Vulnerabilities exploitable today
403,583in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,758
New KEV · 24H0
Exploit Today ≥ 701,691
Distribution · last window
- Critical5,587
- High21,596
- Medium20,043
- Low2,105
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2015-2110—95.9%
——29——CVE-2014-2030—95.9%
——29——CVE-2021-37924—95.9%
——29——CVE-2003-0506—95.8%
——29——CVE-2024-213717.0 HIG95.8%
——29Windows Kernel Elevation of Privilege Vulnerability78dCVE-2018-146477.5 HIG95.8%
——29Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming large amounts CPU and RAM. The vulnerability exists in Python versions 3.7.0, 3.6.0 through 3.6.6, 3.5.0 through 3.5.6, 3.4.0 through 3.4.9, 2.7.0 through 2.7.15.20dCVE-2009-3382—95.8%
——29——CVE-2018-4957—95.8%
——29——CVE-2007-3341—95.8%
——29——CVE-2015-2532—95.8%
——29——CVE-2021-21123—95.8%
——29——CVE-2016-8371—95.8%
——29——CVE-2007-4897—95.8%
——29——CVE-2026-1112147.2 HIG95.8%
——29Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with QinQ edit privilege to run commands by storing an unvalidated parent interface name. Attackers can save a crafted 'if' value, then edit the QinQ entry so it is interpolated into ifconfig shell commands, executing commands as root.8dCVE-2012-1541—95.8%
——29——CVE-2003-0619—95.8%
——29——CVE-2024-6036—95.8%
——29——CVE-2020-8194—95.8%
——29——CVE-2005-0484—95.8%
——29——CVE-2018-1140—95.8%
——29——CVE-2019-147506.1 MED95.8%
——29An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It was observed that no input sanitization was provided in the firstname and lastname fields of the application. The insertion of malicious queries in those fields leads to the execution of those queries. This can further lead to cookie stealing or other malicious actions.109dCVE-2014-0536—95.8%
——29——CVE-2007-3109—95.8%
——29——CVE-2015-2531—95.8%
——29——CVE-2018-4967—95.8%
——29——CVE-2015-2196—95.8%
——29——CVE-2018-4970—95.8%
——29——CVE-2001-1130—95.8%
——29——CVE-2017-0278—95.8%
——29——CVE-2005-2923—95.8%
——29——CVE-2000-0191—95.8%
——29——CVE-2016-8380—95.8%
——29——CVE-2018-12824—95.8%
——29——CVE-2007-3406—95.8%
——29——CVE-2007-1733—95.8%
——29——CVE-2018-4955—95.8%
——29——CVE-2010-4259—95.8%
——29——CVE-2023-5674—95.8%
——29——CVE-2018-12815—95.8%
——29——CVE-2020-1407—95.8%
——29——