Vulnerabilities exploitable today
402,779in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,756
New KEV · 24H0
Exploit Today ≥ 701,689
Distribution · last window
- Critical5,082
- High19,899
- Medium18,228
- Low1,858
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-343118.8 HIG96.4%
——29IPFire versions prior to 2.29 (Core Update 198) contain a command injection vulnerability that allows an authenticated attacker to execute arbitrary commands as the user 'nobody' via multiple parameters when creating a Proxy report. When a user creates a Proxy report the application issues an HTTP POST to /cgi-bin/logs.cgi/calamaris.dat and reads the values of DAY_BEGIN, MONTH_BEGIN, YEAR_BEGIN, DAY_END, MONTH_END, YEAR_END, NUM_DOMAINS, PERF_INTERVAL, NUM_CONTENT, HIST_LEVEL, NUM_HOSTS, NUM_URLS, and BYTE_UNIT, which are interpolated directly into the shell invocation of the mkreport helper. Because these parameters are never sanitized for improper characters or constructs, a crafted POST can inject shell metacharacters into one or more fields, causing arbitrary commands to run with the privileges of the 'nobody' user.31dCVE-2011-1944—96.4%
——29——CVE-2006-5835—96.4%
——29——CVE-2001-0021—96.4%
——29——CVE-2016-9269—96.4%
——29——CVE-2016-3243—96.4%
——29——CVE-2007-4227—96.4%
——29——CVE-2009-4177—96.4%
——29——CVE-2026-22844—96.4%
——29——CVE-2015-0969—96.4%
——29——CVE-2023-49074—96.4%
——29——CVE-2019-8647—96.4%
——29——CVE-2016-3261—96.4%
——29——CVE-2018-12386—96.4%
——29——CVE-2018-15934—96.4%
——29——CVE-2013-10050—96.4%
——29——CVE-2014-0527—96.4%
——29——CVE-2019-8043—96.4%
——29——CVE-2014-6360—96.4%
——29——CVE-2017-1000373—96.4%
——29——CVE-2018-12860—96.4%
——29——CVE-2008-3732—96.4%
——29——CVE-2016-3241—96.4%
——29——CVE-2026-30822—96.4%
——29——CVE-2020-16899—96.4%
——29——CVE-2018-8529—96.4%
——29——CVE-2006-1618—96.4%
——29——CVE-2022-25216—96.4%
——29——CVE-2022-26159—96.4%
——29——CVE-2016-0138—96.4%
——29——CVE-2024-1873—96.4%
——29——CVE-2013-10037—96.4%
——29——CVE-2017-0040—96.4%
——29——CVE-2021-44352—96.4%
——29——CVE-2010-4107—96.4%
——29——CVE-2006-4965—96.4%
——29——CVE-2006-3877—96.4%
——29——CVE-2002-0651—96.4%
——29——CVE-2003-0460—96.4%
——29——CVE-2011-4034—96.4%
——29——