Vulnerabilities exploitable today
404,880in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,760
New KEV · 24H0
Exploit Today ≥ 701,693
Distribution · last window
- Critical5,627
- High21,803
- Medium20,190
- Low2,115
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2018-14729—95.7%
——29——CVE-2006-5265—95.7%
——29——CVE-2026-95146.3 MED95.7%
——29A security vulnerability has been detected in Totolink CA750-PoE 6.2c.510. Impacted is the function setNetworkDiag of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. The manipulation of the argument NetDiagHost/NetDiagPingNum/NetDiagPingSize/NetDiagPingTimeOut/NetDiagTracertHop is directly passed by the attacker/so we can control the NetDiagHost/NetDiagPingNum/NetDiagPingSize/NetDiagPingTimeOut/NetDiagTracertHop leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.98dCVE-2023-20078—95.7%
——29——CVE-2021-24169—95.7%
——29——CVE-2001-0113—95.7%
——29——CVE-2014-7878—95.7%
——29——CVE-2013-5618—95.7%
——29——CVE-2008-0434—95.7%
——29——CVE-2020-35737—95.7%
——29——CVE-2024-38054—95.7%
——29——CVE-2009-1671—95.7%
——29——CVE-2011-5181—95.7%
——29——CVE-2008-5748—95.7%
——29——CVE-2021-45968—95.7%
——29——CVE-2004-0270—95.7%
——29——CVE-2008-4910—95.7%
——29——CVE-2007-1825—95.7%
——29——CVE-2015-5149—95.7%
——29——CVE-2007-2715—95.7%
——29——CVE-2015-0346—95.7%
——29——CVE-2013-2344—95.7%
——29——CVE-2007-0887—95.7%
——29——CVE-2013-2349—95.7%
——29——CVE-2022-27787—95.7%
——29——CVE-2013-2348—95.7%
——29——CVE-2018-20555—95.7%
——29——CVE-2002-0719—95.7%
——29——CVE-2006-1730—95.7%
——29——CVE-2015-0358—95.7%
——29——CVE-2007-6483—95.7%
——29——CVE-2004-0112—95.7%
——29——CVE-2006-4899—95.7%
——29——CVE-2004-1288—95.7%
——29——CVE-2011-1980—95.7%
——29——CVE-2015-81267.5 NO 95.7%
——29Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.14dCVE-2026-95316.3 MED95.7%
——29A weakness has been identified in Totolink CA750-PoE 6.2c.510. Impacted is the function setUpgradeUboot of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. This manipulation of the argument FileName causes os command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.98dCVE-2018-1002201—95.7%
——29——CVE-2010-1042—95.7%
——29——CVE-2003-0729—95.7%
——29——