Vulnerabilities exploitable today
405,875in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,764
New KEV · 24H0
Exploit Today ≥ 701,697
Distribution · last window
- Critical5,606
- High21,844
- Medium20,347
- Low2,113
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2008-4748—94.8%
——28——CVE-2011-4164—94.8%
——28——CVE-2015-5696—94.8%
——28——CVE-2017-9614—94.8%
——28——CVE-2014-0191—94.8%
——28——CVE-2020-8879—94.8%
——28——CVE-2003-0339—94.8%
——28——CVE-2021-39165—94.8%
——28——CVE-2018-8786—94.8%
——28——CVE-2019-17138—94.8%
——28——CVE-2014-2616—94.8%
——28——CVE-2007-3432—94.8%
——28——CVE-2009-0497—94.8%
——28——CVE-2014-0983—94.8%
——28——CVE-2004-1620—94.8%
——28——CVE-2006-2391—94.8%
——28——CVE-2013-6487—94.8%
——28——CVE-2007-1043—94.8%
——28——CVE-2023-32314—94.8%
——28——CVE-2020-8877—94.8%
——28——CVE-2000-10505.0 NO 94.8%
——28Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra "/" in the beginning of the request (aka the "extra leading slash").37dCVE-2011-4163—94.8%
——28——CVE-2008-6604—94.8%
——28——CVE-2006-4952—94.8%
——28——CVE-2006-4183—94.8%
——28——CVE-2009-0348—94.8%
——28——CVE-2012-5633—94.8%
——28——CVE-2017-3121—94.8%
——28——CVE-2021-39925—94.8%
——28——CVE-2006-4477—94.8%
——28——CVE-2012-6277—94.8%
——28——CVE-2010-1715—94.8%
——28——CVE-2013-0612—94.8%
——28——CVE-2009-3704—94.8%
——28——CVE-2020-10967—94.8%
——28——CVE-2025-681438.8 HIG94.8%
——28Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). In mcp-server-git versions prior to 2025.9.25, the git_init tool accepted arbitrary filesystem paths and created Git repositories without validating the target location. Unlike other tools which required an existing repository, git_init could operate on any directory accessible to the server process, making those directories eligible for subsequent git operations. The tool was removed entirely, as the server is intended to operate on existing repositories only. Users are advised to upgrade to 2025.9.25 or newer to remediate this issue.30dCVE-2023-34261—94.8%
——28——CVE-2007-3621—94.8%
——28——CVE-2022-411137.8 HIG94.8%
——28Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability81dCVE-2010-1147—94.8%
——28——