Vulnerabilities exploitable today
407,531in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,766
New KEV · 24H0
Exploit Today ≥ 701,698
Distribution · last window
- Critical5,704
- High22,182
- Medium20,667
- Low2,163
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2008-0965—93.0%
——28——CVE-2000-0416—93.0%
——28——CVE-2018-16039—93.0%
——28——CVE-2019-11062—93.0%
——28——CVE-2016-0376—93.0%
——28——CVE-2020-26596—93.0%
——28——CVE-2013-0622—93.0%
——28——CVE-2018-6211—93.0%
——28——CVE-2026-441949.1 CRI93.0%
——28OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, an authenticated Remote Code Execution (RCE) vulnerability in the OPNsense core allows a user with user-management privileges to execute arbitrary system commands as root. An attacker can bypass input validation by formatting their malicious payload as a compliant email address, allowing shell commands to reach the underlying operating system. The flaw exists in the local user synchronization flow, within core/src/opnsense/scripts/auth/sync_user.php. This vulnerability is fixed in 26.1.8.8dCVE-2012-5161—93.0%
——28——CVE-2024-36412—93.0%
——28——CVE-2024-0300—93.0%
——28——CVE-2017-0185—93.0%
——28——CVE-2026-730349.8 CRI93.0%
——28DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers to write arbitrary files to any location on the server by injecting directory traversal sequences into the user_id HTTP header of the Python file-upload endpoint. Attackers can send a crafted multipart upload request with a traversal-poisoned user_id header to escape the intended upload directory and write attacker-controlled content to locations such as Python startup hooks, cron directories, or agent scripts, resulting in remote code execution.10dCVE-2018-16036—93.0%
——28——CVE-2010-2997—93.0%
——28——CVE-2026-4903—93.0%
——28——CVE-2013-2426—93.0%
——28——CVE-2019-19650—93.0%
——28——CVE-2006-7127—93.0%
——28——CVE-2014-4046—93.0%
——28——CVE-2018-19708—93.0%
——28——CVE-2014-0871—93.0%
——28——CVE-2019-14751—93.0%
——28——CVE-2009-2112—93.0%
——28——CVE-2018-4193—93.0%
——28——CVE-2011-4052—93.0%
——28——CVE-2017-8549—93.0%
——28——CVE-2016-9919—93.0%
——28——CVE-2014-6047—93.0%
——28——CVE-2014-6491—93.0%
——28——CVE-2004-0418—93.0%
——28——CVE-2015-5111—93.0%
——28——CVE-2009-0957—93.0%
——28——CVE-2015-5113—93.0%
——28——CVE-2022-45460—93.0%
——28——CVE-2013-2436—93.0%
——28——CVE-2007-4473—93.0%
——28——CVE-2007-3845—93.0%
——28——CVE-2018-19707—93.0%
——28——