Vulnerabilities exploitable today
4,330in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,504
- High15,968
- Medium14,895
- Low1,474
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2005-3081—99.5%
——30——CVE-2020-13965—99.5%
KEV—80Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability—CVE-2022-44267—99.5%
——30——CVE-2008-0015—99.5%
KEV—80 Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability—CVE-2018-15133—99.5%
KEV—80Laravel Deserialization of Untrusted Data Vulnerability—CVE-2000-0649—99.5%
——30——CVE-2014-3936—99.5%
——30——CVE-2022-21280—99.5%
——30——CVE-2018-12710—99.5%
——30——CVE-2023-32167—99.5%
——30——CVE-2021-38406—99.5%
KEV—80Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability—CVE-2010-2156—99.5%
——30——CVE-2021-35218—99.5%
——30——CVE-2011-3556—99.5%
——30——CVE-2024-22319—99.5%
——30——CVE-2022-38053—99.5%
——30——CVE-2013-0229—99.5%
——30——CVE-2021-2394—99.5%
——30——CVE-2021-213466.1 MED99.5%
——30XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.14dCVE-2009-1979—99.5%
——30——CVE-2022-36099—99.5%
——30——CVE-2020-35951—99.5%
——30——CVE-2010-4417—99.5%
——30——CVE-2018-15811—99.5%
KEV—80DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability—CVE-2014-5073—99.5%
——30——CVE-2022-44698—99.5%
KEVR80Microsoft Defender SmartScreen Security Feature Bypass Vulnerability—CVE-2018-14728—99.5%
——30——CVE-2023-44221—99.5%
KEV—80SonicWall SMA100 Appliances OS Command Injection Vulnerability—CVE-2021-22145—99.5%
——30——CVE-2022-34721—99.5%
——30——CVE-2025-3102—99.5%
——30——CVE-2021-21616—99.5%
——30——CVE-2024-8504—99.5%
——30——CVE-2013-0081—99.5%
——30——CVE-2007-0042—99.5%
——30——CVE-2025-63899.8 CRI99.5%
——30The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeit_articles_pagination_callback() function. This is due to the function accepting user input and then passing that through call_user_func(). This makes it possible for unauthenticated attackers to execute code on the server which can be leveraged to inject backdoors or, for example, create new administrative user accounts.3dCVE-2022-42429—99.5%
——30——CVE-2022-42424—99.5%
——30——CVE-2022-42425—99.5%
——30——CVE-2022-42427—99.5%
——30——