Vulnerabilities exploitable today
367,284in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,687
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,295
- High9,357
- Medium5,357
- Low528
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-66837—17.7%
——5——CVE-2024-50279—17.7%
——5——CVE-2022-49501—17.7%
——5——CVE-2002-2220—17.7%
——5——CVE-2022-3958—17.7%
——5——CVE-2024-50278—17.7%
——5——CVE-2018-5547—17.7%
——5——CVE-2026-409727.5 HIG17.7%
——5An attacker on the same network as the remote application may be able to utilize a timing attack to discover information about the remote secret. In extreme circumstances this could result in the attacker determining the secret and uploading changed classes, thereby achieving remote code execution in the remote application.
Affected: Spring Boot 4.0.0–4.0.5 (fix 4.0.6), 3.5.0–3.5.13 (fix 3.5.14), 3.4.0–3.4.15 (fix 3.4.16), 3.3.0–3.3.18 (fix 3.3.19), 2.7.0–2.7.32 (fix 2.7.33); DevTools remote secret comparison. Versions that are no longer supported are also affected per vendor advisory.39dCVE-2025-64515—17.7%
——5——CVE-2022-42001—17.7%
——5——CVE-2026-40846—17.7%
——5——CVE-2024-56650—17.7%
——5——CVE-2023-52658—17.7%
——5——CVE-2024-50429—17.7%
——5——CVE-2025-5341—17.7%
——5——CVE-2025-13007—17.7%
——5——CVE-2026-40843—17.7%
——5——CVE-2022-46142—17.7%
——5——CVE-2026-483467.9 HIG17.7%
——5Animate is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.5dCVE-2024-31574—17.7%
——5——CVE-2017-7496—17.7%
——5——CVE-2025-5116—17.7%
——5——CVE-2022-21416—17.7%
——5——CVE-2022-42259—17.7%
——5——CVE-2025-9339—17.7%
——5——CVE-2023-3212—17.7%
——5——CVE-2026-40844—17.7%
——5——CVE-2025-5195—17.7%
——5——CVE-2023-28410—17.7%
——5——CVE-2024-31784—17.7%
——5——CVE-2024-49288—17.7%
——5——CVE-2024-6347—17.7%
——5——CVE-2024-40702—17.7%
——5——CVE-2025-362557.5 HIG17.7%
——5IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to create a user with privileged user roles due to improper privileged defined with unsafe actions.8dCVE-2024-44022—17.7%
——5——CVE-2022-42280—17.7%
——5——CVE-2025-12772—17.7%
——5——CVE-2025-49405—17.7%
——5——CVE-2018-5382—17.7%
——5——CVE-2022-49419—17.7%
——5——