Vulnerabilities exploitable today
407,950in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,767
New KEV · 24H0
Exploit Today ≥ 701,698
Distribution · last window
- Critical5,761
- High22,437
- Medium20,906
- Low2,191
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2019-0956—92.5%
——28——CVE-2019-10073—92.5%
——28——CVE-2020-12278—92.5%
——28——CVE-2014-3676—92.5%
——28——CVE-2017-12762—92.5%
——28——CVE-2022-22029—92.5%
——28——CVE-2014-4678—92.5%
——28——CVE-2013-5590—92.5%
——28——CVE-2009-4536—92.5%
——28——CVE-2006-1234—92.5%
——28——CVE-2021-46067—92.5%
——28——CVE-2011-0574—92.5%
——28——CVE-2007-5005—92.5%
——28——CVE-2006-0685—92.5%
——28——CVE-2006-6104—92.5%
——28——CVE-2022-48565—92.5%
——28——CVE-2017-6463—92.5%
——28——CVE-2016-3690—92.5%
——28——CVE-2025-122358.0 HIG92.5%
——28A vulnerability was found in Tenda CH22 1.0.0.1. This vulnerability affects the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page results in buffer overflow. The attack must originate from the local network. The exploit has been made public and could be used.28dCVE-2013-6281—92.5%
——28——CVE-2020-11796.5 MED92.5%
——28An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.
There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.
The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.77dCVE-2012-5272—92.5%
——28——CVE-2016-3962—92.5%
——28——CVE-2001-03806.4 NO 92.5%
——28Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via a default, undocumented community string 'ILMI'.26dCVE-2012-4432—92.5%
——28——CVE-2025-11187—92.5%
——28——CVE-2011-0607—92.5%
——28——CVE-2012-5270—92.5%
——28——CVE-2012-3971—92.5%
——28——CVE-2017-7689—92.5%
——28——CVE-2019-7219—92.5%
——28——CVE-2005-2079—92.5%
——28——CVE-2011-2704—92.5%
——28——CVE-2025-109538.8 HIG92.5%
——28A security vulnerability has been detected in UTT 1200GW and 1250GW up to 3.0.0-170831/3.2.2-200710. This vulnerability affects unknown code of the file /goform/formApMail. The manipulation of the argument senderEmail leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.17dCVE-2009-1628—92.5%
——28——CVE-2019-17669—92.5%
——28——CVE-2017-6096—92.5%
——28——CVE-2011-0559—92.5%
——28——CVE-2008-3289—92.5%
——28——CVE-2011-0608—92.5%
——28——