Vulnerabilities exploitable today
407,708in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,767
New KEV · 24H0
Exploit Today ≥ 701,698
Distribution · last window
- Critical5,711
- High22,191
- Medium20,651
- Low2,164
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2011-1417—92.8%
——28——CVE-2011-2997—92.8%
——28——CVE-2018-15923—92.8%
——28——CVE-2020-5760—92.8%
——28——CVE-2014-8669—92.8%
——28——CVE-2009-4168—92.8%
——28——CVE-2017-7539—92.8%
——28——CVE-2020-60968.1 HIG92.8%
——28An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc 2.30.9000. Calling memcpy() (on ARMv7 targets that utilize the GNU glibc implementation) with a negative value for the 'num' parameter results in a signed comparison vulnerability. If an attacker underflows the 'num' parameter to memcpy(), this vulnerability could lead to undefined behavior such as writing to out-of-bounds memory and potentially remote code execution. Furthermore, this memcpy() implementation allows for program execution to continue in scenarios where a segmentation fault or crash should have occurred. The dangers occur in that subsequent execution and iterations of this code will be executed with this corrupted data.21dCVE-2014-3444—92.8%
——28——CVE-2019-17144—92.8%
——28——CVE-2017-14227—92.8%
——28——CVE-2017-6747—92.8%
——28——CVE-2009-1389—92.8%
——28——CVE-2018-15925—92.8%
——28——CVE-2013-2187—92.8%
——28——CVE-2020-0813—92.8%
——28——CVE-2016-6290—92.8%
——28——CVE-2018-15947—92.8%
——28——CVE-2018-18628—92.8%
——28——CVE-2019-7261—92.8%
——28——CVE-2018-12845—92.8%
——28——CVE-2015-5576—92.8%
——28——CVE-2018-1002209—92.8%
——28——CVE-2018-12880—92.8%
——28——CVE-2018-15922—92.8%
——28——CVE-2016-3444—92.8%
——28——CVE-2018-5756—92.8%
——28——CVE-2018-0308—92.8%
——28——CVE-2021-27856—92.8%
——28——CVE-2006-1960—92.8%
——28——CVE-2018-15948—92.8%
——28——CVE-1999-1493—92.8%
——28——CVE-2015-6679—92.8%
——28——CVE-2010-1806—92.8%
——28——CVE-2026-27971—92.8%
——28——CVE-2018-0312—92.8%
——28——CVE-2017-11462—92.8%
——28——CVE-2020-25686—92.8%
——28——CVE-2018-15942—92.8%
——28——CVE-2025-595277.5 HIG92.8%
——28Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, a Server-Side Request Forgery (SSRF) vulnerability was discovered in the /api/v1/fetch-links endpoint of the Flowise application. This vulnerability allows an attacker to use the Flowise server as a proxy to access internal network web services and explore their link structures. This issue has been patched in version 3.0.6.24d