Vulnerabilities exploitable today
406,215in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,766
New KEV · 24H0
Exploit Today ≥ 701,698
Distribution · last window
- Critical5,576
- High21,707
- Medium20,211
- Low2,100
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2013-1518—94.3%
——28——CVE-2012-1774—94.3%
——28——CVE-2000-0640—94.3%
——28——CVE-2017-8726—94.3%
——28——CVE-2024-8213—94.3%
——28——CVE-2005-0064—94.3%
——28——CVE-2020-27009—94.3%
——28——CVE-2021-410797.5 HIG94.3%
——28Apache Tomcat 8.5.0 to 8.5.63, 9.0.0-M1 to 9.0.43 and 10.0.0-M1 to 10.0.2 did not properly validate incoming TLS packets. When Tomcat was configured to use NIO+OpenSSL or NIO2+OpenSSL for TLS, a specially crafted packet could be used to trigger an infinite loop resulting in a denial of service.23dCVE-2024-20450—94.3%
——28——CVE-2021-3273—94.3%
——28——CVE-2018-19512—94.3%
——28——CVE-2017-15879—94.3%
——28——CVE-2015-7644—94.3%
——28——CVE-2022-20127—94.3%
——28——CVE-2024-510929.1 CRI94.3%
——28LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController.php's index(), SettingsController.php's update(), and PollDevice.php's initRrdDirectory().4dCVE-2023-35641—94.3%
——28——CVE-2008-0539—94.3%
——28——CVE-2018-10253—94.3%
——28——CVE-2016-4377—94.3%
——28——CVE-2020-11982—94.3%
——28——CVE-2017-2945—94.3%
——28——CVE-2015-1578—94.3%
——28——CVE-2011-0594—94.3%
——28——CVE-2015-0391—94.3%
——28——CVE-2015-5143—94.3%
——28——CVE-2006-1103—94.3%
——28——CVE-2025-4897—94.3%
——28——CVE-2012-2396—94.3%
——28——CVE-2026-672089.8 CRI94.3%
——28Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remote attackers to execute arbitrary OS commands by connecting to the exposed H2 database web console using default shipped credentials. Attackers can access the unprotected /h2-console endpoint, authenticate with default credentials, and leverage the H2 CREATE ALIAS Runtime.exec() technique to execute arbitrary commands, resulting in root-level code execution when running the stock Docker image.8dCVE-2016-049410.0 NO 94.3%
——28Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.16dCVE-2002-0959—94.3%
——28——CVE-2020-35682—94.3%
——28——CVE-2021-30480—94.3%
——28——CVE-2010-0388—94.3%
——28——CVE-2017-8923—94.3%
——28——CVE-2004-1400—94.3%
——28——CVE-2013-0509—94.3%
——28——CVE-2013-2185—94.3%
——28——CVE-2017-6087—94.3%
——28——CVE-2017-16740—94.3%
——28——