Vulnerabilities exploitable today
379,275in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,721
New KEV · 24H0
Exploit Today ≥ 701,654
Distribution · last window
- Critical2,375
- High8,543
- Medium7,076
- Low796
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2023-24062—34.9%
——10——CVE-2024-56139—34.9%
——10——CVE-2025-68562—34.9%
——10——CVE-2023-2808—34.9%
——10——CVE-2016-5613—34.9%
——10——CVE-2026-44691—34.9%
——10——CVE-2025-1597—34.9%
——10——CVE-2025-48877—34.9%
——10——CVE-2024-30467—34.9%
——10——CVE-2024-24964—34.9%
——10——CVE-2025-59242—34.8%
——10——CVE-2022-40258—34.9%
——10——CVE-2024-1228—34.9%
——10——CVE-2024-45249—34.9%
——10——CVE-2024-11112—34.9%
——10——CVE-2022-38447—34.9%
——10——CVE-2010-3297—34.9%
——10——CVE-2022-39183—34.9%
——10——CVE-2020-23060—34.9%
——10——CVE-2025-40712—34.9%
——10——CVE-2022-38448—34.9%
——10——CVE-2025-1741—34.9%
——10——CVE-2026-59160—34.9%
——10——CVE-2025-51092—34.9%
——10——CVE-2023-0869—34.9%
——10——CVE-2008-2514—34.9%
——10——CVE-2003-0670—34.9%
——10——CVE-2006-4172—34.9%
——10——CVE-2026-675817.5 HIG34.9%
——10Authentication Bypass by Capture-replay in ZenHive mpp allows an unauthenticated remote client to obtain paid resources by resubmitting one settled on-chain transfer.
MPP.Methods.EVM.verify/2 accepts a transaction-hash credential and matches a transfer purely on token, to and amount (ERC-20) or to and value (native). It binds the proof neither to the challenge being verified nor to any record of prior use, and the generic MPP.Plug dedup store keys on challenge.id, which is regenerated for every 402 response. On a static-price route, a single historical transfer matching the charge therefore satisfies an unbounded number of later charges, including transfers an attacker can read off a public block explorer.
This issue affects mpp: from 0.3.0 before 0.6.3.14dCVE-2002-0442—34.8%
——10——CVE-2003-1067—34.8%
——10——CVE-2021-44023—34.8%
——10——CVE-2017-18658—34.8%
——10——CVE-2026-88297.5 HIG34.8%
——10HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities.
The XS routine backing HTML::Entities::_decode_entities cached a pointer (repl) into the entity-value SV returned by hv_fetch on the entity2char hash. When the input SV was identical to a value SV in that hash, and that value contained its own key as an entity reference, a later call to grow_gap() reallocated the SV's PV buffer and freed the backing allocation that repl still pointed into. The subsequent copy loop read repl_len bytes from the freed allocation.
The read may disclose adjacent heap contents into the destination SV.64dCVE-2024-3796—34.8%
——10——CVE-2006-3784—34.8%
——10——CVE-2026-86688—34.8%
——10Session Fixation vulnerability in team-alembic ash_authentication allows an attacker who can plant a session identifier in a victim's browser to hold an authenticated session once that victim signs in.
AshAuthentication.Plug.Helpers.store_in_session/2 writes the authenticated subject into the existing session with Plug.Conn.put_session/3 and never calls Plug.Conn.configure_session(renew: true), so the identifier the visitor arrived with carries into their authenticated session. Every authentication event reaches this one function: the default success/4 injected by AshAuthentication.Phoenix.Controller.__using__/1, the AuthController emitted by mix ash_authentication_phoenix.install, and remember-me auto-login. AshAuthentication.Phoenix.Plug.store_in_session/2 is a defdelegate to it. Logout does not close the window either, because clear_session/2 ends with Plug.Conn.clear_session/1, which clears session contents but leaves the identifier intact, so a planted identifier survives a logout-then-login cycle.
This issue affects ash_authentication: from 0.2.0 before 4.15.0 and from 5.0.0-rc.0 before 5.0.0-rc.14.6dCVE-2017-18659—34.8%
——10——CVE-2024-30878—34.8%
——10——CVE-2024-33974—34.8%
——10——