Vulnerabilities exploitable today
402,779in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,756
New KEV · 24H0
Exploit Today ≥ 701,689
Distribution · last window
- Critical5,082
- High19,899
- Medium18,229
- Low1,858
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2021-27198—96.4%
——29——CVE-2015-2380—96.4%
——29——CVE-2020-13405—96.4%
——29——CVE-2019-0575—96.4%
——29——CVE-2018-15936—96.4%
——29——CVE-2015-6122—96.4%
——29——CVE-2014-5465—96.4%
——29——CVE-2011-0421—96.4%
——29——CVE-2026-346497.5 HIG96.4%
——29Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.60dCVE-2011-1735—96.4%
——29——CVE-2014-6346—96.4%
——29——CVE-2015-2379—96.4%
——29——CVE-2010-1352—96.4%
——29——CVE-2018-15938—96.4%
——29——CVE-2008-0964—96.4%
——29——CVE-2015-2415—96.4%
——29——CVE-2010-4711—96.4%
——29——CVE-2011-1730—96.4%
——29——CVE-2006-0179—96.4%
——29——CVE-2006-3210—96.4%
——29——CVE-2015-6040—96.4%
——29——CVE-2015-6177—96.4%
——29——CVE-2026-5853—96.4%
——29——CVE-2019-7828—96.4%
——29——CVE-2011-1733—96.4%
——29——CVE-2015-3196—96.4%
——29——CVE-2006-5142—96.4%
——29——CVE-2014-0308—96.4%
——29——CVE-2023-50094—96.4%
——29——CVE-2007-5849—96.4%
——29——CVE-2012-0037—96.4%
——29——CVE-2025-59456—96.4%
——29——CVE-2020-11027—96.4%
——29——CVE-2009-3095—96.4%
——29——CVE-2002-1048—96.4%
——29——CVE-2010-1659—96.4%
——29——CVE-2021-41314—96.4%
——29——CVE-2020-12110—96.4%
——29——CVE-2018-15935—96.4%
——29——CVE-2026-236969.9 CRI96.4%
——29Windmill CE and EE versions 1.276.0 through 1.603.2 contain an SQL injection vulnerability in the folder ownership management functionality that allows authenticated attackers to inject SQL through the owner parameter. An attacker can use the injection to read sensitive data such as the JWT signing secret and administrative user identifiers, forge an administrative token, and then execute arbitrary code via the workflow execution endpoints.104d