Vulnerabilities exploitable today
406,102in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,764
New KEV · 24H0
Exploit Today ≥ 701,697
Distribution · last window
- Critical5,626
- High21,914
- Medium20,413
- Low2,121
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2018-7316—94.8%
——28——CVE-2024-8128—94.8%
——28——CVE-2026-82306.3 MED94.8%
——28A flaw has been found in Wavlink NU516U1 240425. The impacted element is the function sys_login1 of the file /cgi-bin/login.cgi. Executing a manipulation of the argument ipaddr can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.99dCVE-2018-12771—94.8%
——28——CVE-2014-1493—94.8%
——28——CVE-2016-6809—94.8%
——28——CVE-2020-35498—94.8%
——28——CVE-2000-0133—94.8%
——28——CVE-2005-3519—94.8%
——28——CVE-2015-1371—94.8%
——28——CVE-2019-5367—94.8%
——28——CVE-2008-2654—94.8%
——28——CVE-2017-76744.3 MED94.8%
——28The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did not add an HTTP Vary header indicating that the response varies depending on Origin. This permitted client and server side cache poisoning in some circumstances.15dCVE-2021-34624—94.8%
——28——CVE-2013-3344—94.8%
——28——CVE-2008-5856—94.8%
——28——CVE-2018-12822—94.8%
——28——CVE-2006-2330—94.8%
——28——CVE-2007-2317—94.8%
——28——CVE-2009-1431—94.8%
——28——CVE-2006-4834—94.8%
——28——CVE-2018-0924—94.8%
——28——CVE-2007-5156—94.8%
——28——CVE-2015-7384—94.8%
——28——CVE-1999-1521—94.8%
——28——CVE-2024-21437—94.8%
——28——CVE-2001-1209—94.8%
——28——CVE-2026-82276.3 MED94.8%
——28A weakness has been identified in Wavlink NU516U1 240425. This issue affects the function wzdapMesh of the file /cgi-bin/adm.cgi. This manipulation causes os command injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.99dCVE-2018-8002—94.8%
——28——CVE-2007-1993—94.8%
——28——CVE-2018-16794—94.8%
——28——CVE-2021-41833—94.8%
——28——CVE-2018-5020—94.8%
——28——CVE-2014-8493—94.8%
——28——CVE-2015-3648—94.8%
——28——CVE-2022-35741—94.8%
——28——CVE-2004-0904—94.8%
——28——CVE-2016-1453—94.8%
——28——CVE-2017-3202—94.8%
——28——CVE-2017-7056—94.8%
——28——