Vulnerabilities exploitable today
406,313in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,766
New KEV · 24H0
Exploit Today ≥ 701,698
Distribution · last window
- Critical5,562
- High21,577
- Medium20,086
- Low2,090
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2019-7784—93.8%
——28——CVE-2014-6040—93.8%
——28——CVE-2021-344677.1 HIG93.8%
——28Microsoft SharePoint Server Remote Code Execution Vulnerability83dCVE-2004-1125—93.8%
——28——CVE-2021-46315—93.8%
——28——CVE-2000-0038—93.8%
——28——CVE-2024-20454—93.8%
——28——CVE-2011-0079—93.8%
——28——CVE-2019-8316—93.8%
——28——CVE-2025-493889.8 CRI93.8%
——28Incorrect Privilege Assignment vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Privilege Escalation.This issue affects Miraculous Core Plugin: from n/a through <= 2.0.7.14dCVE-2017-12545—93.8%
——28——CVE-2010-0364—93.8%
——28——CVE-2005-1514—93.8%
——28——CVE-2025-612609.8 CRI93.8%
——28A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protocol) configuration files. The attack is triggered when a user runs the codex command inside a malicious or compromised repository. Codex automatically loads project-local .env and .codex/config.toml files without requiring user confirmation, allowing attackers to embed arbitrary commands that execute immediately.120dCVE-2017-11332—93.8%
——28——CVE-2019-8255—93.8%
——28——CVE-2008-2404—93.8%
——28——CVE-2021-27246—93.8%
——28——CVE-2017-11237—93.8%
——28——CVE-2025-342679.9 CRI93.8%
——28Flowise v3.0.1 < 3.0.8 and all versions after with 'ALLOW_BUILTIN_DEP' enabled contain an authenticated remote code execution vulnerability and node VM sandbox escape due to insecure use of integrated modules (Puppeteer and Playwright) within the nodevm execution environment. An authenticated attacker able to create or run a tool that leverages Puppeteer/Playwright can specify attacker-controlled browser binary paths and parameters. When the tool executes, the attacker-controlled executable/parameters are run on the host and circumvent the intended nodevm sandbox restrictions, resulting in execution of arbitrary code in the context of the host. This vulnerability was incorrectly assigned as a duplicate CVE-2025-26319 by the developers and should be considered distinct from that identifier.24dCVE-2017-0045—93.8%
——28——CVE-2016-6504—93.8%
——28——CVE-2008-4211—93.8%
——28——CVE-2016-8331—93.8%
——28——CVE-2005-1992—93.8%
——28——CVE-2011-0694—93.8%
——28——CVE-2021-28312—93.8%
——28——CVE-2017-11359—93.8%
——28——CVE-2017-6980—93.8%
——28——CVE-2020-5775—93.8%
——28——CVE-2004-1540—93.8%
——28——CVE-2024-548878.0 HIG93.8%
——28TP-Link TL-WR940N V3 and V4 with firmware 3.16.9 and earlier contain a buffer overflow via the dnsserver1 and dnsserver2 parameters at /userRpm/Wan6to4TunnelCfgRpm.htm. This vulnerability allows an authenticated attacker to execute arbitrary code on the remote device in the context of the root user.120dCVE-2006-0381—93.8%
——28——CVE-2023-28227—93.8%
——28——CVE-2009-0113—93.8%
——28——CVE-2014-4154—93.8%
——28——CVE-2009-0071—93.8%
——28——CVE-2015-8388—93.8%
——28——CVE-2017-4984—93.8%
——28——CVE-2006-4848—93.8%
——28——