Vulnerabilities exploitable today
366,836in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,454
- High10,487
- Medium5,458
- Low531
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-531087.3 HIG15.4%
——5In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Adjust VSDB parser for replay feature
At some point, the IEEE ID identification for the replay check in the
AMD EDID was added. However, this check causes the following
out-of-bounds issues when using KASAN:
[ 27.804016] BUG: KASAN: slab-out-of-bounds in amdgpu_dm_update_freesync_caps+0xefa/0x17a0 [amdgpu]
[ 27.804788] Read of size 1 at addr ffff8881647fdb00 by task systemd-udevd/383
...
[ 27.821207] Memory state around the buggy address:
[ 27.821215] ffff8881647fda00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 27.821224] ffff8881647fda80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 27.821234] >ffff8881647fdb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 27.821243] ^
[ 27.821250] ffff8881647fdb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 27.821259] ffff8881647fdc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 27.821268] ==================================================================
This is caused because the ID extraction happens outside of the range of
the edid lenght. This commit addresses this issue by considering the
amd_vsdb_block size.
(cherry picked from commit b7e381b1ccd5e778e3d9c44c669ad38439a861d8)25dCVE-2023-32429—15.4%
——5——CVE-2021-31359—15.4%
——5——CVE-2024-500967.3 HIG15.4%
——5In the Linux kernel, the following vulnerability has been resolved:
nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
The `nouveau_dmem_copy_one` function ensures that the copy push command is
sent to the device firmware but does not track whether it was executed
successfully.
In the case of a copy error (e.g., firmware or hardware failure), the
copy push command will be sent via the firmware channel, and
`nouveau_dmem_copy_one` will likely report success, leading to the
`migrate_to_ram` function returning a dirty HIGH_USER page to the user.
This can result in a security vulnerability, as a HIGH_USER page that may
contain sensitive or corrupted data could be returned to the user.
To prevent this vulnerability, we allocate a zero page. Thus, in case of
an error, a non-dirty (zero) page will be returned to the user.25dCVE-2025-70849—15.4%
——5——CVE-2025-63811—15.4%
——5——CVE-2017-1575—15.4%
——5——CVE-2026-6997—15.4%
——5——CVE-2024-40814—15.4%
——5——CVE-2022-49031—15.4%
——5——CVE-2024-36938—15.4%
——5——CVE-2025-15452—15.4%
——5——CVE-2022-50660—15.4%
——5——CVE-2026-43574—15.4%
——5——CVE-2022-48966—15.4%
——5——CVE-2026-489546.1 MED15.4%
——5Improper validation leads to a generic XSS vector in the language override feature.51dCVE-2025-656704.3 MED15.4%
——5An Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows students to access sensitive admin/teacher endpoints by manipulating course IDs in URLs, resulting in unauthorized disclosure of sensitive course, admin, and student data. The leak occurs momentarily before the system reverts to a normal state restricting access.55dCVE-2023-53826—15.4%
——5——CVE-2020-1706—15.4%
——5——CVE-2026-36938—15.4%
——5——CVE-2026-489526.1 MED15.4%
——5Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.51dCVE-2026-31944—15.4%
——5——CVE-2025-10075—15.4%
——5——CVE-2024-4604—15.4%
——5——CVE-2026-2432—15.4%
——5——CVE-2024-42131—15.4%
——5——CVE-2024-43787—15.4%
——5——CVE-2024-235733.7 LOW15.4%
——5HCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13. that makes the SS LLUCKY13 possible affects the TLS1.1and 1.2 and DTLS1.0 or 1.2 implementations . It also affects previous versions such as SSL3.0 and TLS1.0. This can also be considered a type of man-in-the-middle attack.43dCVE-2022-49032—15.4%
——5——CVE-2024-45305—15.4%
——5——CVE-2026-7000—15.4%
——5——CVE-2022-49391—15.4%
——5——CVE-2025-52924—15.4%
——5——CVE-2026-105975.3 MED15.4%
——5OMICARD EDM developed by ITPison has a Insecure Direct Object Reference vulnerability, allowing unauthenticated remote attackers to modify a specific parameter to obtain user's email address.37dCVE-2019-19355—15.4%
——5——CVE-2026-1537—15.4%
——5——CVE-2026-7475—15.4%
——5——CVE-2024-49703—15.4%
——5——CVE-2024-13941—15.4%
——5——CVE-2026-73288—15.4%
——5RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-rc.1, RustFS Object Lock enforcement in crates/ecstore/src/bucket/object_lock/objectlock_sys.rs lets check_object_lock_for_deletion, delete_prefix, and lifecycle and scanner sweeps treat ConfigNotFound, unreadable .metadata.bin data, or unparseable metadata as no lock configuration, allowing objects under COMPLIANCE retention to be deleted or expired. This issue is fixed in version 1.0.0-rc.1.16d