Vulnerabilities exploitable today
406,215in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,766
New KEV · 24H0
Exploit Today ≥ 701,698
Distribution · last window
- Critical5,576
- High21,709
- Medium20,212
- Low2,100
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2007-0272—94.4%
——28——CVE-2007-2059—94.4%
——28——CVE-2002-0300—94.4%
——28——CVE-2026-44112—94.4%
——28——CVE-2011-0271—94.4%
——28——CVE-2016-4248—94.4%
——28——CVE-2005-3267—94.4%
——28——CVE-2009-0328—94.4%
——28——CVE-2005-0527—94.4%
——28——CVE-2002-1593—94.4%
——28——CVE-2007-2263—94.4%
——28——CVE-2002-1685—94.4%
——28——CVE-2008-0647—94.4%
——28——CVE-2008-1910—94.4%
——28——CVE-2017-17309—94.4%
——28——CVE-2014-4151—94.4%
——28——CVE-2011-4640—94.4%
——28——CVE-2013-5639—94.4%
——28——CVE-2018-8784—94.4%
——28——CVE-2017-9001—94.4%
——28——CVE-2007-3472—94.4%
——28——CVE-2009-1627—94.4%
——28——CVE-2006-1454—94.4%
——28——CVE-2023-36713—94.4%
——28——CVE-2021-26475—94.4%
——28——CVE-2012-4176—94.4%
——28——CVE-2020-247508.1 HIG94.4%
——28FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfiguration.23dCVE-2013-1594—94.4%
——28——CVE-2009-1864—94.4%
——28——CVE-2012-5931—94.4%
——28——CVE-2023-41835—94.4%
——28——CVE-2016-7860—94.4%
——28——CVE-2017-14521—94.4%
——28——CVE-2021-24943—94.4%
——28——CVE-2013-2850—94.4%
——28——CVE-2000-0279—94.4%
——28——CVE-2025-23061—94.3%
——28——CVE-2007-4059—94.3%
——28——CVE-2026-18885—94.3%
——28ServiceNow has remediated a code injection vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary code in the ServiceNow platform and gain access to, or modify, instance data beyond what was intended.
ServiceNow deployed a security update to hosted instances and ServiceNow provided the update to our partners and self-hosted customers. We are not currently aware of malicious exploitation against ServiceNow instances.
We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.60dCVE-2014-3493—94.3%
——28——