Vulnerabilities exploitable today
402,574in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,756
New KEV · 24H0
Exploit Today ≥ 701,689
Distribution · last window
- Critical4,518
- High18,344
- Medium16,888
- Low1,702
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2000-08177.5 NO 96.7%
——29Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute arbitrary commands via malformed data, aka the "Netmon Protocol Parsing" vulnerability.33dCVE-2005-0399—96.7%
——29——CVE-2014-4111—96.7%
——29——CVE-2025-6463—96.7%
——29——CVE-2026-17176—96.7%
——29An OS
command injection vulnerability in the TDDP module of Deco BE11000 and Deco M9 Plus allows an
adjacent network attacker to execute arbitrary commands with root privileges by
sending a crafted UDP packet.
Successful exploitation may lead to complete
device compromise, including unauthorized command execution, modification of
device settings, and loss of confidentiality, integrity, and availability24dCVE-2008-2712—96.7%
——29——CVE-2008-2950—96.7%
——29——CVE-2018-1301—96.7%
——29——CVE-2013-1602—96.7%
——29——CVE-2018-18557—96.7%
——29——CVE-2024-35517—96.7%
——29——CVE-2002-0163—96.7%
——29——CVE-2015-1739—96.7%
——29——CVE-2025-43860—96.7%
——29——CVE-2000-0770—96.7%
——29——CVE-2014-4108—96.7%
——29——CVE-2026-5850—96.7%
——29——CVE-2004-1308—96.7%
——29——CVE-2025-21309—96.7%
——29——CVE-2006-2022—96.7%
——29——CVE-2010-1533—96.7%
——29——CVE-2023-29464—96.7%
——29——CVE-2019-7110—96.7%
——29——CVE-2024-353978.8 HIG96.7%
——29TOTOLINK CP900L v4.1.5cu.798_B20221228 weas discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.109dCVE-1999-0755—96.7%
——29——CVE-2017-5930—96.7%
——29——CVE-2016-0793—96.7%
——29——CVE-2015-2780—96.7%
——29——CVE-2018-4916—96.7%
——29——CVE-2008-1878—96.7%
——29——CVE-2000-0222—96.7%
——29——CVE-2026-346507.5 HIG96.7%
——29Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.59dCVE-2019-12569—96.7%
——29——CVE-2017-16848—96.7%
——29——CVE-2021-27156—96.7%
——29——CVE-2012-0780—96.7%
——29——CVE-2018-4915—96.7%
——29——CVE-2021-40378—96.7%
——29——CVE-2019-7127—96.7%
——29——CVE-2014-2799—96.7%
——29——