Vulnerabilities exploitable today
402,779in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,756
New KEV · 24H0
Exploit Today ≥ 701,689
Distribution · last window
- Critical5,082
- High19,899
- Medium18,229
- Low1,858
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2002-1048—96.4%
——29——CVE-2021-27198—96.4%
——29——CVE-2016-3383—96.4%
——29——CVE-2011-1733—96.4%
——29——CVE-2019-1820—96.4%
——29——CVE-2023-50094—96.4%
——29——CVE-2010-1659—96.4%
——29——CVE-2023-50358—96.4%
——29——CVE-2009-3095—96.4%
——29——CVE-2011-1729—96.4%
——29——CVE-2015-2377—96.4%
——29——CVE-2007-1536—96.4%
——29——CVE-2003-0505—96.4%
——29——CVE-2015-6122—96.4%
——29——CVE-2022-22715—96.4%
——29——CVE-2011-3404—96.4%
——29——CVE-2010-1534—96.4%
——29——CVE-2015-24779.3 NO 96.4%
——29Microsoft Office 2007 SP3, Office for Mac 2011, Office for Mac 2016, and Word Viewer allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."12dCVE-2001-0542—96.4%
——29——CVE-2004-2425—96.4%
——29——CVE-2013-4787—96.4%
——29——CVE-2020-12110—96.4%
——29——CVE-2010-1340—96.4%
——29——CVE-2026-346497.5 HIG96.4%
——29Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.60dCVE-2006-1302—96.4%
——29——CVE-2011-0421—96.4%
——29——CVE-2021-41314—96.4%
——29——CVE-2002-0189—96.4%
——29——CVE-2007-1685—96.4%
——29——CVE-2010-3153—96.4%
——29——CVE-2014-5465—96.4%
——29——CVE-2015-2380—96.4%
——29——CVE-2022-0595—96.4%
——29——CVE-2016-3299—96.4%
——29——CVE-2008-0964—96.4%
——29——CVE-2010-4711—96.4%
——29——CVE-2025-59467.2 HIG96.4%
——29Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Centreon Infra Monitoring (Poller reload setup in the configuration modules) allows OS Command Injection.
On the poller parameters page, a user with high privilege is able to concatenate custom instructions into the poller reload command.
This issue affects Infra Monitoring: from 24.10.0 before 24.10.13, from 24.04.0 before 24.04.18, from 23.10.0 before 23.10.28.18dCVE-2015-16839.3 NO 96.4%
——29Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."12dCVE-2010-1858—96.4%
——29——CVE-2010-1491—96.4%
——29——