Vulnerabilities exploitable today
367,284in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,687
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,311
- High9,414
- Medium5,381
- Low529
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2020-12485—18.2%
——5——CVE-2025-55630—18.2%
——5——CVE-2024-57378—18.1%
——5——CVE-2026-485506.1 MED18.1%
——5Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to reflected cross-site scripting in cmd.cgi via the NagFormId parameter. An unauthenticated remote attacker can craft a malicious link that, when followed by an authenticated user, executes arbitrary JavaScript in the victim's browser.20dCVE-2025-1065—18.1%
——5——CVE-2024-266427.8 HIG18.1%
——5In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: disallow anonymous set with timeout flag
Anonymous sets are never used with timeout from userspace, reject this.
Exception to this rule is NFT_SET_EVAL to ensure legacy meters still work.28dCVE-2025-3423—18.1%
——5——CVE-2025-31285—18.1%
——5——CVE-2024-44122—18.1%
——5——CVE-2023-52464—18.1%
——5——CVE-2024-0258—18.1%
——5——CVE-2022-45169—18.1%
——5——CVE-2025-61532—18.1%
——5——CVE-2022-40632—18.1%
——5——CVE-2024-27039—18.1%
——5——CVE-2025-5766—18.1%
——5——CVE-2018-4847—18.1%
——5——CVE-2024-23295—18.1%
——5——CVE-2023-26002—18.1%
——5——CVE-2018-20940—18.1%
——5——CVE-2013-2142—18.1%
——5——CVE-2025-7031—18.1%
——5——CVE-2017-18709—18.1%
——5——CVE-2022-48853—18.1%
——5——CVE-2022-49086—18.1%
——5——CVE-2024-45774—18.1%
——5——CVE-2018-25030—18.1%
——5——CVE-2025-68941—18.1%
——5——CVE-2026-49823—18.1%
——5——CVE-2024-45752—18.1%
——5——CVE-2024-420795.5 MED18.1%
——5In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix NULL pointer dereference in gfs2_log_flush
In gfs2_jindex_free(), set sdp->sd_jdesc to NULL under the log flush
lock to provide exclusion against gfs2_log_flush().
In gfs2_log_flush(), check if sdp->sd_jdesc is non-NULL before
dereferencing it. Otherwise, we could run into a NULL pointer
dereference when outstanding glock work races with an unmount
(glock_work_func -> run_queue -> do_xmote -> inode_go_sync ->
gfs2_log_flush).49dCVE-2025-7347—18.1%
——5——CVE-2026-32117—18.1%
——5——CVE-2022-49183—18.1%
——5——CVE-2024-360167.8 HIG18.1%
——5In the Linux kernel, the following vulnerability has been resolved:
tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
Assuming the following:
- side A configures the n_gsm in basic option mode
- side B sends the header of a basic option mode frame with data length 1
- side A switches to advanced option mode
- side B sends 2 data bytes which exceeds gsm->len
Reason: gsm->len is not used in advanced option mode.
- side A switches to basic option mode
- side B keeps sending until gsm0_receive() writes past gsm->buf
Reason: Neither gsm->state nor gsm->len have been reset after
reconfiguration.
Fix this by changing gsm->count to gsm->len comparison from equal to less
than. Also add upper limit checks against the constant MAX_MRU in
gsm0_receive() and gsm1_receive() to harden against memory corruption of
gsm->len and gsm->mru.
All other checks remain as we still need to limit the data according to the
user configuration and actual payload size.28dCVE-2025-65416—18.1%
——5——CVE-2026-391796.3 MED18.1%
——5A SQL injection vulnerability in SOGo before 5.12.7 allows authenticated users to execute arbitrary SQL statements via the newPassword parameter in the password change functionality.54dCVE-2025-14078—18.1%
——5——CVE-2026-504185.1 MED18.1%
——5Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally.41dCVE-2025-27631—18.1%
——5——