Vulnerabilities exploitable today
402,574in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,756
New KEV · 24H0
Exploit Today ≥ 701,689
Distribution · last window
- Critical4,727
- High18,786
- Medium17,139
- Low1,727
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2018-17442—96.6%
——29——CVE-2022-38488—96.6%
——29——CVE-2023-47253—96.6%
——29——CVE-2010-4435—96.6%
——29——CVE-2018-8588—96.6%
——29——CVE-2023-33584—96.6%
——29——CVE-2017-8696—96.6%
——29——CVE-2017-6880—96.6%
——29——CVE-2011-0917—96.6%
——29——CVE-2024-21733—96.6%
——29——CVE-2006-1172—96.6%
——29——CVE-2018-8505—96.6%
——29——CVE-2015-7246—96.6%
——29——CVE-2000-102910.0 NO 96.6%
——29Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query.33dCVE-2000-1220—96.6%
——29——CVE-2011-4161—96.5%
——29——CVE-2015-3112—96.6%
——29——CVE-2016-3329—96.6%
——29——CVE-2021-22824—96.6%
——29——CVE-2023-27267—96.6%
——29——CVE-2018-8542—96.6%
——29——CVE-2016-3294—96.6%
——29——CVE-2016-0044—96.6%
——29——CVE-2019-13383—96.6%
——29——CVE-2014-0251—96.6%
——29——CVE-2016-3327—96.6%
——29——CVE-2006-6010—96.6%
——29——CVE-2018-5511—96.6%
——29——CVE-2017-85296.5 MED96.6%
——29Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker to detect specific files on the user's computer when affected Microsoft scripting engines do not properly handle objects in memory, aka "Microsoft Browser Information Disclosure Vulnerability".17dCVE-2016-3354—96.6%
——29——CVE-2019-15981—96.6%
——29——CVE-2008-4318—96.5%
——29——CVE-2015-1880—96.6%
——29——CVE-2005-3231—96.6%
——29——CVE-2018-8473—96.6%
——29——CVE-2001-0658—96.6%
——29——CVE-2021-391468.5 HIG96.6%
——29XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. XStream 1.4.18 uses no longer a blacklist by default, since it cannot be secured for general purpose.18dCVE-2020-22427—96.6%
——29——CVE-2019-7989—96.6%
——29——CVE-2011-1071—96.6%
——29——