Vulnerabilities exploitable today
406,578in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,766
New KEV · 24H0
Exploit Today ≥ 701,698
Distribution · last window
- Critical5,578
- High21,619
- Medium20,219
- Low2,099
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2015-1560—93.5%
——28——CVE-2013-0729—93.5%
——28——CVE-2006-6624—93.5%
——28——CVE-2007-6273—93.5%
——28——CVE-2018-71647.5 HIG93.5%
——28Node.js versions 9.7.0 and later and 10.x are vulnerable and the severity is MEDIUM. A bug introduced in 9.7.0 increases the memory consumed when reading from the network into JavaScript using the net.Socket object directly as a stream. An attacker could use this cause a denial of service by sending tiny chunks of data in short succession. This vulnerability was restored by reverting to the prior behaviour.25dCVE-2023-28288—93.5%
——28——CVE-2019-10866—93.5%
——28——CVE-2014-4968—93.5%
——28——CVE-2021-43650—93.5%
——28——CVE-2013-7455—93.5%
——28——CVE-2017-8596—93.5%
——28——CVE-2021-45063—93.5%
——28——CVE-2004-0889—93.5%
——28——CVE-2017-7049—93.5%
——28——CVE-2015-8779—93.5%
——28——CVE-2020-20969—93.5%
——28——CVE-2020-5191—93.5%
——28——CVE-2000-1218—93.5%
——28——CVE-2016-2123—93.5%
——28——CVE-2011-1167—93.5%
——28——CVE-1999-0201—93.5%
——28——CVE-2017-15702—93.5%
——28——CVE-2026-425308.1 HIG93.5%
——28NGINX Open Source has a vulnerability in the ngx_http_v3_module module. When NGINX Open Source is configured to use the HTTP/3 QUIC module, a remote unauthenticated attacker along with conditions beyond their control can use a specially crafted HTTP/3 session to reopen a QPACK encoder stream. This may cause a Use-after-Free in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.7dCVE-2009-1565—93.5%
——28——CVE-2008-4391—93.5%
——28——CVE-2017-1000257—93.5%
——28——CVE-2004-0599—93.5%
——28——CVE-2012-2593—93.5%
——28——CVE-2021-44734—93.5%
——28——CVE-2007-6115—93.5%
——28——CVE-2017-3114—93.5%
——28——CVE-2025-7836—93.5%
——28——CVE-2009-4170—93.5%
——28——CVE-2020-27159—93.5%
——28——CVE-2008-5932—93.5%
——28——CVE-2004-0312—93.5%
——28——CVE-2010-3824—93.5%
——28——CVE-2022-35403—93.5%
——28——CVE-2003-1313—93.5%
——28——CVE-2007-2478—93.5%
——28——