Vulnerabilities exploitable today
407,531in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,766
New KEV · 24H0
Exploit Today ≥ 701,698
Distribution · last window
- Critical5,704
- High22,182
- Medium20,667
- Low2,163
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2006-4412—93.0%
——28——CVE-2018-19282—93.0%
——28——CVE-2016-4898—93.0%
——28——CVE-2015-5125—93.0%
——28——CVE-2010-1909—93.0%
——28——CVE-2018-10897—93.0%
——28——CVE-2012-1933—93.0%
——28——CVE-2012-4864—93.0%
——28——CVE-2015-263810.0 NO 93.0%
——28Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.20dCVE-2017-12504—92.9%
——28——CVE-2017-12501—92.9%
——28——CVE-2017-12540—92.9%
——28——CVE-2015-0984—92.9%
——28——CVE-2000-1104—92.9%
——28——CVE-2008-3684—92.9%
——28——CVE-2017-12536—92.9%
——28——CVE-2012-1975—92.9%
——28——CVE-2015-3408—92.9%
——28——CVE-2017-12527—92.9%
——28——CVE-2008-1185—92.9%
——28——CVE-2010-3565—92.9%
——28——CVE-2017-12508—92.9%
——28——CVE-2010-2877—92.9%
——28——CVE-2023-290077.0 HIG92.9%
——28Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` file with submodule URLs that are longer than 1024 characters can used to exploit a bug in `config.c::git_config_copy_or_rename_section_in_file()`. This bug can be used to inject arbitrary configuration into a user's `$GIT_DIR/config` when attempting to remove the configuration section associated with that submodule. When the attacker injects configuration values which specify executables to run (such as `core.pager`, `core.editor`, `core.sshCommand`, etc.) this can lead to a remote code execution. A fix A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid running `git submodule deinit` on untrusted repositories or without prior inspection of any submodule sections in `$GIT_DIR/config`.1dCVE-2018-16010—92.9%
——28——CVE-2017-12531—92.9%
——28——CVE-2017-12530—92.9%
——28——CVE-2008-6682—92.9%
——28——CVE-2017-12514—92.9%
——28——CVE-2020-1322—92.9%
——28——CVE-2005-3304—92.9%
——28——CVE-2017-12524—92.9%
——28——CVE-2007-6732—92.9%
——28——CVE-2017-12535—92.9%
——28——CVE-2015-486010.0 NO 92.9%
——28Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883.20dCVE-2002-1904—92.9%
——28——CVE-2008-2573—92.9%
——28——CVE-2021-35564—92.9%
——28——CVE-2008-3493—92.9%
——28——CVE-2017-12523—92.9%
——28——