Vulnerabilities exploitable today
373,979in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,709
New KEV · 24H0
Exploit Today ≥ 701,644
Distribution · last window
- Critical2,324
- High8,430
- Medium6,377
- Low704
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2007-4967—25.2%
——8——CVE-2024-6709—25.2%
——8——CVE-2025-61152—25.1%
——8——CVE-2007-2619—25.2%
——8——CVE-2024-11335—25.2%
——8——CVE-2026-34304—25.2%
——8——CVE-2024-35724—25.2%
——8——CVE-2026-32817—25.2%
——8——CVE-2023-30530—25.2%
——8——CVE-2025-33254—25.2%
——8——CVE-2026-328827.1 HIG25.2%
——8libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap buffer over-read in HeifPixelImage::overlay() in libheif/pixelimage.cc. When compositing an overlay image (iovl) whose child image has a different bit depth for the alpha channel than for the color channels, the function indexes into the alpha plane using the color channel stride (in_stride) instead of the previously retrieved alpha_stride, causing reads past the end of the alpha buffer (up to 3,123 bytes for a 100×50 image with 10-bit color and 8-bit alpha). A crafted HEIF file can exploit this to cause a denial of service (crash) or potentially disclose adjacent heap memory through leaked bytes embedded in the decoded output pixels. This issue has been fixed in versionThis issue has been fixed in version 1.22.0.62dCVE-2023-45633—25.2%
——8——CVE-2024-25388—25.2%
——8——CVE-2024-13589—25.2%
——8——CVE-2026-44651—25.2%
——8SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to 1.18.0, when fetch(url) throws, the code sends:
res.status(500).send('Error occurred while trying to proxy to: ' + url + ' ' + error). The url value is attacker-controlled (req.params.url) and is not HTML-escaped before rendering. This vulnerability is fixed in 1.18.0.55dCVE-2025-43782—25.2%
——8——CVE-2024-31294—25.2%
——8——CVE-2024-28665—25.2%
——8——CVE-2025-55686—25.2%
——8——CVE-2025-33238—25.2%
——8——CVE-2017-6016—25.2%
——8——CVE-2026-55764—25.2%
——8——CVE-2016-0263—25.2%
——8——CVE-2024-43702—25.2%
——8——CVE-2024-31267—25.2%
——8——CVE-2003-0844—25.2%
——8——CVE-2024-28684—25.2%
——8——CVE-2026-607487.6 HIG25.2%
——8Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle General Ledger. While the vulnerability is in Oracle General Ledger, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle General Ledger accessible data as well as unauthorized update, insert or delete access to some of Oracle General Ledger accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N).21dCVE-2018-25300—25.2%
——8——CVE-2025-68384—25.2%
——8——CVE-2003-0877—25.2%
——8——CVE-2024-8427—25.2%
——8——CVE-2025-24874—25.2%
——8——CVE-2024-22129—25.2%
——8——CVE-2026-592153.1 LOW25.2%
——8Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, channel thread parent and reply handling did not bind parent_id to the channel in the URL, allowing an authenticated user to reference a message from another private or DM channel and disclose thread context across channels. This issue is fixed in version 0.10.0.64dCVE-2024-25391—25.2%
——8——CVE-2026-53933—25.2%
——8Maravel, a PHP framework oriented towards dependency injection, prior to version 10.73.1 has a side-channel information disclosure issue. When a route was compiled with dynamic placeholders (e.g., `/api/v1/users/{id}`), the raw string placeholder key was mistakenly registered into the flat static route checklist. An attacker scanning endpoints could intentionally pass the literal template syntax (e.g., `GET /api/v1/users/{id}`) to force an unexpected match against the static map. Because the dynamic tree engine was bypassed, no arguments were captured. This forced modern PHP 8+ versions to throw a native `ArgumentCountError`, resulting in a 500 Internal Server Error instead of a uniform 404 Not Found. By tracking which fuzz patterns exploded into a 500 error, a malicious actor could programmatically profile and map out internal route parameter names and controller schemas. Version 10.73.1 contains a patch. As a workaround, mitigate this side-channel leak by implementing a defensive check in a global middleware. This will reject any literal brace patterns before they reach the router engine.5dCVE-2024-3966—25.2%
——8——CVE-2023-2087—25.2%
——8——CVE-2024-35727—25.2%
——8——