Vulnerabilities exploitable today
404,989in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,762
New KEV · 24H0
Exploit Today ≥ 701,694
Distribution · last window
- Critical5,605
- High21,718
- Medium20,110
- Low2,107
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2014-9374—95.4%
——29——CVE-2002-2315—95.4%
——29——CVE-2006-3875—95.4%
——29——CVE-2006-2863—95.4%
——29——CVE-2000-0639—95.4%
——29——CVE-2021-37930—95.4%
——29——CVE-2002-0484—95.4%
——29——CVE-2006-1728—95.4%
——29——CVE-2002-0947—95.4%
——29——CVE-2014-0754—95.4%
——29——CVE-2017-7041—95.4%
——29——CVE-2019-19649—95.4%
——29——CVE-2004-1332—95.4%
——29——CVE-2018-8118—95.4%
——29——CVE-2018-19475—95.4%
——29——CVE-2002-2015—95.4%
——29——CVE-2014-9181—95.4%
——29——CVE-2002-0231—95.4%
——29——CVE-2013-0610—95.4%
——29——CVE-2021-37928—95.4%
——29——CVE-2018-8360—95.4%
——29——CVE-2009-0687—95.4%
——29——CVE-2025-137996.3 MED95.4%
——29A vulnerability has been found in ADSLR NBR1005GPEV2 250814-r037c. This vulnerability affects the function ap_macfilter_del of the file /send_order.cgi. The manipulation of the argument mac leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.11dCVE-2017-15276—95.4%
——29——CVE-2018-16668—95.4%
——29——CVE-2009-2109—95.4%
——29——CVE-2026-4537—95.4%
——29——CVE-2011-1470—95.4%
——29——CVE-2015-4335—95.4%
——29——CVE-2019-17146—95.4%
——29——CVE-2019-20504—95.4%
——29——CVE-2004-0079—95.4%
——29——CVE-2024-12106—95.4%
——29——CVE-2021-37761—95.4%
——29——CVE-2017-11275—95.4%
——29——CVE-2018-1311—95.4%
——29——CVE-2025-22206—95.4%
——29——CVE-2025-618108.4 HIG95.4%
——29ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. A high privileged attacker could exploit this vulnerability by providing maliciously crafted serialized data to the application. Exploitation of this issue requires user interaction and scope is changed.34dCVE-2008-3996—95.4%
——29——CVE-2017-8585—95.4%
——29——