Vulnerabilities exploitable today
378,068in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,716
New KEV · 24H0
Exploit Today ≥ 701,651
Distribution · last window
- Critical2,293
- High8,417
- Medium6,703
- Low757
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2013-3024—32.1%
——10——CVE-2014-0142—32.1%
——10——CVE-2026-646127.5 HIG32.1%
——10A flaw was found in libcupsfilters and cups-filters. The PNG image reading function creates a libpng reader without installing an error recovery handler, causing the CUPS image filter process to abort when processing a malformed PNG file. An unauthenticated attacker could exploit this by submitting a specially crafted PNG print job, leading to denial of service of the in-flight print job.28dCVE-2014-7954—32.1%
——10——CVE-2023-40663—32.1%
——10——CVE-2023-49558—32.1%
——10——CVE-2024-55958—32.0%
——10——CVE-2024-32705—32.1%
——10——CVE-2025-52432—32.1%
——10——CVE-2024-2019—32.1%
——10——CVE-2022-41148—32.1%
——10——CVE-2025-231696.1 MED32.1%
——10The Versa Director SD-WAN orchestration platform allows customization of the user interface, including the header, footer, and logo. However, the input provided for these customizations is not properly validated or sanitized, allowing a malicious user to inject and store cross-site scripting (XSS) payloads.
Exploitation Status:
Versa Networks is not aware of any reported instance where this vulnerability was exploited. Proof of concept for this vulnerability has been disclosed by third party security researchers.
Workarounds or Mitigation:
There are no workarounds to disable the GUI option. Versa recommends that Director be upgraded to one of the remediated software versions.18dCVE-2022-41149—32.1%
——10——CVE-2024-12012—32.1%
——10——CVE-2025-50579—32.1%
——10——CVE-2023-27616—32.1%
——10——CVE-2026-32261—32.1%
——10——CVE-2025-25984—32.1%
——10——CVE-2016-7545—32.1%
——10——CVE-2025-26758—32.1%
——10——CVE-2026-22885—32.1%
——10——CVE-2023-36747—32.1%
——10——CVE-2026-755697.7 HIG32.1%
——10A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access to the remote repository to inject and execute arbitrary code during the build. The consequence is a compromised build process, potentially leading to the distribution of malicious software.13dCVE-2019-8413—32.0%
——10——CVE-2017-12342—32.1%
——10——CVE-2020-14715—32.1%
——10——CVE-2017-6914—32.1%
——10——CVE-2013-1764—32.1%
——10——CVE-2016-4831—32.1%
——10——CVE-2026-55951—32.1%
——10The Erlang/OTP httpc HTTP client does not enforce a limit on the total size of response headers received from a server. The max_header_size option defaults to nolimit, and httpc_response:parse_headers/6 accumulates every header into a list before the length check runs (which only fires after the terminating CRLF CRLF is received).
A malicious or compromised HTTP server can send an arbitrarily large number of headers, or headers with very large values, causing the client process to allocate unbounded memory until the system runs out of memory or the BEAM VM crashes. A proof-of-concept server sending 100,000 headers of roughly 4000 bytes each caused the client VM to allocate over 13 GB of memory in under 30 seconds.
Any application using httpc:request/4,5 to connect to untrusted servers is affected. No authentication is required: any server the client connects to (including via a redirect or man-in-the-middle) can trigger the exhaustion.
This issue affects OTP from OTP 17.0 before OTP 27.3.4.17, from OTP 28.0 before OTP 28.5.0.6, and from OTP 29.0 before OTP 29.0.6, corresponding to inets from 5.10 before 9.3.2.7, from 9.4 before 9.6.2.3, and from 9.7 before 9.7.2. Whether OTP before OTP 17.0, corresponding to inets before 5.10, is affected is unknown.14dCVE-2025-43908—32.1%
——10——CVE-2005-4344—32.1%
——10——CVE-2026-12685—32.1%
——10——CVE-2014-4434—32.1%
——10——CVE-2026-3545—32.1%
——10——CVE-2026-82758—32.1%
——10Improper Authentication vulnerability in ash-project ash_authentication_oauth2_server allows an unauthenticated attacker to register OAuth clients even when Dynamic Client Registration is gated by an initial access token.
resolve_secret/3 in AshAuthentication.Oauth2Server (reached through __resolve_secret__!) treated any return other than {:ok, _} or :error from a configured {module, function, args} or 2-arity-function secret provider as a valid secret, wrapping nil, false, or "" as {:ok, value}. When the initial_access_token resolves to such an empty value, POST /oauth/register compares the presented bearer token against it and the comparison passes with no token supplied, so registration is open although it was configured closed. The same fail-open affected other resolved secrets such as signing_secret.
This issue affects ash_authentication_oauth2_server: from 0.1.0 before 0.3.1.13dCVE-2025-52428—32.1%
——10——CVE-2025-27497—32.1%
——10——CVE-2025-52854—32.1%
——10——CVE-2026-2931—32.1%
——10——