Vulnerabilities exploitable today
407,950in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,767
New KEV · 24H0
Exploit Today ≥ 701,698
Distribution · last window
- Critical5,761
- High22,437
- Medium20,906
- Low2,191
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2015-2156—92.5%
——28——CVE-2020-11796.5 MED92.5%
——28An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.
There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.
The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.77dCVE-2013-5590—92.5%
——28——CVE-2015-8664—92.5%
——28——CVE-2011-1485—92.5%
——28——CVE-2001-03806.4 NO 92.5%
——28Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via a default, undocumented community string 'ILMI'.26dCVE-2013-2093—92.5%
——28——CVE-2011-0574—92.5%
——28——CVE-2010-3641—92.5%
——28——CVE-2000-10785.0 NO 92.5%
——28ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character.43dCVE-2010-3646—92.5%
——28——CVE-2019-19031—92.5%
——28——CVE-2012-0210—92.5%
——28——CVE-2008-0699—92.5%
——28——CVE-2008-2045—92.5%
——28——CVE-2012-3938—92.5%
——28——CVE-2016-98428.8 HIG92.5%
——28The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.114dCVE-2018-18805—92.5%
——28——CVE-2010-3640—92.5%
——28——CVE-2017-11563—92.5%
——28——CVE-2021-40617—92.5%
——28——CVE-2008-1178—92.5%
——28——CVE-2000-0341—92.5%
——28——CVE-2020-9344—92.5%
——28——CVE-2022-25330—92.5%
——28——CVE-2020-11718.8 HIG92.5%
——28A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnerability, an attacker would need to convince a target to clone a repository and open it in Visual Studio Code with the Python extension installed. Attacker-specified code would execute when the target opened the integrated terminal.
The update address the vulnerability by modifying the way Visual Studio Code Python extension handles environment variables.77dCVE-2007-1766—92.5%
——28——CVE-2010-0212—92.5%
——28——CVE-1999-0354—92.5%
——28——CVE-1999-0904—92.5%
——28——CVE-2001-0647—92.5%
——28——CVE-2013-2462—92.5%
——28——CVE-2017-3851—92.5%
——28——CVE-2013-0435—92.5%
——28——CVE-2017-5610—92.5%
——28——CVE-2014-3427—92.5%
——28——CVE-2020-28036—92.5%
——28——CVE-2018-11801—92.5%
——28——CVE-2015-2052—92.5%
——28——CVE-2017-7555—92.5%
——28——