Vulnerabilities exploitable today
406,192in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,766
New KEV · 24H0
Exploit Today ≥ 701,698
Distribution · last window
- Critical5,632
- High21,880
- Medium20,425
- Low2,120
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2014-3806—94.6%
——28——CVE-2013-2619—94.6%
——28——CVE-2013-0428—94.6%
——28——CVE-2013-2466—94.6%
——28——CVE-2020-35575—94.6%
——28——CVE-2000-0207—94.6%
——28——CVE-2016-0031—94.6%
——28——CVE-2003-1181—94.6%
——28——CVE-2019-96369.8 CRI94.6%
——28Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (credentials, cookies, etc. that are cached against a given hostname). The components are: urllib.parse.urlsplit, urllib.parse.urlparse. The attack vector is: A specially crafted URL could be incorrectly parsed to locate cookies or authentication data and send that information to a different host than when parsed correctly. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.7, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.3, v3.7.3rc1, v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.17dCVE-2014-4306—94.6%
——28——CVE-2005-1686—94.6%
——28——CVE-2000-0240—94.6%
——28——CVE-2019-11356—94.6%
——28——CVE-2002-1581—94.6%
——28——CVE-2006-1610—94.6%
——28——CVE-2014-1202—94.6%
——28——CVE-2005-3294—94.6%
——28——CVE-2016-6505—94.6%
——28——CVE-2015-6750—94.6%
——28——CVE-2023-23777.2 HIG94.6%
——28A vulnerability was detected in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. The impacted element is an unknown function of the component Web Management Interface. The manipulation of the argument Name results in command injection. The attack can be launched remotely. The exploit is now public and may be used. There is ongoing doubt regarding the real existence of this vulnerability. The vendor position is that post-authentication issues are not accepted as vulnerabilities.114dCVE-2023-23767.2 HIG94.6%
——28A security vulnerability has been detected in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. The affected element is an unknown function of the component Web Management Interface. The manipulation of the argument dpi leads to command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. There are still doubts about whether this vulnerability truly exists. The vendor position is that post-authentication issues are not accepted as vulnerabilities.114dCVE-2023-23737.2 HIG94.6%
——28A vulnerability was identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This vulnerability affects unknown code of the component Web Management Interface. Such manipulation of the argument ecn-up leads to command injection. The attack may be performed from remote. The exploit is publicly available and might be used. The actual existence of this vulnerability is currently in question. The vendor position is that post-authentication issues are not accepted as vulnerabilities.114dCVE-2002-2400—94.6%
——28——CVE-2000-0782—94.6%
——28——CVE-2006-3588—94.5%
——28——CVE-2004-1696—94.6%
——28——CVE-2007-2519—94.6%
——28——CVE-2019-10273—94.6%
——28——CVE-2019-11234—94.6%
——28——CVE-2024-6187—94.6%
——28——CVE-2000-0424—94.6%
——28——CVE-2005-3184—94.6%
——28——CVE-2012-1830—94.6%
——28——CVE-2013-5696—94.6%
——28——CVE-2022-36923—94.6%
——28——CVE-2011-2963—94.6%
——28——CVE-2014-7910—94.6%
——28——CVE-2020-7943—94.6%
——28——CVE-2017-8404—94.6%
——28——CVE-2019-15505—94.5%
——28——