PULSE
FEED
vulnKEV agrega CVE-2026-93952 — Arista / VeloCloud OrchestratorvulnKEV agrega CVE-2026-94127 — F5 / BIG-IP APMvulnKEV agrega CVE-2026-93616 — Check Point / Multiple ProductsvulnKEV agrega CVE-2026-85102 — Check Point / Multiple ProductsvulnKEV agrega CVE-2026-7273 — Zyxel / GS1900 Series SwitchesvulnKEV agrega CVE-2025-39964 — Linux / KernelvulnKEV agrega CVE-2026-53266 — Linux / KernelvulnKEV agrega CVE-2025-39682 — Linux / KernelvulnKEV agrega CVE-2026-58704 — Google / PixelvulnKEV agrega CVE-2026-76460 — Cisco / Identity Services EnginevulnKEV agrega CVE-2026-87886 — Acronis / BackupvulnKEV agrega CVE-2026-76461 — Cisco / Secure Email GatewayvulnKEV agrega CVE-2026-84869 — ConnectWise / ScreenConnectvulnKEV agrega CVE-2026-42016 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-93952 — Arista / VeloCloud OrchestratorvulnKEV agrega CVE-2026-94127 — F5 / BIG-IP APMvulnKEV agrega CVE-2026-93616 — Check Point / Multiple ProductsvulnKEV agrega CVE-2026-85102 — Check Point / Multiple ProductsvulnKEV agrega CVE-2026-7273 — Zyxel / GS1900 Series SwitchesvulnKEV agrega CVE-2025-39964 — Linux / KernelvulnKEV agrega CVE-2026-53266 — Linux / KernelvulnKEV agrega CVE-2025-39682 — Linux / KernelvulnKEV agrega CVE-2026-58704 — Google / PixelvulnKEV agrega CVE-2026-76460 — Cisco / Identity Services EnginevulnKEV agrega CVE-2026-87886 — Acronis / BackupvulnKEV agrega CVE-2026-76461 — Cisco / Secure Email GatewayvulnKEV agrega CVE-2026-84869 — ConnectWise / ScreenConnectvulnKEV agrega CVE-2026-42016 — JFrog / Artifactory
CVE Watch378,755 in full archive

Vulnerabilities exploitable today

378,755in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,721
New KEV · 24H0
Exploit Today ≥ 701,652

Distribution · last window

  • Critical
    2,413
  • High
    8,699
  • Medium
    6,979
  • Low
    789
Filters
Filters

Window

Severity

Flags

Vulnerabilities249,641–249,680 · 378,755
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2018-6207
33.9%
10
CVE-2023-47760
33.9%
10
CVE-2024-43293
33.9%
10
CVE-2020-3970
33.9%
10
CVE-2018-6781
33.9%
10
CVE-2023-20172
33.9%
10
CVE-2024-44818
33.9%
10
CVE-2018-6630
33.9%
10
CVE-2018-6788
33.9%
10
CVE-2000-0235
33.9%
10
CVE-2018-8894
33.9%
10
CVE-2026-32132
33.9%
10
CVE-2024-44819
33.9%
10
CVE-2018-8997
33.9%
10
CVE-2018-8991
33.9%
10
CVE-2020-13646
33.9%
10
CVE-2018-6787
33.9%
10
CVE-2018-6778
33.9%
10
CVE-2007-2797
33.9%
10
CVE-2018-5081
33.9%
10
CVE-2018-6631
33.9%
10
CVE-2024-25138
33.9%
10
CVE-2018-6770
33.9%
10
CVE-2018-6209
33.9%
10
CVE-2026-418427.5 HIG
33.9%
10Spring MVC and WebFlux applications are vulnerable to Denial of Service (DoS) attacks when resolving static resources. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.62d
CVE-2018-5084
33.9%
10
CVE-2025-15244
33.9%
10
CVE-2018-6780
33.9%
10
CVE-2018-5087
33.9%
10
CVE-2018-5086
33.9%
10
CVE-2026-31280
33.9%
10
CVE-2018-8995
33.9%
10
CVE-2024-45509
33.9%
10
CVE-2018-6782
33.9%
10
CVE-2018-6625
33.9%
10
CVE-2025-71404
33.9%
10better-auth versions after v0.0.2 and before 1.1.16 contain a reflected cross-site scripting (XSS) vulnerability on the /api/auth/error page, where the value of the 'error' URL parameter is reflected as HTML without proper neutralization. An attacker who coerces a user into visiting a specially-crafted URL can execute arbitrary JavaScript in the context of the user's browser. The issue is fixed in version 1.1.16.14d
CVE-2018-6627
33.9%
10
CVE-2025-2582
33.9%
10
CVE-2021-24703
33.9%
10
CVE-2023-47180
33.9%
10