Vulnerabilities exploitable today
402,574in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,756
New KEV · 24H0
Exploit Today ≥ 701,689
Distribution · last window
- Critical4,727
- High18,786
- Medium17,139
- Low1,727
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2013-0984—96.6%
——29——CVE-2005-3912—96.6%
——29——CVE-2006-2362—96.6%
——29——CVE-2006-0022—96.6%
——29——CVE-2014-4170—96.6%
——29——CVE-2023-23369—96.6%
——29——CVE-2014-1816—96.6%
——29——CVE-2001-0815—96.6%
——29——CVE-2017-0293—96.6%
——29——CVE-2017-3083—96.6%
——29——CVE-2010-4562—96.6%
——29——CVE-2018-4064—96.6%
——29——CVE-2005-2126—96.6%
——29——CVE-2007-2434—96.6%
——29——CVE-2010-0820—96.6%
——29——CVE-2017-3042—96.6%
——29——CVE-2019-0885—96.6%
——29——CVE-2025-0890—96.6%
——29——CVE-2003-0865—96.6%
——29——CVE-2012-5362—96.6%
——29——CVE-2022-23329—96.6%
——29——CVE-2025-27210—96.6%
——29——CVE-2018-13056.5 MED96.6%
——29Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied once a Servlet had been loaded. Because security constraints defined in this way apply to the URL pattern and any URLs below that point, it was possible - depending on the order Servlets were loaded - for some security constraints not to be applied. This could have exposed resources to users who were not authorised to access them.10dCVE-2017-16352—96.6%
——29——CVE-2016-1907—96.6%
——29——CVE-2018-11742—96.6%
——29——CVE-2011-0420—96.6%
——29——CVE-2007-4567—96.6%
——29——CVE-2006-1868—96.6%
——29——CVE-2012-5364—96.6%
——29——CVE-2024-39225—96.6%
——29——CVE-2015-6091—96.6%
——29——CVE-2021-3958—96.6%
——29——CVE-2025-34174—96.6%
——29——CVE-2014-8877—96.6%
——29——CVE-2020-24148—96.6%
——29——CVE-2019-8044—96.6%
——29——CVE-2011-1868—96.6%
——29——CVE-2019-13597—96.6%
——29——CVE-2016-7196—96.6%
——29——