Vulnerabilities exploitable today
407,531in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,766
New KEV · 24H0
Exploit Today ≥ 701,698
Distribution · last window
- Critical5,704
- High22,182
- Medium20,667
- Low2,163
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2010-3621—93.0%
——28——CVE-2008-5176—93.0%
——28——CVE-2008-4508—93.0%
——28——CVE-2019-169429.8 CRI93.0%
——28A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of org.apache.commons.dbcp.datasources.SharedPoolDataSource and org.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling.26dCVE-2025-15499—93.0%
——28——CVE-2008-1018—93.0%
——28——CVE-2023-36435—93.0%
——28——CVE-2012-5784—93.0%
——28——CVE-2011-3268—93.0%
——28——CVE-2025-58747—93.0%
——28——CVE-2018-10832—93.0%
——28——CVE-2009-3037—93.0%
——28——CVE-2010-3658—93.0%
——28——CVE-2021-44520—93.0%
——28——CVE-2010-3622—93.0%
——28——CVE-2025-71284—93.0%
——28——CVE-2000-1100—93.0%
——28——CVE-2008-5259—93.0%
——28——CVE-2014-8127—93.0%
——28——CVE-2016-3090—93.0%
——28——CVE-2014-9674—93.0%
——28——CVE-2010-0392—93.0%
——28——CVE-2010-1121—93.0%
——28——CVE-2010-3628—93.0%
——28——CVE-2019-11950—93.0%
——28——CVE-2020-9582—93.0%
——28——CVE-2006-2814—93.0%
——28——CVE-2002-0489—93.0%
——28——CVE-2008-2304—93.0%
——28——CVE-2012-5161—93.0%
——28——CVE-2026-76085.5 MED93.0%
——28A vulnerability was detected in TRENDnet TEW-821DAP up to 1.12B01. The affected element is the function tools_diagnostic. The manipulation results in os command injection. The exploit is now public and may be used. The vendor explains: "That firmware version will only work on our hardware version v1.xR. We have already EOL that product 8 years ago and are no longer selling". This vulnerability only affects products that are no longer supported by the maintainer.8dCVE-2007-6558—93.0%
——28——CVE-2025-46704—93.0%
——28——CVE-2012-2106—93.0%
——28——CVE-2008-1108—93.0%
——28——CVE-2020-19719—93.0%
——28——CVE-2009-3639—93.0%
——28——CVE-2023-28133—93.0%
——28——CVE-2010-4713—93.0%
——28——CVE-2016-7401—93.0%
——28——