PULSE
FEED
CVE Watch406,402 in full archive

Vulnerabilities exploitable today

406,402in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,766
New KEV · 24H0
Exploit Today ≥ 701,698

Distribution · last window

  • Critical
    5,571
  • High
    21,585
  • Medium
    20,097
  • Low
    2,093
Filters
Filters

Window

Severity

Flags

Vulnerabilities25,441–25,480 · 406,402
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2017-3162—
93.7%
——28——
CVE-2005-2971—
93.7%
——28——
CVE-2015-5715—
93.7%
——28——
CVE-2013-3608—
93.7%
——28——
CVE-2017-0166—
93.7%
——28——
CVE-2007-0654—
93.7%
——28——
CVE-2010-3032—
93.7%
——28——
CVE-2015-6710—
93.7%
——28——
CVE-2006-0709—
93.7%
——28——
CVE-2016-1061—
93.7%
——28——
CVE-2020-8464—
93.7%
——28——
CVE-2016-1067—
93.7%
——28——
CVE-2016-1055—
93.7%
——28——
CVE-2009-4987—
93.7%
——28——
CVE-2024-4815—
93.7%
——28——
CVE-2013-0444—
93.7%
——28——
CVE-2014-4343—
93.7%
——28——
CVE-2008-3865—
93.7%
——28——
CVE-2015-6718—
93.7%
——28——
CVE-2016-1066—
93.7%
——28——
CVE-2026-403218.0 HIG
93.7%
——28DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.2.2, a user could upload a specially crafted SVG file that could include scripts that can target both authenticated and unauthenticated DNN users. The impact is increased if the scripts are run by a power user. Version 10.2.2 patches the issue.7d
CVE-2020-29495—
93.7%
——28——
CVE-2016-1054—
93.7%
——28——
CVE-2018-5743—
93.7%
——28——
CVE-2018-16044—
93.7%
——28——
CVE-2015-6711—
93.7%
——28——
CVE-2013-1879—
93.7%
——28——
CVE-2015-7618—
93.7%
——28——
CVE-2016-1069—
93.7%
——28——
CVE-2020-1342—
93.7%
——28——
CVE-2014-0507—
93.7%
——28——
CVE-2015-6719—
93.7%
——28——
CVE-2015-6709—
93.7%
——28——
CVE-2015-6724—
93.7%
——28——
CVE-2013-0614—
93.7%
——28——
CVE-2016-1053—
93.7%
——28——
CVE-2026-2621610.0 CRI
93.7%
——28Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec(). The __import__ builtin was included in the allowed builtins, allowing unauthenticated remote attackers to import arbitrary modules and execute system commands. Successful exploitation allows full server compromise, including arbitrary command execution, file read and write access, sensitive data exfiltration, and lateral movement within internal networks.25d
CVE-2016-1046—
93.7%
——28——
CVE-2016-1059—
93.7%
——28——
CVE-2022-32212—
93.7%
——28——