Vulnerabilities exploitable today
407,603in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,766
New KEV · 24H0
Exploit Today ≥ 701,698
Distribution · last window
- Critical5,725
- High22,213
- Medium20,697
- Low2,165
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2015-0932—92.8%
——28——CVE-2020-15180—92.8%
——28——CVE-2015-0241—92.8%
——28——CVE-2014-6054—92.8%
——28——CVE-2008-0066—92.8%
——28——CVE-2007-4010—92.8%
——28——CVE-2017-0167—92.8%
——28——CVE-2025-95806.3 MED92.8%
——28A security vulnerability has been detected in LB-LINK BL-X26 1.2.8. This affects an unknown function of the file /goform/set_blacklist of the component HTTP Handler. Such manipulation of the argument mac leads to os command injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.39dCVE-2002-0416—92.8%
——28——CVE-2017-15235—92.8%
——28——CVE-2016-6140—92.8%
——28——CVE-2013-4834—92.8%
——28——CVE-2018-195917.5 HIG92.8%
——28In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closed. This is related to the if_nametoindex() function.21dCVE-2005-3922—92.8%
——28——CVE-2023-1018—92.8%
——28——CVE-2025-8818—92.8%
——28——CVE-2008-0098—92.8%
——28——CVE-2018-10260—92.8%
——28——CVE-2014-0666—92.8%
——28——CVE-2024-20685—92.8%
——28——CVE-2010-2586—92.8%
——28——CVE-2008-6085—92.8%
——28——CVE-2000-09167.5 NO 92.8%
——28FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), which allows remote attackers to spoof TCP connections.42dCVE-2017-7522—92.8%
——28——CVE-2022-12718.8 HIG92.8%
——28An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.21dCVE-2011-1214—92.8%
——28——CVE-2011-1336—92.8%
——28——CVE-2009-1351—92.8%
——28——CVE-2021-426388.1 HIG92.8%
——28PrinterLogic Web Stack versions 19.1.1.13 SP9 and below do not sanitize user input resulting in pre-auth remote code execution.118dCVE-2007-5399—92.8%
——28——CVE-2020-12077—92.8%
——28——CVE-2007-5538—92.8%
——28——CVE-2012-1951—92.8%
——28——CVE-2006-2356—92.8%
——28——CVE-2006-5301—92.8%
——28——CVE-2000-0359—92.8%
——28——CVE-2007-2296—92.8%
——28——CVE-2023-353867.8 HIG92.8%
——28Windows Kernel Elevation of Privilege Vulnerability86dCVE-2010-0847—92.8%
——28——CVE-2025-25038—92.8%
——28——