PULSE
FEED
CVE Watch407,531 in full archive

Vulnerabilities exploitable today

407,531in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,766
New KEV · 24H0
Exploit Today ≥ 701,698

Distribution · last window

  • Critical
    5,704
  • High
    22,182
  • Medium
    20,667
  • Low
    2,163
Filters
Filters

Window

Severity

Flags

Vulnerabilities28,161–28,200 · 407,531
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2010-3621—
93.0%
——28——
CVE-2008-5176—
93.0%
——28——
CVE-2008-4508—
93.0%
——28——
CVE-2019-169429.8 CRI
93.0%
——28A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of org.apache.commons.dbcp.datasources.SharedPoolDataSource and org.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling.26d
CVE-2025-15499—
93.0%
——28——
CVE-2008-1018—
93.0%
——28——
CVE-2023-36435—
93.0%
——28——
CVE-2012-5784—
93.0%
——28——
CVE-2011-3268—
93.0%
——28——
CVE-2025-58747—
93.0%
——28——
CVE-2018-10832—
93.0%
——28——
CVE-2009-3037—
93.0%
——28——
CVE-2010-3658—
93.0%
——28——
CVE-2021-44520—
93.0%
——28——
CVE-2010-3622—
93.0%
——28——
CVE-2025-71284—
93.0%
——28——
CVE-2000-1100—
93.0%
——28——
CVE-2008-5259—
93.0%
——28——
CVE-2014-8127—
93.0%
——28——
CVE-2016-3090—
93.0%
——28——
CVE-2014-9674—
93.0%
——28——
CVE-2010-0392—
93.0%
——28——
CVE-2010-1121—
93.0%
——28——
CVE-2010-3628—
93.0%
——28——
CVE-2019-11950—
93.0%
——28——
CVE-2020-9582—
93.0%
——28——
CVE-2006-2814—
93.0%
——28——
CVE-2002-0489—
93.0%
——28——
CVE-2008-2304—
93.0%
——28——
CVE-2012-5161—
93.0%
——28——
CVE-2026-76085.5 MED
93.0%
——28A vulnerability was detected in TRENDnet TEW-821DAP up to 1.12B01. The affected element is the function tools_diagnostic. The manipulation results in os command injection. The exploit is now public and may be used. The vendor explains: "That firmware version will only work on our hardware version v1.xR. We have already EOL that product 8 years ago and are no longer selling". This vulnerability only affects products that are no longer supported by the maintainer.8d
CVE-2007-6558—
93.0%
——28——
CVE-2025-46704—
93.0%
——28——
CVE-2012-2106—
93.0%
——28——
CVE-2008-1108—
93.0%
——28——
CVE-2020-19719—
93.0%
——28——
CVE-2009-3639—
93.0%
——28——
CVE-2023-28133—
93.0%
——28——
CVE-2010-4713—
93.0%
——28——
CVE-2016-7401—
93.0%
——28——