Vulnerabilities exploitable today
367,284in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,295
- High9,356
- Medium5,353
- Low528
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-13263—17.3%
——5——CVE-2024-273927.8 HIG17.3%
——5In the Linux kernel, the following vulnerability has been resolved:
nvme: host: fix double-free of struct nvme_id_ns in ns_update_nuse()
When nvme_identify_ns() fails, it frees the pointer to the struct
nvme_id_ns before it returns. However, ns_update_nuse() calls kfree()
for the pointer even when nvme_identify_ns() fails. This results in
KASAN double-free, which was observed with blktests nvme/045 with
proposed patches [1] on the kernel v6.8-rc7. Fix the double-free by
skipping kfree() when nvme_identify_ns() fails.28dCVE-2025-29915—17.3%
——5——CVE-2026-727508.8 HIG17.3%
——5n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the Snowflake node's Execute Query operation, which interpolates expression values directly into the SQL string. When a workflow author embeds untrusted, externally-controlled expression data directly in a raw SQL query, that data is not parameterized, allowing SQL injection. The fix adds an optional 'Query Parameters' field to bind values via positional placeholders.4dCVE-2024-47872—17.3%
——5——CVE-2026-35636—17.3%
——5——CVE-2016-0252—17.3%
——5——CVE-2026-32022—17.3%
——5——CVE-2026-742425.3 MED17.3%
——5A flaw was found in Red Hat Quay. An administrator of any repository, by knowing or guessing a target notification's Universally Unique Identifier (UUID), can read the notification configuration, including sensitive details like webhook URLs, Slack tokens, and email addresses. This vulnerability also allows them to trigger test notifications for another repository. This could lead to unauthorized information disclosure and potential misuse of notification services.12dCVE-2026-70462—17.3%
——5——CVE-2023-37296—17.3%
——5——CVE-2021-0153—17.3%
——5——CVE-2025-14317—17.3%
——5——CVE-2024-13860—17.3%
——5——CVE-2020-0409—17.3%
——5——CVE-2026-166207.5 HIG17.3%
——5The WPC Name Your Price for WooCommerce WordPress plugin before 2.2.5 does not enforce its server-side price allowlist for products configured in "Select" price mode, allowing an unauthenticated visitor to add such a product to the cart at an arbitrary value below the merchant-defined allowed prices and commit a real order at that price (revenue loss / underpriced orders). This is a distinct, unfixed vector from CVE-2025-12115, whose 2.2.0 fix only addressed applying a custom price to products where Name Your Price is disabled and left the Select-mode allowlist unenforced through 2.2.4.6dCVE-2025-13383—17.3%
——5——CVE-2025-11655—17.3%
——5——CVE-2025-628514.4 MED17.3%
——5A path traversal vulnerability has been reported to affect License Center. If a local attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data.
We have already fixed the vulnerability in the following version:
License Center 1.9.56 and later40dCVE-2026-45441—17.3%
——5——CVE-2024-40935—17.3%
——5——CVE-2025-13354—17.3%
——5——CVE-2023-27937—17.3%
——5——CVE-2021-14886.7 MED17.3%
——5A vulnerability in the upgrade process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to inject commands that could be executed with root privileges on the underlying operating system (OS). This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by uploading a crafted upgrade package file to an affected device. A successful exploit could allow the attacker to inject commands that could be executed with root privileges on the underlying OS.21dCVE-2021-472437.1 HIG17.3%
——5In the Linux kernel, the following vulnerability has been resolved:
sch_cake: Fix out of bounds when parsing TCP options and header
The TCP option parser in cake qdisc (cake_get_tcpopt and
cake_tcph_may_drop) could read one byte out of bounds. When the length
is 1, the execution flow gets into the loop, reads one byte of the
opcode, and if the opcode is neither TCPOPT_EOL nor TCPOPT_NOP, it reads
one more byte, which exceeds the length of 1.
This fix is inspired by commit 9609dad263f8 ("ipv4: tcp_input: fix stack
out of bounds when parsing TCP options.").
v2 changes:
Added doff validation in cake_get_tcphdr to avoid parsing garbage as TCP
header. Although it wasn't strictly an out-of-bounds access (memory was
allocated), garbage values could be read where CAKE expected the TCP
header if doff was smaller than 5.28dCVE-2025-14116—17.3%
——5——CVE-2024-6702—17.3%
——5——CVE-2024-6701—17.3%
——5——CVE-2026-806458.1 HIG17.3%
——5In the Linux kernel, the following vulnerability has been resolved:
rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc()
With a list_for_each() loop, if we don't find the item we are looking for
in the list, then the loop exits with the iterator, which is "dbell" in
this loop, pointing to invalid memory.
This code uses the "found" variable to determine if we have found the
doorbell we are looking for or not. However, the problem that the "found"
variable needs to be set to false at the start of each iteration,
otherwise after the first correct doorbell, then everything is marked as
found.
Reset the "found" to false at the start of the iteration and move the
variable inside the loop.3dCVE-2024-0640—17.3%
——5——CVE-2023-37295—17.3%
——5——CVE-2026-2972—17.3%
——5——CVE-2021-0159—17.3%
——5——CVE-2024-6528—17.3%
——5——CVE-2026-22001—17.3%
——5——CVE-2023-1314—17.3%
——5——CVE-2022-34006—17.3%
——5——CVE-2025-52964—17.3%
——5——CVE-2025-13198—17.3%
——5——CVE-2025-31184—17.3%
——5——