Vulnerabilities exploitable today
406,102in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,764
New KEV · 24H0
Exploit Today ≥ 701,697
Distribution · last window
- Critical5,626
- High21,911
- Medium20,412
- Low2,121
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-8134—94.7%
——28——CVE-2025-64249.8 CRI94.7%
——28A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability was fixed in Firefox 140, Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.7dCVE-2019-0918—94.7%
——28——CVE-2024-48992—94.7%
——28——CVE-2011-2441—94.7%
——28——CVE-2021-21105—94.7%
——28——CVE-2008-1055—94.7%
——28——CVE-2006-4125—94.7%
——28——CVE-2017-11866—94.7%
——28——CVE-2004-0193—94.7%
——28——CVE-2026-52806—94.7%
——28——CVE-2005-3344—94.7%
——28——CVE-2020-36849—94.7%
——28——CVE-2019-0780—94.7%
——28——CVE-1999-0253—94.7%
——28——CVE-2001-0037—94.7%
——28——CVE-2025-345159.8 CRI94.7%
——28Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an execution with unnecessary privileges vulnerability in sync_project.sh that allows an attacker to escalate privileges to root. Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet.22dCVE-2011-3012—94.7%
——28——CVE-2016-07625.9 MED94.7%
——28The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not process the supplied password if the supplied user name did not exist. This made a timing attack possible to determine valid user names. Note that the default configuration includes the LockOutRealm which makes exploitation of this vulnerability harder.22dCVE-2004-1019—94.7%
——28——CVE-2021-25741—94.7%
——28——CVE-2008-3851—94.7%
——28——CVE-2018-87277.5 HIG94.7%
——28Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6 and earlier allows an attacker to traverse the file system to access files or directories via the Web Client webserver.74dCVE-2002-0836—94.7%
——28——CVE-2024-8133—94.7%
——28——CVE-2003-0039—94.7%
——28——CVE-2016-2163—94.7%
——28——CVE-2004-0327—94.7%
——28——CVE-2018-18865—94.7%
——28——CVE-2022-23808—94.7%
——28——CVE-2018-4241—94.7%
——28——CVE-2010-3555—94.7%
——28——CVE-2015-2113—94.7%
——28——CVE-2020-9999—94.7%
——28——CVE-2013-5123—94.7%
——28——CVE-2013-0796—94.7%
——28——CVE-2005-3707—94.7%
——28——CVE-2004-2060—94.7%
——28——CVE-2006-4918—94.7%
——28——CVE-2003-0409—94.7%
——28——