Vulnerabilities exploitable today
354,835in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,656
New KEV · 24H0
Exploit Today ≥ 701,601
Distribution · last window
- Critical2,555
- High9,167
- Medium7,427
- Low691
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-34671—5.9%
——2——CVE-2018-11911—5.9%
——2——CVE-2023-38280—5.9%
——2——CVE-2018-25299—5.9%
——2——CVE-2019-2032—5.9%
——2——CVE-2026-85017.8 HIG5.9%
——2Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode processes to access the PCTCoreDriver WDM device interface and invoke privileged IOCTL handlers. A local attacker with the ability to access or load the affected driver can exploit this vulnerability to perform sensitive and privileged operations on the target system.11dCVE-2025-36019—5.9%
——2——CVE-2025-38157—5.9%
——2——CVE-2018-254328.4 HIG5.9%
——2Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft a malicious input file with a 672-byte offset to overwrite the nSEH and SEH pointers, enabling code execution through exception handler hijacking.11dCVE-2023-23439—5.9%
——2——CVE-2025-70095—5.9%
——2——CVE-2025-41052—5.9%
——2——CVE-2021-41614—5.9%
——2——CVE-2025-41053—5.9%
——2——CVE-2026-141906.1 MED5.9%
——2The Sina Extension for Elementor WordPress plugin before 3.10.2 does not escape a value reconstructed from request input in one of its unauthenticated AJAX handlers before reflecting it into the HTML response, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of anyone who triggers a crafted request.6dCVE-2025-41046—5.9%
——2——CVE-2025-41045—5.9%
——2——CVE-2026-13537—5.9%
——2——CVE-2025-41040—5.9%
——2——CVE-2024-27366—5.9%
——2——CVE-2025-14289—5.9%
——2——CVE-2025-571455.4 MED5.9%
——2A cross-site scripting (XSS) vulnerability exists in the search-autootaxi.php endpoint of the ATSMS web application. The application fails to properly sanitize user input submitted through a form field, allowing an attacker to inject arbitrary JavaScript code. The malicious payload is stored in the backend and executed when a user or administrator accesses the affected report page. This allows attackers to exfiltrate session cookies, hijack user sessions, and perform unauthorized actions in the context of the victims browser.28dCVE-2024-41173—5.9%
——2——CVE-2022-32482—5.9%
——2——CVE-2025-38468—5.9%
——2——CVE-2025-13610—5.9%
——2——CVE-2023-30675—5.9%
——2——CVE-2025-385707.8 HIG5.9%
——2In the Linux kernel, the following vulnerability has been resolved:
eth: fbnic: unlink NAPIs from queues on error to open
CI hit a UaF in fbnic in the AF_XDP portion of the queues.py test.
The UaF is in the __sk_mark_napi_id_once() call in xsk_bind(),
NAPI has been freed. Looks like the device failed to open earlier,
and we lack clearing the NAPI pointer from the queue.3dCVE-2024-42508—5.9%
——2——CVE-2026-352005.4 MED5.9%
——2Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.73 and 9.7.1-alpha.4, a file can be uploaded with a filename extension that passes the file extension allowlist (e.g., .txt) but with a Content-Type header that differs from the extension (e.g., text/html). The Content-Type is passed to the storage adapter without consistency validation. Storage adapters that store and serve the provided Content-Type (such as S3 or GCS) serve the file with the mismatched Content-Type. The default GridFS adapter is not affected because it derives Content-Type from the filename at serving time. This vulnerability is fixed in 8.6.73 and 9.7.1-alpha.4.8dCVE-2026-81944.3 MED5.9%
——2A security vulnerability has been detected in osTicket up to 1.18.3. Impacted is an unknown function of the file include/class.dispatcher.php of the component Dispatcher. The manipulation of the argument _method leads to cross-site request forgery. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through a pull request but has not reacted yet.9dCVE-2025-36397—5.9%
——2——CVE-2026-501834.7 MED5.9%
——2WWBN AVideo is an open source video platform. Versions 29.0 and below contain a stored Cross-Site Scripting vulnerability in the YouTubeAPI plugin. The plugin renders the snippet.title field returned by the YouTube Data API into the homepage gallery markup with no HTML encoding. The title is set by the YouTube video uploader (anyone in the world) and is treated by AVideo as trusted content. A YouTube uploader who controls a video matching the operator's configured query injects HTML into the AVideo homepage by setting their video's title to a JavaScript-bearing string; the payload then executes in the browser of every visitor who loads any page that renders the gallery. When the visitor is an AVideo administrator, the injected JavaScript performs any admin action (create user, promote to admin, change configuration, install plugin) that uses cookie-based authentication without an additional CSRF token, escalating the bug into full administrative takeover. The payload persists for the duration of cacheTimeout (default 3600 seconds) after the malicious title is set on YouTube and survives YouTube removing the hostile video for the same window. This issue has been addressed by commit https://github.com/WWBN/AVideo/commit/7292129eaee5f609beae103b5cb387d55f17b877.17dCVE-2023-54233—5.9%
——2——CVE-2026-113716.1 MED5.9%
——2The BetterDocs WordPress plugin before 4.5.5 does not sanitise an AI-generated documentation summary before storing and outputting it, and the feature that generates it is exposed to unauthenticated users, allowing them to store a malicious payload via prompt injection that executes in the browser of any visitor who views the affected page, including administrators.17dCVE-2026-1094—5.9%
——2——CVE-2024-27367—5.9%
——2——CVE-2025-70091—5.9%
——2——CVE-2026-32109—5.9%
——2——CVE-2024-27364—5.9%
——2——