Vulnerabilities exploitable today
405,327in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,762
New KEV · 24H0
Exploit Today ≥ 701,694
Distribution · last window
- Critical5,606
- High21,687
- Medium20,067
- Low2,082
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2010-3571—95.3%
——29——CVE-2022-26013—95.3%
——29——CVE-2011-2194—95.3%
——29——CVE-2020-1374—95.3%
——29——CVE-2017-13713—95.3%
——29——CVE-2026-581389.8 CRI95.3%
——29Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS commands by submitting inline workflow definitions containing malicious JavaScript or Python expressions to the workflow API endpoint prior to authentication. Attackers can exploit unsandboxed GraalVM evaluators configured with HostAccess.ALL or allowAllAccess(true) through INLINE, LAMBDA, DO_WHILE, and SWITCH task types to invoke arbitrary system commands via Java reflection or direct subprocess calls.4dCVE-2012-0991—95.3%
——29——CVE-2019-18676—95.3%
——29——CVE-2017-15665—95.3%
——29——CVE-2004-0432—95.3%
——29——CVE-2011-5219—95.3%
——29——CVE-2018-13336—95.3%
——29——CVE-2019-7844—95.3%
——29——CVE-2003-0044—95.3%
——29——CVE-2005-2390—95.3%
——29——CVE-2023-4430—95.3%
——29——CVE-2021-46360—95.3%
——29——CVE-2015-3301—95.3%
——29——CVE-2017-8653—95.3%
——29——CVE-2020-11897—95.3%
——29——CVE-2008-6976—95.3%
——29——CVE-2024-13163—95.3%
——29——CVE-2018-5037—95.3%
——29——CVE-2010-3613—95.3%
——29——CVE-2026-335267.5 HIG95.3%
——29Squid is a caching proxy for the Web. Prior to version 7.5, due to heap Use-After-Free, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable Denial of Service attack against the Squid service using ICP protocol. This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero `icp_port`). This problem _cannot_ be mitigated by denying ICP queries using `icp_access` rules. Version 7.5 contains a patch.107dCVE-2010-2088—95.3%
——29——CVE-2018-7185—95.3%
——29——CVE-2019-10849—95.3%
——29——CVE-2023-33362—95.3%
——29——CVE-2006-4192—95.3%
——29——CVE-2019-5788—95.3%
——29——CVE-2018-5030—95.3%
——29——CVE-2019-2107—95.3%
——29——CVE-2020-12002—95.3%
——29——CVE-2015-5784—95.3%
——29——CVE-2018-5359—95.3%
——29——CVE-2006-2458—95.3%
——29——CVE-2015-5093—95.3%
——29——CVE-2024-13974—95.3%
——29——CVE-2015-3047—95.3%
——29——