Vulnerabilities exploitable today
368,208in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,694
New KEV · 24H0
Exploit Today ≥ 701,631
Distribution · last window
- Critical2,147
- High7,679
- Medium5,506
- Low542
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-48599—19.3%
——6——CVE-2019-5307—19.3%
——6——CVE-2025-385457.5 HIG19.3%
——6In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: ti: am65-cpsw-nuss: Fix skb size by accounting for skb_shared_info
While transitioning from netdev_alloc_ip_align() to build_skb(), memory
for the "skb_shared_info" member of an "skb" was not allocated. Fix this
by allocating "PAGE_SIZE" as the skb length, accounting for the packet
length, headroom and tailroom, thereby including the required memory space
for skb_shared_info.36dCVE-2025-63441—19.3%
——6——CVE-2025-20914—19.3%
——6——CVE-2021-20259—19.3%
——6——CVE-2015-0245—19.3%
——6——CVE-2025-20919—19.3%
——6——CVE-2026-115124.3 MED19.3%
——6A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file /billing.php. The manipulation of the argument patientid leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.43dCVE-2026-33620—19.3%
——6——CVE-2025-20921—19.3%
——6——CVE-2026-4168—19.3%
——6——CVE-2023-5138—19.3%
——6——CVE-2026-11857—19.3%
——6——CVE-2026-58054—19.3%
——6Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. This CVE was assigned on the basis that the permission system allows a limited administrator to grant privileges exceeding their own authorization scope, potentially constituting an insecure default configuration. Following a dispute, the MITRE TL-Root determined the behavior reflects documented and intended product design rather than a security vulnerability.41dCVE-2020-5343—19.3%
——6——CVE-2026-827004.3 MED19.3%
——6A vulnerability was found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /offersmail.php of the component Newsletter Subscription. The manipulation of the argument email results in cross site scripting. The attack may be performed from remote. The exploit has been made public and could be used.4dCVE-2026-24827—19.3%
——6——CVE-2025-398977.5 HIG19.3%
——6In the Linux kernel, the following vulnerability has been resolved:
net: xilinx: axienet: Add error handling for RX metadata pointer retrieval
Add proper error checking for dmaengine_desc_get_metadata_ptr() which
can return an error pointer and lead to potential crashes or undefined
behaviour if the pointer retrieval fails.
Properly handle the error by unmapping DMA buffer, freeing the skb and
returning early to prevent further processing with invalid data.36dCVE-2026-33002—19.3%
——6——CVE-2026-815258.1 HIG19.3%
——6The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace for database operations. An application that incorporates untrusted text into these identifiers may have operations silently directed at a different storage location than the one the application intended.6dCVE-2023-375247.7 HIG19.3%
——6HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of service. Since .NET Framework 4.5 has reached end-of-life and no longer receives security updates, it may expose the application to publicly known security weaknesses through vulnerable third-party components.59dCVE-2025-24236—19.3%
——6——CVE-2025-5517—19.3%
——6——CVE-2025-58603—19.3%
——6——CVE-2025-68666—19.3%
——6——CVE-2023-51795—19.3%
——6——CVE-2024-50559—19.3%
——6——CVE-2026-107236.8 MED19.3%
——6BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses.
This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.43dCVE-2022-32889—19.3%
——6——CVE-2025-564479.8 CRI19.3%
——6TM2 Monitoring v3.04 contains an authentication bypass and plaintext credential disclosure.60dCVE-2026-404177.8 HIG19.3%
——6Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally.24dCVE-2025-2938—19.3%
——6——CVE-2025-60129—19.3%
——6——CVE-2023-4194—19.3%
——6——CVE-2025-10125—19.3%
——6——CVE-2026-192083.7 LOW19.3%
——6A vulnerability was detected in WonderTrader up to 0.9.9. Impacted is the function TraderDD::queryTrades of the file src/TraderDD/TraderDD.cpp. The manipulation of the argument FID_JYLB results in enforcement of behavioral workflow. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitability is considered difficult. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.22dCVE-2025-57774—19.3%
——6——CVE-2024-1416—19.3%
——6——CVE-2022-488227.8 HIG19.3%
——6In the Linux kernel, the following vulnerability has been resolved:
usb: f_fs: Fix use-after-free for epfile
Consider a case where ffs_func_eps_disable is called from
ffs_func_disable as part of composition switch and at the
same time ffs_epfile_release get called from userspace.
ffs_epfile_release will free up the read buffer and call
ffs_data_closed which in turn destroys ffs->epfiles and
mark it as NULL. While this was happening the driver has
already initialized the local epfile in ffs_func_eps_disable
which is now freed and waiting to acquire the spinlock. Once
spinlock is acquired the driver proceeds with the stale value
of epfile and tries to free the already freed read buffer
causing use-after-free.
Following is the illustration of the race:
CPU1 CPU2
ffs_func_eps_disable
epfiles (local copy)
ffs_epfile_release
ffs_data_closed
if (last file closed)
ffs_data_reset
ffs_data_clear
ffs_epfiles_destroy
spin_lock
dereference epfiles
Fix this races by taking epfiles local copy & assigning it under
spinlock and if epfiles(local) is null then update it in ffs->epfiles
then finally destroy it.
Extending the scope further from the race, protecting the ep related
structures, and concurrent accesses.31d