Vulnerabilities exploitable today
406,102in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,764
New KEV · 24H0
Exploit Today ≥ 701,697
Distribution · last window
- Critical5,626
- High21,914
- Medium20,413
- Low2,121
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2008-5062—94.8%
——28——CVE-2025-124288.8 HIG94.8%
——28Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)23dCVE-2004-2519—94.8%
——28——CVE-2000-1093—94.8%
——28——CVE-2019-1001—94.8%
——28——CVE-2017-3202—94.8%
——28——CVE-2008-1888—94.8%
——28——CVE-2003-0304—94.8%
——28——CVE-1999-1508—94.8%
——28——CVE-2014-8493—94.8%
——28——CVE-2014-1493—94.8%
——28——CVE-2019-199067.5 HIG94.8%
——28cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.17dCVE-1999-1521—94.8%
——28——CVE-2019-5367—94.8%
——28——CVE-2017-76744.3 MED94.8%
——28The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did not add an HTTP Vary header indicating that the response varies depending on Origin. This permitted client and server side cache poisoning in some circumstances.15dCVE-2018-0924—94.8%
——28——CVE-2026-82306.3 MED94.8%
——28A flaw has been found in Wavlink NU516U1 240425. The impacted element is the function sys_login1 of the file /cgi-bin/login.cgi. Executing a manipulation of the argument ipaddr can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.99dCVE-2002-1525—94.8%
——28——CVE-2022-29361—94.8%
——28——CVE-2007-2429—94.8%
——28——CVE-2000-0671—94.8%
——28——CVE-2026-82296.3 MED94.8%
——28A vulnerability was detected in Wavlink NU516U1 240425. The affected element is the function WifiBasic of the file /cgi-bin/wireless.cgi. Performing a manipulation of the argument AuthMethod/EncrypType results in os command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure.99dCVE-2014-4912—94.8%
——28——CVE-2019-1471—94.8%
——28——CVE-2006-4834—94.8%
——28——CVE-2024-8128—94.8%
——28——CVE-2007-0873—94.8%
——28——CVE-2018-5042—94.8%
——28——CVE-2015-1371—94.8%
——28——CVE-2003-1487—94.8%
——28——CVE-2021-34624—94.8%
——28——CVE-2003-0748—94.8%
——28——CVE-2021-39926—94.7%
——28——CVE-2007-6515—94.7%
——28——CVE-2002-0836—94.7%
——28——CVE-2021-29484—94.7%
——28——CVE-2015-3225—94.7%
——28——CVE-2004-0580—94.7%
——28——CVE-2006-4918—94.7%
——28——CVE-2016-5019—94.7%
——28——