Vulnerabilities exploitable today
401,106in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,467
- High15,794
- Medium14,763
- Low1,458
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2017-8046—99.5%
——30——CVE-2023-35885—99.5%
——30——CVE-2005-2297—99.5%
——30——CVE-2023-5914—99.5%
——30——CVE-2019-10267—99.5%
——30——CVE-2001-0550—99.5%
——30——CVE-2020-6146—99.5%
——30——CVE-2010-3653—99.5%
——30——CVE-2006-3942—99.5%
——30——CVE-2013-0803—99.5%
——30——CVE-2001-0925—99.5%
——30——CVE-2005-2668—99.5%
——30——CVE-2016-1561—99.5%
——30——CVE-2015-3087—99.5%
——30——CVE-2021-21242—99.5%
——30——CVE-2022-20707—99.5%
——30——CVE-2025-1044—99.5%
——30——CVE-2022-0169—99.5%
——30——CVE-2017-8229—99.5%
——30——CVE-2004-0206—99.5%
——30——CVE-2022-23178—99.5%
——30——CVE-2007-3370—99.5%
——30——CVE-2015-5374—99.5%
——30——CVE-2019-12255—99.5%
——30——CVE-2002-0568—99.5%
——30——CVE-2025-8943—99.5%
——30——CVE-2015-1592—99.5%
——30——CVE-2019-20215—99.5%
——30——CVE-2015-2794—99.5%
——30——CVE-2019-13345—99.5%
——30——CVE-2012-5159—99.5%
——30——CVE-2023-3643—99.5%
——30——CVE-2020-24391—99.5%
——30——CVE-2019-1234—99.5%
——30——CVE-2018-7700—99.5%
——30——CVE-2023-32166—99.5%
——30——CVE-2000-09796.4 NO 99.5%
——30File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the "Share Level Password" vulnerability.28dCVE-2004-0397—99.5%
——30——CVE-2015-0779—99.5%
——30——CVE-2025-117499.8 CRI99.5%
——30The AI Engine plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.3 via the /mcp/v1/ REST API endpoint that exposes the 'Bearer Token' value when 'No-Auth URL' is enabled. This makes it possible for unauthenticated attackers to extract the bearer token, which can be used to gain access to a valid session and perform many actions like creating a new administrator account, leading to privilege escalation.3d