Vulnerabilities exploitable today
405,569in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,762
New KEV · 24H0
Exploit Today ≥ 701,694
Distribution · last window
- Critical5,601
- High21,714
- Medium20,104
- Low2,112
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2018-11717—95.1%
——29——CVE-2011-0488—95.1%
——29——CVE-2019-15823—95.1%
——29——CVE-2017-3108—95.1%
——29——CVE-2010-3039—95.1%
——29——CVE-2003-0564—95.0%
——29——CVE-2000-09775.0 NO 95.1%
——29mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file name in the "filename" parameter in a POST request, which is then sent by email to the address specified in the "email" parameter.37dCVE-2016-0734—95.1%
——29——CVE-2019-6690—95.1%
——29——CVE-2003-0651—95.1%
——29——CVE-2019-3999—95.1%
——29——CVE-2022-23121—95.1%
——29——CVE-2005-3713—95.1%
——29——CVE-2015-1000005—95.1%
——29——CVE-2017-10989—95.1%
——29——CVE-2019-12170—95.1%
——29——CVE-2024-33603—95.1%
——29——CVE-2018-16716—95.1%
——29——CVE-2008-6953—95.1%
——29——CVE-2009-3094—95.1%
——29——CVE-2018-5009—95.1%
——29——CVE-2006-5269—95.1%
——29——CVE-2007-0073—95.1%
——29——CVE-2007-4737—95.1%
——29——CVE-2017-8520—95.1%
——29——CVE-2015-0289—95.1%
——29——CVE-2015-0287—95.1%
——29——CVE-2009-1830—95.1%
——29——CVE-2010-0444—95.0%
——29——CVE-2026-408717.2 HIG95.1%
——29mailcow: dockerized is an open source groupware/email suite based on docker. Versions prior to 2026-03b have a second-order SQL injection vulnerability in the quarantine_category field via the Mailcow API. The /api/v1/add/mailbox endpoint stores quarantine_category without validation or sanitization. This value is later used by quarantine_notify.py, which constructs SQL queries using unsafe % string formatting instead of parameterized queries. This results in a delayed (second-order) SQL injection when the quarantine notification job executes, allowing an attacker to inject arbitrary SQL. Using a UNION SELECT, sensitive data (e.g., admin credentials) can be exfiltrated and rendered inside quarantine notification emails. Version 2026-03b fixes the vulnerability.3dCVE-2016-5180—95.1%
——29——CVE-2020-0640—95.1%
——29——CVE-2014-1756—95.1%
——29——CVE-2022-26042—95.1%
——29——CVE-2025-8761—95.1%
——29——CVE-2017-17110—95.1%
——29——CVE-2013-2724—95.1%
——29——CVE-2019-7826—95.1%
——29——CVE-1999-1550—95.1%
——29——CVE-2018-8627—95.1%
——29——