Vulnerabilities exploitable today
371,767in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,703
New KEV · 24H0
Exploit Today ≥ 701,643
Distribution · last window
- Critical2,220
- High8,140
- Medium6,164
- Low607
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-9071—22.9%
——7——CVE-2026-188608.7 HIG22.9%
——7Velociraptor allows multi-tenant deployments named "Orgs".
By default Velociraptor, uses the ROOT org, but users can create child orgs for other tenants within the same deployment.
Users can have different permissions in each org. To manage Orgs, Velociraptor usually examines the ORG_ADMIN permission on the ROOT org.
This issue results from the Velociraptor server allowing for the deletion of Orgs by incorrectly checking the ORG_ADMIN permission of callers within the calling ORG instead of the ROOT org. However, Org admins of child orgs were able to add this permission to their ACL token within their own org. This allows an administrator in a child org, which is not also an administrator in the ROOT org, to delete other orgs.13dCVE-2023-5382—22.9%
——7——CVE-2024-27399—22.9%
——7——CVE-2025-64085—22.9%
——7——CVE-2026-110029.6 CRI22.9%
——7Use after free in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)50dCVE-2004-2231—22.9%
——7——CVE-2026-158167.5 HIG22.9%
——7A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.13hCVE-2015-4991—22.9%
——7——CVE-2026-81852—22.9%
——7Use of Insufficiently Random Values vulnerability in ash-project ash_admin ships a hardcoded, publicly known CSP nonce, defeating nonce-based Content-Security-Policy protection.
When mounted without :csp_nonce_assign_key, AshAdmin.Router.ash_admin/2 defaulted the img, style, and script nonces to the literal constant ash_admin-Ed55GFnX, which AshAdmin.Layouts wrote verbatim into the nonce attribute of its inline <style> and <script> tags on every response. The value is a compile-time constant published in the repository and is never rotated per request. If an application's CSP script-src allow-lists that documented default, any HTML-injection sink on an admin page can reuse the known nonce to run inline scripts the policy was meant to block. The fix generates a fresh random nonce per request.
This issue affects ash_admin: from 0.10.8 before 1.3.1.9dCVE-2006-3118—22.9%
——7——CVE-2016-4511—22.9%
——7——CVE-2022-1759—22.9%
——7——CVE-2025-10463—22.9%
——7——CVE-2026-54016—22.9%
——7——CVE-2005-2449—22.9%
——7——CVE-2022-1781—22.9%
——7——CVE-2026-2864—22.9%
——7——CVE-2026-82584—22.9%
——7Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project igniter allows a malicious package publisher to forge the mix igniter.install confirmation prompt.
mix igniter.install prints a confirmation panel (an anti-typosquatting safeguard) listing a package's hex metadata before adding it. The panel builder in Igniter.Project.Deps wrote publisher-controlled fields (meta.description, owner usernames, requirement names, version) to the terminal with only newlines stripped. A malicious or typosquatted package can embed ANSI terminal escape sequences (cursor movement, line erase, carriage returns) in its metadata to overwrite the panel, forging trusted author names and download counts while concealing the real ones, so a developer relying on the panel to vet the package is deceived into approving a malicious dependency.
This issue affects igniter: from 0.8.1 before 0.8.4.2dCVE-2026-45733—22.9%
——7——CVE-2026-144008.3 HIG22.9%
——7Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)70dCVE-2025-32036—22.9%
——7——CVE-2025-48447—22.9%
——7——CVE-2026-166557.2 HIG22.9%
——7The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Name Field Nested `password` Member in all versions up to, and including, 6.2.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.42dCVE-2014-1595—22.9%
——7——CVE-2020-37185—22.9%
——7——CVE-2001-0125—22.9%
——7——CVE-2001-0142—22.9%
——7——CVE-2013-5373—22.9%
——7——CVE-2022-31668—22.9%
——7——CVE-2026-138238.3 HIG22.9%
——7Use after free in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)70dCVE-2024-27257—22.9%
——7——CVE-2017-10428—22.9%
——7——CVE-2026-226218.3 HIG22.9%
——7Improper input validation in one of the session management interface of Eaton's Tripp Lite Series PADM firmware could allow an authenticated administrator to execute arbitrary commands within a restricted environment.41dCVE-2026-26073—22.9%
——7——CVE-2026-42483—22.9%
——7——CVE-2020-37179—22.9%
——7——CVE-2022-1764—22.9%
——7——CVE-2025-7949—22.9%
——7——CVE-2023-47781—22.9%
——7——