Vulnerabilities exploitable today
406,192in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,766
New KEV · 24H0
Exploit Today ≥ 701,698
Distribution · last window
- Critical5,617
- High21,811
- Medium20,334
- Low2,108
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2017-11256—94.5%
——28——CVE-2004-0811—94.5%
——28——CVE-2000-10165.0 NO 94.5%
——28The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to read package documentation and obtain system configuration information via an HTTP request for the /doc/packages URL.38dCVE-2016-0030—94.5%
——28——CVE-2017-11255—94.5%
——28——CVE-2021-23157—94.5%
——28——CVE-2014-0506—94.5%
——28——CVE-2017-11232—94.5%
——28——CVE-2018-18955—94.5%
——28——CVE-2008-3314—94.5%
——28——CVE-2017-11238—94.5%
——28——CVE-2025-345139.8 CRI94.5%
——28Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an OS command injection vulnerability in mbus_build_from_csv.php that allows an unauthenticated attacker to execute arbitrary code. Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet.22dCVE-2016-10164—94.5%
——28——CVE-2021-27519—94.5%
——28——CVE-2006-0799—94.5%
——28——CVE-2008-3869—94.5%
——28——CVE-2022-23299—94.5%
——28——CVE-2001-1170—94.5%
——28——CVE-2010-3867—94.5%
——28——CVE-2013-3212—94.5%
——28——CVE-2020-3718—94.5%
——28——CVE-2022-23712—94.5%
——28——CVE-2022-0787—94.5%
——28——CVE-2015-5169—94.5%
——28——CVE-2021-28976—94.5%
——28——CVE-2007-2241—94.5%
——28——CVE-2019-8558—94.5%
——28——CVE-2000-10337.5 NO 94.5%
——28Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (possibly anonymous) and then attempting to guess the passwords of other users.38dCVE-2012-4151—94.5%
——28——CVE-1999-0467—94.5%
——28——CVE-2012-4152—94.5%
——28——CVE-2026-6204—94.5%
——28——CVE-2025-46631—94.5%
——28——CVE-2007-1411—94.5%
——28——CVE-2026-480309.9 CRI94.5%
——28Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.4, an OS Command Injection vulnerability in the terminal action handler allows any authenticated user to execute arbitrary OS commands by injecting shell metacharacters into the 'dir' POST parameter, completely bypassing the TERMINAL_COMMANDS whitelist and achieving full Remote Code Execution with web server privileges. This issue has been patched in version 2.0.4.7dCVE-2016-4107—94.5%
——28——CVE-2025-95846.3 MED94.5%
——28A vulnerability was found in Comfast CF-N1 2.6.0. Affected by this issue is the function update_interface_png of the file /usr/bin/webmgnt. The manipulation of the argument interface/display_name results in command injection. The attack can be executed remotely. The exploit has been made public and could be used.36dCVE-2017-9226—94.5%
——28——CVE-2021-30195—94.5%
——28——CVE-2008-0149—94.5%
——28——