Vulnerabilities exploitable today
352,969in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,653
New KEV · 24H0
Exploit Today ≥ 701,600
Distribution · last window
- Critical2,334
- High8,050
- Medium7,230
- Low682
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-22385—3.9%
——1——CVE-2025-13606—3.9%
——1——CVE-2026-32868—3.9%
——1——CVE-2026-4377—3.9%
——1——CVE-2023-41822—3.9%
——1——CVE-2026-23757—3.9%
——1——CVE-2025-26580—3.9%
——1——CVE-2026-82846.1 MED3.9%
——1URL redirection to untrusted site ('open redirect') vulnerability in Universal Software Inc. FlexCity allows Input Data Manipulation.
This issue affects FlexCity: from 5.536.0 through 11052026.6dCVE-2023-40083—3.9%
——1——CVE-2022-38678—3.9%
——1——CVE-2026-32869—3.9%
——1——CVE-2025-0158—3.9%
——1——CVE-2024-41715—3.9%
——1——CVE-2026-502635.5 MED3.9%
——1A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-after-free read after changing window attributes and forcing the screen saver, leading to information disclosure.9hCVE-2025-38132—3.9%
——1——CVE-2025-38167—3.9%
——1——CVE-2025-26572—3.9%
——1——CVE-2026-20601—3.9%
——1——CVE-2025-69014—3.9%
——1——CVE-2025-26543—3.9%
——1——CVE-2025-43497—3.9%
——1——CVE-2026-21362—3.9%
——1——CVE-2025-25160—3.9%
——1——CVE-2026-348485.4 MED3.9%
——1hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, there is a stored XSS vulnerability in the team member overflow tooltip via display name. This issue has been patched in version 2026.3.0.3dCVE-2025-11697—3.9%
——1——CVE-2020-10839—3.9%
——1——CVE-2026-483067.8 HIG3.9%
——1Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.4dCVE-2025-26759—3.9%
——1——CVE-2026-22482—3.9%
——1——CVE-2025-31186—3.9%
——1——CVE-2022-38683—3.9%
——1——CVE-2026-46205—3.9%
——1——CVE-2026-361635.4 MED3.9%
——1An HTML injection vulnerability in the file view endpoint of LiquidFiles v4.2.7 allows authenticated attackers to execute arbitrary JavaScript in the context of the victim's browser via the uploading of and user interaction with a crafted HTML file.18dCVE-2022-32748—3.9%
——1——CVE-2021-22131—3.9%
——1——CVE-2024-10228—3.9%
——1——CVE-2026-47274—3.9%
——1——CVE-2025-26568—3.9%
——1——CVE-2022-48719—3.9%
——1——CVE-2026-61456—3.9%
——1——