Vulnerabilities exploitable today
404,989in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,762
New KEV · 24H0
Exploit Today ≥ 701,694
Distribution · last window
- Critical5,614
- High21,754
- Medium20,141
- Low2,112
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2012-4174—95.5%
——29——CVE-2008-2006—95.5%
——29——CVE-2005-4553—95.5%
——29——CVE-2017-9789—95.5%
——29——CVE-2015-5213—95.5%
——29——CVE-2016-5768—95.5%
——29——CVE-2024-8785—95.5%
——29——CVE-2003-0100—95.5%
——29——CVE-2008-6998—95.5%
——29——CVE-2015-2137—95.5%
——29——CVE-2018-15576—95.5%
——29——CVE-2015-3209—95.5%
——29——CVE-2014-0561—95.5%
——29——CVE-2020-11699—95.5%
——29——CVE-2009-0410—95.5%
——29——CVE-2004-1094—95.5%
——29——CVE-2001-0042—95.5%
——29——CVE-2007-4155—95.5%
——29——CVE-2022-22588—95.5%
——29——CVE-2012-4175—95.5%
——29——CVE-2012-3253—95.5%
——29——CVE-2026-5184—95.5%
——29——CVE-2018-147199.8 CRI95.5%
——29FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.21dCVE-2020-7199—95.5%
——29——CVE-2016-6802—95.5%
——29——CVE-2003-0356—95.5%
——29——CVE-2001-1454—95.5%
——29——CVE-2005-2274—95.5%
——29——CVE-2023-51788.8 HIG95.5%
——29A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, which may permit remote code execution or lead to local privilege escalation.15dCVE-2024-35520—95.5%
——29——CVE-2002-0561—95.5%
——29——CVE-2017-8695—95.5%
——29——CVE-2025-84899.8 CRI95.5%
——29The King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor plugin for WordPress is vulnerable to privilege escalation in versions 24.12.92 to 51.1.14 . This is due to the plugin not properly restricting the roles that users can register with. This makes it possible for unauthenticated attackers to register with administrator-level user accounts.22dCVE-2017-11286—95.5%
——29——CVE-2015-0411—95.5%
——29——CVE-2017-11927—95.5%
——29——CVE-2012-3254—95.5%
——29——CVE-2008-3408—95.5%
——29——CVE-2021-33912—95.5%
——29——CVE-2019-8820—95.5%
——29——