Vulnerabilities exploitable today
4,330in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,494
- High15,902
- Medium14,823
- Low1,466
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2016-1909—99.4%
——30——CVE-2001-0540—99.4%
——30——CVE-2023-02867.4 HIG99.4%
——30There is a type confusion vulnerability relating to X.400 address processing
inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but
the public structure definition for GENERAL_NAME incorrectly specified the type
of the x400Address field as ASN1_TYPE. This field is subsequently interpreted by
the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an
ASN1_STRING.
When CRL checking is enabled (i.e. the application sets the
X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass
arbitrary pointers to a memcmp call, enabling them to read memory contents or
enact a denial of service. In most cases, the attack requires the attacker to
provide both the certificate chain and CRL, neither of which need to have a
valid signature. If the attacker only controls one of these inputs, the other
input must already contain an X.400 address as a CRL distribution point, which
is uncommon. As such, this vulnerability is most likely to only affect
applications which have implemented their own functionality for retrieving CRLs
over a network.7dCVE-2021-28480—99.4%
——30——CVE-2022-21210—99.4%
——30——CVE-2022-28379—99.4%
——30——CVE-2025-203339.9 CRI99.4%
KEV—80Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability3dCVE-2014-1762—99.4%
——30——CVE-2012-4959—99.4%
——30——CVE-2023-38126—99.4%
——30——CVE-2007-3371—99.4%
——30——CVE-2012-4876—99.4%
——30——CVE-2010-1885—99.4%
——30——CVE-2005-0353—99.4%
——30——CVE-2020-10821—99.4%
——30——CVE-2018-5390—99.4%
——30——CVE-2004-1558—99.4%
——30——CVE-2020-16952—99.4%
——30——CVE-2020-4211—99.4%
——30——CVE-2004-0541—99.4%
——30——CVE-2007-4636—99.4%
——30——CVE-2021-4039—99.4%
——30——CVE-2023-38171—99.4%
——30——CVE-2015-2509—99.4%
——30——CVE-2020-2950—99.4%
——30——CVE-2024-4439—99.4%
——30——CVE-2017-8895—99.4%
——30——CVE-2013-4835—99.4%
——30——CVE-2018-8229—99.4%
——30——CVE-2013-2641—99.4%
——30——CVE-2019-0887—99.4%
——30——CVE-2022-28810—99.4%
KEV—80Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability—CVE-2015-0096—99.4%
——30——CVE-2024-37404—99.4%
——30——CVE-2003-0213—99.4%
——30——CVE-1999-0513—99.4%
——30——CVE-2011-3492—99.4%
——30——CVE-2024-24992—99.4%
——30——CVE-2005-2877—99.4%
——30——CVE-2014-5460—99.4%
——30——