Vulnerabilities exploitable today
406,792in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,766
New KEV · 24H0
Exploit Today ≥ 701,698
Distribution · last window
- Critical5,588
- High21,775
- Medium20,297
- Low2,113
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2015-0305—93.4%
——28——CVE-2014-0422—93.4%
——28——CVE-2018-0987—93.4%
——28——CVE-2016-6810—93.4%
——28——CVE-2009-2363—93.4%
——28——CVE-2018-10870—93.4%
——28——CVE-2015-7521—93.4%
——28——CVE-2015-4063—93.4%
——28——CVE-2005-4439—93.4%
——28——CVE-2001-1256—93.4%
——28——CVE-2011-1344—93.4%
——28——CVE-1999-0570—93.4%
——28——CVE-2020-1445—93.4%
——28——CVE-2007-1882—93.4%
——28——CVE-2024-56131—93.4%
——28——CVE-2014-0534—93.4%
——28——CVE-2006-4337—93.4%
——28——CVE-2010-4714—93.4%
——28——CVE-2005-4550—93.4%
——28——CVE-2007-1111—93.4%
——28——CVE-2015-6492—93.4%
——28——CVE-2015-5364—93.4%
——28——CVE-2018-6221—93.4%
——28——CVE-2000-104610.0 NO 93.4%
——28Multiple buffer overflows in the ESMTP service of Lotus Domino 5.0.2c and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via long (1) "RCPT TO," (2) "SAML FROM," or (3) "SOML FROM" commands.40dCVE-2006-2069—93.4%
——28——CVE-2026-137736.0 MED93.4%
——28IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 Approximately 50 generated CORBA stub classes in WebSphere eXtreme Scale's ogclient.jar call ORB.string_to_object() on an attacker-controlled IOR string during Java deserialization, turning any unfiltered ObjectInputStream sink in WAS into outbound IIOP SSRF to an attacker-chosen host; when chained with the IBM ORB's getUserException class-instantiation flaw (WAS-26), this SSRF escalates to remote code execution on the calling JVM.8dCVE-2002-2420—93.4%
——28——CVE-2008-6143—93.4%
——28——CVE-2019-1079—93.4%
——28——CVE-2020-13254—93.4%
——28——CVE-2023-35630—93.4%
——28——CVE-2014-0529—93.4%
——28——CVE-2025-67004—93.4%
——28——CVE-2020-7750—93.4%
——28——CVE-2019-10954—93.4%
——28——CVE-2016-1962—93.4%
——28——CVE-2009-4367—93.4%
——28——CVE-2026-457009.8 CRI93.4%
——28FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/planar.c, freerdp_bitmap_decompress_planar() validates the X destination coordinate nXDst against the caller-provided destination stride (nDstStep) even when it is writing into the internal temp buffer pTempData. An attacker can bypass the check with a large nDstStep and a large nXDst, causing planar_decompress_plane_rle() to write past the end of pTempData. This vulnerability is fixed in 3.26.0.96dCVE-2007-2761—93.4%
——28——CVE-2006-3277—93.4%
——28——