Vulnerabilities exploitable today
406,286in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,766
New KEV · 24H0
Exploit Today ≥ 701,698
Distribution · last window
- Critical5,561
- High21,586
- Medium20,091
- Low2,090
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2022-279849.8 CRI94.0%
——28CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via the menu_filter parameter at /administrator/templates/default/html/windows/right.php.116dCVE-2006-1681—94.0%
——28——CVE-2020-13949—94.0%
——28——CVE-2025-8825—94.0%
——28——CVE-2017-16419—94.0%
——28——CVE-2016-9934—94.0%
——28——CVE-2008-0047—94.0%
——28——CVE-2021-36005—94.0%
——28——CVE-2025-112986.3 MED94.0%
——28A vulnerability was determined in Belkin F9K1015 1.00.10. Impacted is an unknown function of the file /goform/formSetWanStatic. Executing a manipulation of the argument m_wan_ipaddr can lead to command injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.23dCVE-2018-8234—94.0%
——28——CVE-2016-7398—94.0%
——28——CVE-2000-0201—94.0%
——28——CVE-2013-1880—94.0%
——28——CVE-2010-2996—94.0%
——28——CVE-2015-1389—94.0%
——28——CVE-2009-4245—94.0%
——28——CVE-2020-10898—94.0%
——28——CVE-2025-113036.3 MED94.0%
——28A vulnerability was detected in Belkin F9K1015 1.00.10. Affected is an unknown function of the file /goform/mp. Performing a manipulation of the argument command results in command injection. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.23dCVE-2016-3737—94.0%
——28——CVE-2018-12532—94.0%
——28——CVE-2020-10895—94.0%
——28——CVE-2020-8865—94.0%
——28——CVE-2018-10653—94.0%
——28——CVE-2020-35734—94.0%
——28——CVE-2025-109646.3 MED94.0%
——28A weakness has been identified in Wavlink NU516U1. Affected by this vulnerability is the function sub_401B30 of the file /cgi-bin/firewall.cgi. This manipulation of the argument remoteManagementEnabled causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.21dCVE-2016-3335—94.0%
——28——CVE-2009-4376—94.0%
——28——CVE-2015-0342—94.0%
——28——CVE-2006-6288—94.0%
——28——CVE-2011-2956—94.0%
——28——CVE-2007-4619—94.0%
——28——CVE-2020-27361—94.0%
——28——CVE-2009-3743—94.0%
——28——CVE-2015-3084—94.0%
——28——CVE-2017-7089—94.0%
——28——CVE-2020-10913—94.0%
——28——CVE-2007-6493—94.0%
——28——CVE-2006-0024—94.0%
——28——CVE-2006-4827—94.0%
——28——CVE-2016-3332—94.0%
——28——