Vulnerabilities exploitable today
378,631in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,721
New KEV · 24H4
Exploit Today ≥ 701,652
Distribution · last window
- Critical2,396
- High8,640
- Medium6,936
- Low787
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2012-1101—33.6%
——10——CVE-2024-5697—33.6%
——10——CVE-2026-622348.1 HIG33.6%
——10Grav before 2.0.4 fails to restrict cURL protocols in webhook dispatch, allowing authenticated users with api.webhooks.write permission to create webhooks with file://, dict://, or gopher:// URLs. Attackers can trigger webhook events to read local files, access process information, or pivot to internal services via unrestricted protocol handlers.61dCVE-2014-4460—33.6%
——10——CVE-2020-36163—33.6%
——10——CVE-2016-9102—33.6%
——10——CVE-2025-11531—33.6%
——10——CVE-2023-34853—33.6%
——10——CVE-2014-4224—33.6%
——10——CVE-2025-58715—33.6%
——10——CVE-2026-921406.8 MED33.6%
——10Jenkins Gitee Plugin 1301.v8957053c7902 and earlier does not escape the sender name from Gitee push webhook payloads in build causes, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to trigger builds via the Jenkins Gitee Plugin webhook endpoint.4dCVE-2022-41738—33.6%
——10——CVE-2025-450597.5 HIG33.6%
——10D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fn parameter in the tgfile_htm function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.60dCVE-2025-57802—33.6%
——10——CVE-2024-5864—33.6%
——10——CVE-2024-51579—33.6%
——10——CVE-2023-27625—33.6%
——10——CVE-2020-13657—33.6%
——10——CVE-2024-21041—33.6%
——10——CVE-2002-0940—33.6%
——10——CVE-2023-44095—33.6%
——10——CVE-2023-51321—33.6%
——10——CVE-2024-51621—33.6%
——10——CVE-2013-0133—33.6%
——10——CVE-2023-30326—33.6%
——10——CVE-2024-37564—33.6%
——10——CVE-2023-7029—33.6%
——10——CVE-2006-5011—33.6%
——10——CVE-2024-28833—33.6%
——10——CVE-2026-40863—33.6%
——10——CVE-2007-0367—33.6%
——10——CVE-2022-46905—33.6%
——10——CVE-2026-598358.6 HIG33.6%
——10A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may allow an unauthenticated attacker to access the VNC server of VMs performing scanning via network requests.69dCVE-2024-43110—33.6%
——10——CVE-2016-6362—33.6%
——10——CVE-2016-9105—33.6%
——10——CVE-2026-12442—33.6%
——10——CVE-2024-51620—33.6%
——10——CVE-2015-1108—33.6%
——10——CVE-2019-11847—33.6%
——10——