Vulnerabilities exploitable today
376,337in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,713
New KEV · 24H0
Exploit Today ≥ 701,646
Distribution · last window
- Critical2,379
- High8,743
- Medium6,788
- Low727
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-6667—29.8%
——9——CVE-2023-1676—29.8%
——9——CVE-2024-11098—29.8%
——9——CVE-2024-41144—29.8%
——9——CVE-2026-709258.1 HIG29.8%
——9Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).25dCVE-2013-3927—29.8%
——9——CVE-2022-502418.8 HIG29.8%
——9In the Linux kernel, the following vulnerability has been resolved:
NFSD: fix use-after-free on source server when doing inter-server copy
Use-after-free occurred when the laundromat tried to free expired
cpntf_state entry on the s2s_cp_stateids list after inter-server
copy completed. The sc_cp_list that the expired copy state was
inserted on was already freed.
When COPY completes, the Linux client normally sends LOCKU(lock_state x),
FREE_STATEID(lock_state x) and CLOSE(open_state y) to the source server.
The nfs4_put_stid call from nfsd4_free_stateid cleans up the copy state
from the s2s_cp_stateids list before freeing the lock state's stid.
However, sometimes the CLOSE was sent before the FREE_STATEID request.
When this happens, the nfsd4_close_open_stateid call from nfsd4_close
frees all lock states on its st_locks list without cleaning up the copy
state on the sc_cp_list list. When the time the FREE_STATEID arrives the
server returns BAD_STATEID since the lock state was freed. This causes
the use-after-free error to occur when the laundromat tries to free
the expired cpntf_state.
This patch adds a call to nfs4_free_cpntf_statelist in
nfsd4_close_open_stateid to clean up the copy state before calling
free_ol_stateid_reaplist to free the lock state's stid on the reaplist.45dCVE-2020-8744—29.8%
——9——CVE-2017-18422—29.8%
——9——CVE-2017-18397—29.8%
——9——CVE-2026-927179.1 CRI29.8%
——9Covenant through 0.6 registers the CovenantHub SignalR hub without an Authorize attribute, allowing unauthenticated callers to invoke CreateHttpListener and receive a signed JWT token. Attackers can use the obtained token to authenticate against the entire operator API and access grunts, credentials, binaries, events, and the operator roster.2dCVE-2022-48437—29.8%
——9——CVE-2006-1780—29.8%
——9——CVE-2004-0559—29.8%
——9——CVE-2024-9436—29.8%
——9——CVE-2026-67847.5 HIG29.8%
——9Memory safety bugs present in Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150 and Thunderbird 150.66dCVE-2024-13431—29.8%
——9——CVE-2026-45178—29.8%
——9——CVE-2015-10081—29.8%
——9——CVE-2005-3341—29.8%
——9——CVE-2012-4756—29.8%
——9——CVE-2004-1336—29.8%
——9——CVE-2011-1376—29.8%
——9——CVE-2022-42841—29.8%
——9——CVE-2025-49603—29.8%
——9——CVE-2005-3121—29.8%
——9——CVE-2024-13363—29.8%
——9——CVE-2024-21658—29.8%
——9——CVE-2006-3856—29.8%
——9——CVE-2025-27800—29.8%
——9——CVE-2025-24805—29.8%
——9——CVE-2004-0564—29.8%
——9——CVE-2026-35263—29.8%
——9——CVE-2005-2240—29.8%
——9——CVE-2026-163767.5 HIG29.8%
——9Denial-of-service in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.56dCVE-2004-1382—29.8%
——9——CVE-2013-0981—29.8%
——9——CVE-2011-5152—29.8%
——9——CVE-2005-4536—29.8%
——9——CVE-2004-1110—29.8%
——9——