Vulnerabilities exploitable today
406,402in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,766
New KEV · 24H0
Exploit Today ≥ 701,698
Distribution · last window
- Critical5,571
- High21,586
- Medium20,097
- Low2,093
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2019-2413—93.7%
——28——CVE-2025-32023—93.7%
——28——CVE-2019-7970—93.7%
——28——CVE-2019-7094—93.7%
——28——CVE-2012-4560—93.7%
——28——CVE-2023-41080—93.7%
——28——CVE-2020-27423—93.7%
——28——CVE-2016-5842—93.7%
——28——CVE-2024-10516—93.7%
——28——CVE-2026-425308.1 HIG93.7%
——28NGINX Open Source has a vulnerability in the ngx_http_v3_module module. When NGINX Open Source is configured to use the HTTP/3 QUIC module, a remote unauthenticated attacker along with conditions beyond their control can use a specially crafted HTTP/3 session to reopen a QPACK encoder stream. This may cause a Use-after-Free in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.7dCVE-2010-0040—93.7%
——28——CVE-2020-4521—93.7%
——28——CVE-2010-3183—93.7%
——28——CVE-2020-11087.5 HIG93.7%
——28A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Core or .NET Framework web application. The vulnerability can be exploited remotely, without authentication.
A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET Core or .NET Framework application.
The update addresses the vulnerability by correcting how the .NET Core or .NET Framework web application handles web requests.75dCVE-2019-7972—93.7%
——28——CVE-2024-33112—93.7%
——28——CVE-2013-2758—93.7%
——28——CVE-2007-3959—93.7%
——28——CVE-2006-3015—93.7%
——28——CVE-2007-2791—93.7%
——28——CVE-2004-1805—93.7%
——28——CVE-2013-1950—93.7%
——28——CVE-2010-2435—93.7%
——28——CVE-2019-7998—93.7%
——28——CVE-2018-11222—93.7%
——28——CVE-2019-7971—93.7%
——28——CVE-2001-0383—93.7%
——28——CVE-2019-12137—93.7%
——28——CVE-2007-1049—93.7%
——28——CVE-2016-1075—93.7%
——28——CVE-2026-406887.2 HIG93.7%
——28An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow a remote privileged attacker to execute arbitrary code or command via crafted HTTP requests.101dCVE-2017-2476—93.7%
——28——CVE-2007-0454—93.7%
——28——CVE-2022-211665.5 MED93.7%
——28Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.19dCVE-2017-11302—93.7%
——28——CVE-2006-1463—93.7%
——28——CVE-2012-6301—93.7%
——28——CVE-2019-7975—93.7%
——28——CVE-2007-0504—93.7%
——28——CVE-2017-5227—93.7%
——28——