Vulnerabilities exploitable today
406,402in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,766
New KEV · 24H0
Exploit Today ≥ 701,698
Distribution · last window
- Critical5,571
- High21,585
- Medium20,097
- Low2,093
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2017-3162—93.7%
——28——CVE-2005-2971—93.7%
——28——CVE-2015-5715—93.7%
——28——CVE-2013-3608—93.7%
——28——CVE-2017-0166—93.7%
——28——CVE-2007-0654—93.7%
——28——CVE-2010-3032—93.7%
——28——CVE-2015-6710—93.7%
——28——CVE-2006-0709—93.7%
——28——CVE-2016-1061—93.7%
——28——CVE-2020-8464—93.7%
——28——CVE-2016-1067—93.7%
——28——CVE-2016-1055—93.7%
——28——CVE-2009-4987—93.7%
——28——CVE-2024-4815—93.7%
——28——CVE-2013-0444—93.7%
——28——CVE-2014-4343—93.7%
——28——CVE-2008-3865—93.7%
——28——CVE-2015-6718—93.7%
——28——CVE-2016-1066—93.7%
——28——CVE-2026-403218.0 HIG93.7%
——28DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.2.2, a user could upload a specially crafted SVG file that could include scripts that can target both authenticated and unauthenticated DNN users. The impact is increased if the scripts are run by a power user. Version 10.2.2 patches the issue.7dCVE-2020-29495—93.7%
——28——CVE-2016-1054—93.7%
——28——CVE-2018-5743—93.7%
——28——CVE-2018-16044—93.7%
——28——CVE-2015-6711—93.7%
——28——CVE-2013-1879—93.7%
——28——CVE-2015-7618—93.7%
——28——CVE-2016-1069—93.7%
——28——CVE-2020-1342—93.7%
——28——CVE-2014-0507—93.7%
——28——CVE-2015-6719—93.7%
——28——CVE-2015-6709—93.7%
——28——CVE-2015-6724—93.7%
——28——CVE-2013-0614—93.7%
——28——CVE-2016-1053—93.7%
——28——CVE-2026-2621610.0 CRI93.7%
——28Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec(). The __import__ builtin was included in the allowed builtins, allowing unauthenticated remote attackers to import arbitrary modules and execute system commands. Successful exploitation allows full server compromise, including arbitrary command execution, file read and write access, sensitive data exfiltration, and lateral movement within internal networks.25dCVE-2016-1046—93.7%
——28——CVE-2016-1059—93.7%
——28——CVE-2022-32212—93.7%
——28——