Vulnerabilities exploitable today
401,106in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,485
- High15,868
- Medium14,806
- Low1,460
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2018-0127—99.6%
——30——CVE-2014-5301—99.6%
——30——CVE-2010-1549—99.6%
——30——CVE-2024-1512—99.6%
——30——CVE-2022-21145—99.6%
——30——CVE-2024-8877—99.6%
——30——CVE-2025-0107—99.6%
——30——CVE-2024-28075—99.6%
——30——CVE-2020-362277.5 HIG99.6%
——30A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.7dCVE-2022-24288—99.6%
——30——CVE-2016-10176—99.6%
——30——CVE-2023-5684—99.6%
——30——CVE-2003-0466—99.6%
——30——CVE-2017-12478—99.6%
——30——CVE-2022-24734—99.6%
——30——CVE-2019-0192—99.6%
——30——CVE-2018-10823—99.6%
——30——CVE-2020-9850—99.6%
——30——CVE-2022-29013—99.6%
——30——CVE-2021-42129—99.6%
——30——CVE-2025-2294—99.6%
——30——CVE-2022-2560—99.6%
——30——CVE-2021-213417.5 HIG99.6%
——30XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulating the processed input stream. No user is affected who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.14dCVE-2023-35150—99.6%
——30——CVE-2009-3068—99.6%
——30——CVE-2024-28741—99.6%
——30——CVE-2006-5745—99.6%
——30——CVE-2021-26914—99.6%
——30——CVE-2020-362227.5 HIG99.6%
——30A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.7dCVE-2002-0079—99.6%
——30——CVE-2008-2499—99.6%
——30——CVE-2014-0113—99.6%
——30——CVE-2016-4054—99.6%
——30——CVE-2007-1748—99.6%
——30——CVE-2020-10808—99.6%
——30——CVE-2003-0714—99.6%
——30——CVE-2012-1675—99.6%
——30——CVE-2013-6221—99.6%
——30——CVE-2017-17215—99.6%
——30——CVE-2021-31813—99.6%
——30——