Vulnerabilities exploitable today
404,989in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,762
New KEV · 24H0
Exploit Today ≥ 701,694
Distribution · last window
- Critical5,612
- High21,739
- Medium20,128
- Low2,108
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2010-4113—95.4%
——29——CVE-2002-0231—95.4%
——29——CVE-2021-26920—95.4%
——29——CVE-2019-17626—95.4%
——29——CVE-2017-15276—95.4%
——29——CVE-2006-3875—95.4%
——29——CVE-2018-16668—95.4%
——29——CVE-2019-0849—95.4%
——29——CVE-2018-8118—95.4%
——29——CVE-2010-4180—95.4%
——29——CVE-2017-8797—95.4%
——29——CVE-2021-37928—95.4%
——29——CVE-2002-0947—95.4%
——29——CVE-2012-4173—95.4%
——29——CVE-2002-0484—95.4%
——29——CVE-2009-3874—95.4%
——29——CVE-2008-3996—95.4%
——29——CVE-2019-0802—95.4%
——29——CVE-2013-45904.3 NO 95.4%
——29Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 allows attackers to obtain "Tomcat internals" information by leveraging the presence of an untrusted web application with a context.xml, web.xml, *.jspx, *.tagx, or *.tld XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.20dCVE-2013-0615—95.4%
——29——CVE-2004-0079—95.4%
——29——CVE-2019-11678—95.4%
——29——CVE-2010-4325—95.4%
——29——CVE-2007-6341—95.4%
——29——CVE-2017-11223—95.4%
——29——CVE-2013-0604—95.4%
——29——CVE-2004-0888—95.4%
——29——CVE-2011-1470—95.4%
——29——CVE-2022-28917—95.4%
——29——CVE-2018-71608.8 HIG95.4%
——29The Node.js inspector, in 6.x and later is vulnerable to a DNS rebinding attack which could be exploited to perform remote code execution. An attack is possible from malicious websites open in a web browser on the same computer, or another computer with network access to the computer running the Node.js process. A malicious website could use a DNS rebinding attack to trick the web browser to bypass same-origin-policy checks and to allow HTTP connections to localhost or to hosts on the local network. If a Node.js process with the debug port active is running on localhost or on a host on the local network, the malicious website could connect to it as a debugger, and get full code execution access.21dCVE-2006-3867—95.4%
——29——CVE-2013-0606—95.4%
——29——CVE-2006-2863—95.4%
——29——CVE-2019-0952—95.4%
——29——CVE-2007-4504—95.4%
——29——CVE-2006-1728—95.4%
——29——CVE-2015-2544—95.4%
——29——CVE-2025-34102—95.4%
——29——CVE-2018-1311—95.4%
——29——CVE-2018-18793—95.4%
——29——