Vulnerabilities exploitable today
406,286in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,766
New KEV · 24H0
Exploit Today ≥ 701,698
Distribution · last window
- Critical5,576
- High21,617
- Medium20,112
- Low2,092
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-4502—94.0%
——28——CVE-2007-6550—94.0%
——28——CVE-2003-0726—94.0%
——28——CVE-2021-299219.8 CRI94.0%
——28In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This (in some situations) allows attackers to bypass access control that is based on IP addresses.24dCVE-2009-0025—94.0%
——28——CVE-1999-0627—94.0%
——28——CVE-2019-6530—94.0%
——28——CVE-2015-1000010—94.0%
——28——CVE-2006-6767—94.0%
——28——CVE-2015-1920—94.0%
——28——CVE-2024-0546—94.0%
——28——CVE-2016-8580—94.0%
——28——CVE-2015-0261—94.0%
——28——CVE-2025-45779—94.0%
——28——CVE-2025-109586.3 MED94.0%
——28A flaw has been found in Wavlink NU516U1 M16U1_V240425. Impacted is the function sub_403010 of the file /cgi-bin/wireless.cgi of the component AddMac Page. This manipulation of the argument macAddr causes command injection. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.21dCVE-2007-1891—94.0%
——28——CVE-2023-42117—94.0%
——28——CVE-2020-10897—94.0%
——28——CVE-2017-6060—94.0%
——28——CVE-2006-2875—94.0%
——28——CVE-2020-24572—94.0%
——28——CVE-2009-4245—94.0%
——28——CVE-2010-2996—94.0%
——28——CVE-2025-8830—94.0%
——28——CVE-2016-0932—94.0%
——28——CVE-2015-7183—94.0%
——28——CVE-2016-5017—94.0%
——28——CVE-2017-2460—94.0%
——28——CVE-2025-109636.3 MED94.0%
——28A security flaw has been discovered in Wavlink NU516U1 M16U1_V240425. Affected is the function sub_4016F0 of the file /cgi-bin/firewall.cgi. The manipulation of the argument del_flag results in command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.21dCVE-2020-17407—94.0%
——28——CVE-2022-41953—94.0%
——28——CVE-2005-2846—94.0%
——28——CVE-2018-10653—94.0%
——28——CVE-2020-10895—94.0%
——28——CVE-2010-4541—94.0%
——28——CVE-2009-2557—94.0%
——28——CVE-2025-7092—94.0%
——28——CVE-2025-8825—94.0%
——28——CVE-2008-6423—94.0%
——28——CVE-2023-46224—94.0%
——28——