Vulnerabilities exploitable today
378,068in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,716
New KEV · 24H0
Exploit Today ≥ 701,651
Distribution · last window
- Critical2,293
- High8,417
- Medium6,703
- Low757
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-52855—32.1%
——10——CVE-2025-59463—32.1%
——10——CVE-2020-14304—32.1%
——10——CVE-2024-32678—32.0%
——10——CVE-2026-30969—32.0%
——10——CVE-2024-0630—32.0%
——10——CVE-2024-52972—32.0%
——10——CVE-2012-0810—32.0%
——10——CVE-2019-10981—32.0%
——10——CVE-2017-0704—32.0%
——10——CVE-2025-21618—32.0%
——10——CVE-2024-0071—32.0%
——10——CVE-2026-856737.5 HIG32.0%
——10LLaMA-Factory contains a server-side request forgery vulnerability in the OpenAI-compatible API multimodal media URL handler that allows unauthenticated attackers to bypass SSRF validation. The check_ssrf_url guard validates URLs once but requests.get follows redirects and re-resolves DNS without re-validation, enabling attackers to use HTTP redirects or DNS rebinding to access internal addresses and cloud metadata endpoints.17dCVE-2020-2697—32.0%
——10——CVE-2021-36891—32.0%
——10——CVE-2022-4377—32.0%
——10——CVE-2026-200735.8 MED32.0%
——10A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to send traffic that should be denied through an affected device.
This vulnerability is due to improper error handling when an affected device that is joining a cluster runs out of memory while replicating access control rules. An attacker could exploit this vulnerability by sending traffic that should be blocked through the device. A successful exploit could allow the attacker to bypass access controls and reach devices in protected networks.41dCVE-2011-5056—32.0%
——10——CVE-2026-187384.7 MED32.0%
——10Shlink versions 5.0.0 through 5.1.5 contain a CSV formula injection vulnerability that allows unauthenticated remote attackers to plant spreadsheet formulas into exported visit data by supplying malicious values in User-Agent, Referer, or request path headers beginning with formula-triggering characters such as =, +, -, or @. Attackers can craft a single unauthenticated request against any short URL to embed DDE or WEBSERVICE formula payloads into CSV cells, which are then executed on an administrator's client machine when the exported CSV file is opened in a spreadsheet application that evaluates formulas.12dCVE-2006-0379—32.0%
——10——CVE-2014-5231—32.0%
——10——CVE-2023-38730—32.0%
——10——CVE-2025-11103—32.0%
——10——CVE-2024-12950—32.0%
——10——CVE-2010-3365—32.0%
——10——CVE-2020-20943—32.0%
——10——CVE-2010-3358—32.0%
——10——CVE-2025-59895—32.0%
——10——CVE-2023-45897—32.0%
——10——CVE-2025-377498.2 HIG32.0%
——10In the Linux kernel, the following vulnerability has been resolved:
net: ppp: Add bound checking for skb data on ppp_sync_txmung
Ensure we have enough data in linear buffer from skb before accessing
initial bytes. This prevents potential out-of-bounds accesses
when processing short packets.
When ppp_sync_txmung receives an incoming package with an empty
payload:
(remote) gef➤ p *(struct pppoe_hdr *) (skb->head + skb->network_header)
$18 = {
type = 0x1,
ver = 0x1,
code = 0x0,
sid = 0x2,
length = 0x0,
tag = 0xffff8880371cdb96
}
from the skb struct (trimmed)
tail = 0x16,
end = 0x140,
head = 0xffff88803346f400 "4",
data = 0xffff88803346f416 ":\377",
truesize = 0x380,
len = 0x0,
data_len = 0x0,
mac_len = 0xe,
hdr_len = 0x0,
it is not safe to access data[2].
[pabeni@redhat.com: fixed subj typo]54dCVE-2023-29422—32.0%
——10——CVE-2022-22791—32.0%
——10——CVE-2013-4958—32.0%
——10——CVE-2011-1834—32.0%
——10——CVE-2026-868307.2 HIG32.0%
——10Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center solution before version 1.5.1 might allow an authenticated remote user with application-level access to read, approve, modify, or revoke arbitrary access requests, thereby obtaining unintended temporary elevated access to the AWS accounts accessed using the TEAM deployment.
This issue has been addressed in TEAM version 1.5.1 or later. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.7dCVE-2010-0306—32.0%
——10——CVE-2026-851819.8 CRI32.0%
——10CAT uses Java String.hashCode as the sole integrity check for session cookies without server-side keying, allowing attackers to forge valid checksums offline. Attackers can set the x-forwarded-for header to bypass IP binding validation and create admin sessions with full configuration access.18dCVE-2006-1011—32.0%
——10——CVE-2026-54728—32.0%
——10bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). Prior to BunkerWeb 1.6.12 and BunkerWeb PRO 0.57, authenticated Host header handling in the BunkerWeb UI and API improperly validated and neutralized user-controlled input in a configuration-dependent path, allowing a low-privileged authenticated user to escalate privileges and affect confidentiality, integrity, and availability of the BunkerWeb instance. This issue is fixed in BunkerWeb version 1.6.12 and BunkerWeb PRO version 0.57.66dCVE-2024-48925—32.0%
——10——