Vulnerabilities exploitable today
372,337in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,705
New KEV · 24H0
Exploit Today ≥ 701,644
Distribution · last window
- Critical2,271
- High8,371
- Medium6,453
- Low636
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2023-33207—23.5%
——7——CVE-2026-150875.9 MED23.5%
——7vulnerability in Drupal Clean RESTful allows . This issue affects Clean RESTful versions: *.*.60dCVE-2018-17955—23.5%
——7——CVE-2025-8054—23.5%
——7——CVE-2026-40198—23.5%
——7——CVE-2023-5884—23.5%
——7——CVE-2026-30915—23.5%
——7——CVE-2026-226744.8 MED23.5%
——7Hashgraph Guardian through 3.6.0, fixed in commit ba8c566, contains a stored cross-site scripting vulnerability that allows authenticated users with the STANDARD_REGISTRY role to inject malicious scripts by submitting a crafted companyName value via the branding configuration API endpoint. Attackers can exploit the unsanitized innerHTML assignment in the branding service to execute arbitrary JavaScript in the browser of every authenticated user on every page load.59dCVE-2018-6266—23.5%
——7——CVE-2025-12430—23.5%
——7——CVE-2012-0054—23.5%
——7——CVE-2026-32924—23.5%
——7——CVE-2026-164566.5 MED23.5%
——7A flaw was found in the `odh-model-controller`. An authenticated user with permissions to create custom resources can exploit a vulnerability in the `loadSecret` function. This function improperly reads the Secret namespace from user-controlled input without validation. This allows an attacker to read sensitive API keys and cloud credentials from other namespaces, leading to information disclosure.28dCVE-2024-54002—23.5%
——7——CVE-2025-600184.8 MED23.5%
——7glib-networking's OpenSSL backend fails to properly check the return value of a call to BIO_write(), resulting in an out of bounds read.73dCVE-2026-598886.5 MED23.5%
——7jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and 3.1.4, Java Records using a PropertyNamingStrategy can bypass @JsonIgnore because POJOPropertiesCollector._removeUnwantedIgnorals() records an ignored component under its original implicit name before _renameUsing() applies the naming strategy, allowing the renamed JSON key to be assigned to the Record constructor parameter. This issue is fixed in versions 2.18.8, 2.21.4, and 3.1.4.58dCVE-2007-1191—23.5%
——7——CVE-2026-33132—23.5%
——7——CVE-2025-64049—23.5%
——7——CVE-2026-637585.4 MED23.5%
——7SurrealDB versions before 3.1.0 contain an authorization bypass vulnerability in the KILL statement that allows authenticated database users to terminate other users' LIVE SELECT subscriptions. Attackers can issue KILL statements with target live query UUIDs to disrupt real-time data subscriptions of other users without ownership verification.51dCVE-2026-878178.8 HIG23.5%
——7GitPython before 3.1.60 fails to properly validate the git directory location, allowing attackers to impersonate the git directory using tracked files like gitdir, commondir, and HEAD. Attackers can execute arbitrary code by placing a malicious pre-commit hook in the tracked hooks directory that executes when a victim calls index.commit() on a cloned or opened repository.1dCVE-2024-20938—23.5%
——7——CVE-2023-26524—23.5%
——7——CVE-2023-28987—23.5%
——7——CVE-2026-170756.5 MED23.5%
——7IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information and perform unauthorized operations due to improper validation of authentication tokens.23dCVE-2023-52198—23.5%
——7——CVE-2023-47692—23.5%
——7——CVE-2022-46740—23.5%
——7——CVE-2025-2543—23.5%
——7——CVE-2023-25987—23.5%
——7——CVE-2024-6727—23.5%
——7——CVE-2026-185045.4 MED23.5%
——7fastify is a fast and low overhead web framework for Node.js. Versions of fastify before 5.12.1 are affected by a schema validation bypass when a request body schema targets a root primitive value. When the schema validates a top-level primitive such as an integer, Ajv can coerce a JSON string into the expected type during validation, but Fastify does not replace the root request body with the coerced value, so the route handler receives the original unvalidated string. As a result, a request that should have failed validation can reach application logic with a value that does not satisfy the schema, which can undermine integrity and access-control checks that rely on the validated type. Users should upgrade to fastify 5.12.1, which fixes the mismatch. No known workarounds are available.9dCVE-2024-10320—23.5%
——7——CVE-2024-21150—23.5%
——7——CVE-2017-3225—23.5%
——7——CVE-2026-7644—23.5%
——7——CVE-2024-579867.1 HIG23.5%
——7In the Linux kernel, the following vulnerability has been resolved:
HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections
A report in 2019 by the syzbot fuzzer was found to be connected to two
errors in the HID core associated with Resolution Multipliers. One of
the errors was fixed by commit ea427a222d8b ("HID: core: Fix deadloop
in hid_apply_multiplier."), but the other has not been fixed.
This error arises because hid_apply_multipler() assumes that every
Resolution Multiplier control is contained in a Logical Collection,
i.e., there's no way the routine can ever set multiplier_collection to
NULL. This is in spite of the fact that the function starts with a
big comment saying:
* "The Resolution Multiplier control must be contained in the same
* Logical Collection as the control(s) to which it is to be applied.
...
* If no Logical Collection is
* defined, the Resolution Multiplier is associated with all
* controls in the report."
* HID Usage Table, v1.12, Section 4.3.1, p30
*
* Thus, search from the current collection upwards until we find a
* logical collection...
The comment and the code overlook the possibility that none of the
collections found may be a Logical Collection.
The fix is to set the multiplier_collection pointer to NULL if the
collection found isn't a Logical Collection.38dCVE-2024-41954—23.5%
——7——CVE-2024-20409—23.5%
——7——CVE-2026-581017.5 HIG23.5%
——7Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference.
X509V3_EXT_d2i(ext) returns NULL when an extension's DER value fails to parse. basicC, ia5string, and auth_att dereference its result without a NULL check. keyid_data also dereferences akid->keyid, which is NULL for an empty AKI SEQUENCE (DER 30 00) even when the parse succeeds.
A caller invoking an affected helper on an extension from an untrusted certificate triggers a SIGSEGV that crashes the Perl process.32d