Vulnerabilities exploitable today
406,313in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,766
New KEV · 24H0
Exploit Today ≥ 701,698
Distribution · last window
- Critical5,562
- High21,577
- Medium20,086
- Low2,090
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2005-1992—93.8%
——28——CVE-2005-4316—93.8%
——28——CVE-2017-11332—93.8%
——28——CVE-2015-1352—93.8%
——28——CVE-2021-344677.1 HIG93.8%
——28Microsoft SharePoint Server Remote Code Execution Vulnerability83dCVE-2019-7784—93.8%
——28——CVE-2026-46368—93.8%
——28——CVE-2020-1597—93.8%
——28——CVE-2006-4848—93.8%
——28——CVE-2017-4984—93.8%
——28——CVE-2025-612609.8 CRI93.8%
——28A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protocol) configuration files. The attack is triggered when a user runs the codex command inside a malicious or compromised repository. Codex automatically loads project-local .env and .codex/config.toml files without requiring user confirmation, allowing attackers to embed arbitrary commands that execute immediately.120dCVE-2010-0364—93.8%
——28——CVE-2013-1891—93.8%
——28——CVE-2017-2522—93.8%
——28——CVE-2017-0045—93.8%
——28——CVE-2017-12545—93.8%
——28——CVE-2022-279859.8 CRI93.8%
——28CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via /administrator/alerts/alertLightbox.php.116dCVE-2006-0381—93.8%
——28——CVE-2021-371377.5 HIG93.8%
——28The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by supplying malicious input that decompresses to a very big size (via a network stream or a file) or by sending a huge skippable chunk.24dCVE-2012-4406—93.8%
——28——CVE-2004-1540—93.8%
——28——CVE-2016-8331—93.8%
——28——CVE-2010-1417—93.8%
——28——CVE-2011-0694—93.8%
——28——CVE-2024-20454—93.8%
——28——CVE-2007-6435—93.8%
——28——CVE-2015-0784—93.8%
——28——CVE-2025-2135—93.8%
——28——CVE-2019-7788—93.8%
——28——CVE-2021-28312—93.8%
——28——CVE-2002-2253—93.8%
——28——CVE-2017-11359—93.8%
——28——CVE-2025-34082—93.8%
——28——CVE-2019-130574.9 MED93.8%
——28An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g., for multi-tenant deployments), slapd does not properly stop a rootDN from requesting authorization as an identity from another database during a SASL bind or with a proxyAuthz (RFC 4370) control. (It is not a common configuration to deploy a system where the server administrator and a DB administrator enjoy different levels of trust.)19dCVE-2002-1135—93.8%
——28——CVE-2017-11237—93.8%
——28——CVE-2005-1222—93.8%
——28——CVE-2019-8316—93.8%
——28——CVE-2002-2251—93.8%
——28——CVE-2006-6603—93.8%
——28——