Vulnerabilities exploitable today
376,337in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,713
New KEV · 24H0
Exploit Today ≥ 701,646
Distribution · last window
- Critical2,383
- High8,771
- Medium6,812
- Low735
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-46641—29.0%
——9——CVE-2026-896787.5 HIG29.0%
——9In the Linux kernel, the following vulnerability has been resolved:
nfsd: fix partial-write detection in nfsd_direct_write
nfsd_direct_write() walks a list of write segments and, after each
vfs_iocb_iter_write(), tries to detect a short write so the loop can
stop before placing the next segment at a wrong file offset:
host_err = vfs_iocb_iter_write(file, kiocb, &segments[i].iter);
if (host_err < 0)
return host_err;
*cnt += host_err;
if (host_err < segments[i].iter.count)
break; /* partial write */
vfs_iocb_iter_write() runs the iter through ->write_iter(), which
advances the iter by the number of bytes written. By the time the
check runs, segments[i].iter.count is the residual, not the original
request length:
before write_iter: iter.count == original_len
after write_iter: iter.count == original_len - host_err
The condition then reduces to host_err < original_len - host_err, so
the break fires only when less than half of the segment was written.
Any short write completing between 50% and 99% of the segment slips
through; the loop advances to the next segment with kiocb->ki_pos
only bumped by the short amount, writing the next segment's payload
at the wrong offset and over-reporting *cnt to the NFS client.
Snapshot the segment's byte count before the write and compare
host_err against that snapshot so any short write breaks the loop.5dCVE-2026-708496.5 MED29.0%
——9Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H).24dCVE-2015-7063—29.0%
——9——CVE-2025-24681—29.0%
——9——CVE-2026-334443.7 LOW29.0%
——9CVE-2026-33444 is a memory management
vulnerability in Secure Access servers prior to 14.55. Attackers with intimate
knowledge of and total control over the tunnel protocol can create a
non-persistent DoS against the server.63dCVE-2025-62001—29.0%
——9——CVE-2024-5525—29.0%
——9——CVE-2026-553983.7 LOW29.0%
——9CVE-2026-55398
is a memory management vulnerability in Secure Access clients and servers prior
to 14.55. Attackers with intimate knowledge of and total control over the
tunnel protocol can create a non-persistent DoS against the server.63dCVE-2024-13077—29.0%
——9——CVE-2026-49772—29.0%
——9——CVE-2023-33020—29.0%
——9——CVE-2026-20643—29.0%
——9——CVE-2026-42686—29.0%
——9——CVE-2024-13076—29.0%
——9——CVE-2023-26329—29.0%
——9——CVE-2024-53932—29.0%
——9——CVE-2024-52465—29.0%
——9——CVE-2026-4447—29.0%
——9——CVE-2006-2660—29.0%
——9——CVE-2022-33287—29.0%
——9——CVE-2026-40009—28.9%
——9——CVE-2024-52456—29.0%
——9——CVE-2026-1779—29.0%
——9——CVE-2026-643828.8 HIG29.0%
——9In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix double-free in SMB2_open() replay
A response-bearing attempt can return a replayable error and free its
response buffer. If SMB2_open_init() fails before the next send, cleanup
retains the previous buffer type and frees that response again.
Reset response bookkeeping before each attempt to prevent the stale free.13dCVE-2026-631006.5 MED28.9%
——9Maybe through 0.6.0 contains a missing authorization vulnerability that allows authenticated low-privilege member-role users to access and modify global hosting settings by exploiting unprotected show and update actions in the Settings::HostingsController, where the before_action ensure_admin filter is applied only to the clear_cache action. Attackers can read the operator's Synth API key rendered in plaintext via a form field value attribute, overwrite it with an attacker-controlled value, toggle public registration settings, and disable email confirmation requirements to disrupt the entire instance.59dCVE-2024-21004—29.0%
——9——CVE-2022-21571—29.0%
——9——CVE-2024-13241—29.0%
——9——CVE-2024-31123—29.0%
——9——CVE-2024-13278—29.0%
——9——CVE-2020-3215—29.0%
——9——CVE-2024-31112—29.0%
——9——CVE-2024-52455—29.0%
——9——CVE-2026-43239—29.0%
——9——CVE-2022-33295—29.0%
——9——CVE-2024-53931—29.0%
——9——CVE-2024-32952—29.0%
——9——CVE-2024-11940—29.0%
——9——CVE-2026-477556.5 MED28.9%
——9ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to version 26.05, low-privileged authenticated agent can retrieve plaintext credentials and TOTP secrets belonging to another client by directly requesting the credential edit modal with an arbitrary `credential_id`. The endpoint does not enforce client scoping or object-level authorization before loading and decrypting the credential record. Version 26.05 fixes the issue.51d