Vulnerabilities exploitable today
372,337in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,705
New KEV · 24H0
Exploit Today ≥ 701,644
Distribution · last window
- Critical2,279
- High8,415
- Medium6,478
- Low636
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-23652—23.4%
——7——CVE-2025-23786—23.4%
——7——CVE-2024-10693—23.4%
——7——CVE-2026-497717.6 HIG23.4%
——7Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web Photo Gallery by 10Web allows Blind SQL Injection.
This issue affects Photo Gallery by 10Web: from n/a through 1.8.41.51dCVE-2024-33986—23.4%
——7——CVE-2022-20665—23.4%
——7——CVE-2024-4175—23.4%
——7——CVE-2023-23019—23.4%
——7——CVE-2019-20652—23.4%
——7——CVE-2026-17593—23.4%
——7An account holding the nexus:settings:update permission in Nexus Repository 3 (or the equivalent nexus:settings permission in the legacy Nexus Repository 2) could submit arbitrary values as realm identifiers through an internal configuration API that did not validate them against the set of registered realms. Because unrecognized entries were persisted and re-evaluated on every realm load via a legacy code path, this could result in unintended code executing inside the Nexus Repository process, and in some cases a persistent authentication lockout that was not visible through the administrative UI.10dCVE-2025-23568—23.4%
——7——CVE-2023-0685—23.4%
——7——CVE-2024-50448—23.4%
——7——CVE-2016-6774—23.4%
——7——CVE-2024-27794—23.4%
——7——CVE-2025-23655—23.4%
——7——CVE-2023-7238—23.4%
——7——CVE-2026-25578—23.4%
——7——CVE-2023-43233—23.4%
——7——CVE-2026-197483.7 LOW23.4%
——7A security vulnerability has been detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. Affected is the function CWebSessionManager_ParseSession of the file /user/bin/Kylin of the component Kylin Web Service. Such manipulation of the argument SESSION leads to insufficient entropy. The attack may be performed from remote. Attacks of this nature are highly complex. The exploitability is told to be difficult.28dCVE-2022-410937.8 HIG23.4%
——7Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability32dCVE-2026-828828.8 HIG23.4%
——7Devtron through 2.2.0 fails to enforce authorization checks on the GET /orchestrator/api-token/webhook endpoint, allowing authenticated users to retrieve admin API tokens. Attackers with any authenticated account can query the endpoint with arbitrary project, environment, and application parameters to retrieve plaintext super-admin JWT tokens for full platform control.3dCVE-2011-4922—23.4%
——7——CVE-2024-45454—23.4%
——7——CVE-2016-2871—23.4%
——7——CVE-2024-23559—23.4%
——7——CVE-2026-54317—23.4%
——7——CVE-2025-13612—23.4%
——7——CVE-2026-106363.7 LOW23.4%
——7In Zephyr's IPv4 IGMP implementation, igmp_send() in subsys/net/ip/igmp.c read the network interface back out of the packet via net_pkt_iface(pkt) after the packet had been handed to net_send_data(). On the successful-send path the packet's last reference may already have been released by the L2 driver or by the network stack's TX handling (synchronously in the default NET_TC_TX_COUNT=0 immediate-transmit configuration), returning the net_pkt slab block to its free list. The subsequent net_pkt_iface(pkt) dereferences the freed packet, a use-after-free read; with CONFIG_NET_STATISTICS_PER_INTERFACE the resulting dangling interface pointer is further dereferenced for a statistics-counter write.
The IGMP send path is reachable without authentication from inbound IPv4 IGMP membership queries addressed to 224.0.0.1 (net_ipv4_igmp_input -> send_igmp_report/send_igmp_v3_report -> igmp_send), as well as from local multicast join/leave/rejoin operations.
Realistic impact is undefined behavior and potential denial of service (sporadic crash or stats corruption); a controllable write requires the asynchronous TX path plus a concurrent slab reuse.
The flaw was introduced with IGMPv2 support and affects releases from v2.6.0 through v4.4.0. The fix caches the interface pointer before sending. Note the analogous IPv6 MLD path (mld_send in subsys/net/ip/ipv6_mld.c) retains the same unfixed pattern.59dCVE-2025-23653—23.4%
——7——CVE-2026-582546.5 MED23.4%
——7NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.8, message trace destination checks were applied to ordinary client connections but not consistently to messages arriving through leafnode connections, allowing a leafnode operator to send trace events to subjects that would not otherwise be permitted and to use trace-only behavior to prevent normal delivery or storage of affected messages. This issue is fixed in versions 2.14.3 and 2.12.8.60dCVE-2026-726057.5 HIG23.4%
——7A missing authentication vulnerability in Swing Music 3.0.0 allows unauthenticated remote attackers to create arbitrary user accounts via the POST /auth/profile/create endpoint. The endpoint is allowlisted from JWT verification, permitting unauthenticated account creation. An attacker can register an account and use it to access protected functionality on the server.14dCVE-2025-23646—23.4%
——7——CVE-2026-333915.4 MED23.4%
——7An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges. An authenticated user with limited privileges can remotely bypass the intended access control of the web management interface and modify the Smart Polling discovery configuration. This allows the attacker to disrupt the visibility of assets in the monitored network.3dCVE-2025-23431—23.4%
——7——CVE-2019-6679—23.4%
——7——CVE-2025-54996—23.4%
——7——CVE-2023-48628—23.4%
——7——CVE-2023-52068—23.4%
——7——CVE-2025-26485—23.4%
——7——