Vulnerabilities exploitable today
405,617in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,764
New KEV · 24H0
Exploit Today ≥ 701,697
Distribution · last window
- Critical5,594
- High21,701
- Medium20,085
- Low2,112
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-39761—95.0%
——28——CVE-2007-3572—95.0%
——28——CVE-2009-1236—95.0%
——28——CVE-2016-1110—95.0%
——28——CVE-2022-257628.6 HIG95.0%
——28If a web application sends a WebSocket message concurrently with the WebSocket connection closing when running on Apache Tomcat 8.5.0 to 8.5.75 or Apache Tomcat 9.0.0.M1 to 9.0.20, it is possible that the application will continue to use the socket after it has been closed. The error handling triggered in this case could cause the a pooled object to be placed in the pool twice. This could result in subsequent connections using the same object concurrently which could result in data being returned to the wrong use and/or other errors.22dCVE-2020-9664—95.0%
——28——CVE-2009-3890—95.0%
——28——CVE-2007-1680—95.0%
——28——CVE-2007-4599—95.0%
——28——CVE-2007-5602—95.0%
——28——CVE-2009-2980—95.0%
——28——CVE-2019-0564—95.0%
——28——CVE-2011-1249—95.0%
——28——CVE-2021-45841—95.0%
——28——CVE-2023-4115—95.0%
——28——CVE-2018-4997—95.0%
——28——CVE-2009-4538—95.0%
——28——CVE-2010-3460—95.0%
——28——CVE-2000-1054—95.0%
——28——CVE-2013-4316—95.0%
——28——CVE-2022-322085.9 MED95.0%
——28When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client.16dCVE-2007-6332—95.0%
——28——CVE-2008-0401—95.0%
——28——CVE-2010-3213—95.0%
——28——CVE-2013-3356—95.0%
——28——CVE-2023-4112—95.0%
——28——CVE-2020-15434—95.0%
——28——CVE-2013-2156—95.0%
——28——CVE-2013-4743—95.0%
——28——CVE-2000-0198—95.0%
——28——CVE-2007-3191—95.0%
——28——CVE-2018-12758—95.0%
——28——CVE-2018-12787—95.0%
——28——CVE-2000-051510.0 NO 95.0%
——28The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain privileges.21dCVE-2007-2067—95.0%
——28——CVE-2015-4491—95.0%
——28——CVE-2010-1723—95.0%
——28——CVE-2017-8595—95.0%
——28——CVE-2005-1826—95.0%
——28——CVE-2018-8351—95.0%
——28——