Vulnerabilities exploitable today
405,569in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,762
New KEV · 24H0
Exploit Today ≥ 701,694
Distribution · last window
- Critical5,601
- High21,720
- Medium20,108
- Low2,112
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2018-10751—95.1%
——29——CVE-2013-4338—95.1%
——29——CVE-2017-8738—95.1%
——29——CVE-2017-11804—95.1%
——29——CVE-2009-1684—95.1%
——29——CVE-2016-4313—95.1%
——29——CVE-2026-1112187.2 HIG95.1%
——29Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Traffic Shaper Limiters privileges to execute root commands by tampering with the limiter number field. Attackers can submit a malicious hidden 'number' value when editing a limiter, then delete it so delete_queue() passes the unquoted value to dnctl via /bin/sh as root.10dCVE-2017-8639—95.1%
——29——CVE-2009-2550—95.1%
——29——CVE-2020-0832—95.1%
——29——CVE-2005-1740—95.1%
——29——CVE-2022-21705—95.1%
——29——CVE-2005-1112—95.1%
——29——CVE-2017-11154—95.1%
——29——CVE-2019-19822—95.1%
——29——CVE-2008-3159—95.1%
——29——CVE-2022-1903—95.1%
——29——CVE-2024-30163—95.1%
——29——CVE-2019-14896—95.1%
——29——CVE-2000-0612—95.1%
——29——CVE-2009-3904—95.1%
——29——CVE-2011-2094—95.1%
——29——CVE-2019-1138—95.1%
——29——CVE-2024-120857.5 HIG95.1%
——29A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.17dCVE-2018-4200—95.1%
——29——CVE-2017-5814—95.1%
——29——CVE-2016-8024—95.1%
——29——CVE-2022-31845—95.1%
——29——CVE-2004-2760—95.1%
——29——CVE-2007-5289—95.1%
——29——CVE-2019-1217—95.1%
——29——CVE-2009-3604—95.1%
——29——CVE-2006-4484—95.1%
——29——CVE-2023-34105—95.1%
——29——CVE-2020-0833—95.1%
——29——CVE-2007-6333—95.1%
——29——CVE-2017-8638—95.1%
——29——CVE-2020-253689.8 CRI95.1%
——29A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbitrary web scripts via shell metacharacters in the PrivateLogin field to Login.113dCVE-2017-11930—95.1%
——29——CVE-2012-6708—95.1%
——29——