Vulnerabilities exploitable today
407,950in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,767
New KEV · 24H0
Exploit Today ≥ 701,698
Distribution · last window
- Critical5,769
- High22,452
- Medium20,925
- Low2,194
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2007-4145—92.6%
——28——CVE-2000-1206—92.6%
——28——CVE-2014-4227—92.6%
——28——CVE-2009-0464—92.6%
——28——CVE-2015-1233—92.6%
——28——CVE-2013-3609—92.6%
——28——CVE-2012-3455—92.6%
——28——CVE-2015-3405—92.6%
——28——CVE-2026-2151—92.6%
——28——CVE-2019-9592—92.6%
——28——CVE-2026-33057—92.6%
——28——CVE-1999-1566—92.6%
——28——CVE-2012-4894—92.6%
——28——CVE-2012-5673—92.6%
——28——CVE-2011-2419—92.6%
——28——CVE-2021-40725—92.6%
——28——CVE-2006-3462—92.6%
——28——CVE-2016-9137—92.6%
——28——CVE-2009-3179—92.6%
——28——CVE-2021-24019—92.6%
——28——CVE-2019-1313—92.6%
——28——CVE-2015-8408—92.6%
——28——CVE-2017-5121—92.6%
——28——CVE-2019-16118—92.6%
——28——CVE-2020-2231—92.6%
——28——CVE-2019-16276—92.6%
——28——CVE-2006-1630—92.6%
——28——CVE-2020-26693—92.6%
——28——CVE-2021-1723—92.6%
——28——CVE-2010-3004—92.6%
——28——CVE-2020-11617.5 HIG92.6%
——28A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication.
A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the ASP.NET Core application.
The update addresses the vulnerability by correcting how the ASP.NET Core web application handles web requests.77dCVE-2022-32026—92.6%
——28——CVE-2018-8024—92.6%
——28——CVE-2007-5332—92.6%
——28——CVE-2014-2610—92.6%
——28——CVE-2007-1473—92.6%
——28——CVE-2000-1085—92.6%
——28——CVE-2026-20457.3 HIG92.6%
——28GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of XWD files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28265.113dCVE-2020-11080—92.6%
——28——CVE-2019-6804—92.6%
——28——