVE-2011-4539—96.7%
——29——CVE-2014-2785—96.7%
——29——CVE-2005-0558—96.7%
——29——CVE-2014-2786—96.7%
——29——CVE-2010-4977—96.7%
——29——CVE-2011-3310—96.7%
——29——CVE-2005-1477—96.7%
——29——CVE-2014-3478—96.7%
——29——CVE-2016-3389—96.7%
——29——CVE-2011-3190—96.7%
——29——CVE-2015-3456—96.7%
——29——CVE-2020-12695—96.7%
——29——CVE-2025-4322—96.7%
——29——CVE-2017-0151—96.7%
——29——CVE-2014-9119—96.7%
——29——CVE-2017-5991—96.7%
——29——CVE-2017-0131—96.7%
——29——CVE-2011-1280—96.7%
——29——CVE-2014-2674—96.7%
——29——CVE-2007-5360—96.7%
——29——CVE-2004-2532—96.7%
——29——CVE-2010-4328—96.7%
——29——CVE-2026-936749.8 CRI96.7%
——29IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.17dCVE-2026-30821—96.7%
——29——CVE-2006-00339.3 NO 96.7%
——29Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted PNG image that triggers memory corruption when it is parsed.32dCVE-2007-1530—96.7%
——29——CVE-2011-3499—96.7%
——29——CVE-2014-5091—96.7%
——29——CVE-2006-4253—96.7%
——29——CVE-2023-38925—96.7%
——29——CVE-2015-64209.8 CRI96.7%
——29Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Service Provider; Unified Computing; Voice and Unified Communications Devices; Video, Streaming, TelePresence, and Transcoding Devices; Wireless; and Cisco Hosted Services products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.18dCVE-2022-36971—96.7%
——29——CVE-2014-4065—96.7%
——29——CVE-2021-27156—96.7%
——29——CVE-2019-7109—96.7%
——29——CVE-2002-1156—96.7%
——29——CVE-2001-0555—96.7%
——29——CVE-2018-4915—96.7%
——29——