Vulnerabilities exploitable today
405,425in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,762
New KEV · 24H0
Exploit Today ≥ 701,694
Distribution · last window
- Critical5,620
- High21,747
- Medium20,102
- Low2,112
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2007-0976—95.2%
——29——CVE-2025-2620—95.2%
——29——CVE-2020-10257—95.2%
——29——CVE-2018-7103—95.2%
——29——CVE-2022-369467.5 HIG95.2%
——29nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len.15dCVE-2017-11212—95.2%
——29——CVE-2007-2872—95.2%
——29——CVE-2009-3658—95.2%
——29——CVE-2017-8609—95.2%
——29——CVE-2006-5278—95.2%
——29——CVE-2013-5072—95.2%
——29——CVE-2017-15691—95.2%
——29——CVE-2015-3900—95.2%
——29——CVE-2014-4937—95.2%
——29——CVE-2017-8603—95.2%
——29——CVE-2026-291467.5 HIG95.2%
——29Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration.
This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.0.0-M1 through 10.1.52, from 9.0.13 through 9..115, from 8.5.38 through 8.5.100, from 7.0.100 through 7.0.109.
Users are recommended to upgrade to version 11.0.19, 10.1.53 and 9.0.116, which fixes the issue.3dCVE-2004-1236—95.2%
——29——CVE-2006-4131—95.2%
——29——CVE-2017-11294—95.2%
——29——CVE-2015-1653—95.2%
——29——CVE-2009-1201—95.2%
——29——CVE-2004-1261—95.2%
——29——CVE-2002-0288—95.2%
——29——CVE-2026-29058—95.2%
——29——CVE-2009-1828—95.2%
——29——CVE-2004-2059—95.2%
——29——CVE-2004-0760—95.2%
——29——CVE-2008-2214—95.2%
——29——CVE-2007-6323—95.2%
——29——CVE-2026-0907—95.2%
——29——CVE-2001-0507—95.2%
——29——CVE-2017-8224—95.2%
——29——CVE-2016-7132—95.2%
——29——CVE-2020-1283—95.2%
——29——CVE-2007-1837—95.2%
——29——CVE-2016-4955—95.2%
——29——CVE-2007-2281—95.2%
——29——CVE-2022-0846—95.2%
——29——CVE-1999-0204—95.2%
——29——CVE-2020-361888.1 HIG95.2%
——29FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.21d