Vulnerabilities exploitable today
352,791in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,653
New KEV · 24H0
Exploit Today ≥ 701,600
Distribution · last window
- Critical2,306
- High8,002
- Medium7,177
- Low676
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-4227—3.7%
——1——CVE-2018-21073—3.7%
——1——CVE-2025-218075.5 MED3.7%
——1In the Linux kernel, the following vulnerability has been resolved:
block: fix queue freeze vs limits lock order in sysfs store methods
queue_attr_store() always freezes a device queue before calling the
attribute store operation. For attributes that control queue limits, the
store operation will also lock the queue limits with a call to
queue_limits_start_update(). However, some drivers (e.g. SCSI sd) may
need to issue commands to a device to obtain limit values from the
hardware with the queue limits locked. This creates a potential ABBA
deadlock situation if a user attempts to modify a limit (thus freezing
the device queue) while the device driver starts a revalidation of the
device queue limits.
Avoid such deadlock by not freezing the queue before calling the
->store_limit() method in struct queue_sysfs_entry and instead use the
queue_limits_commit_update_frozen helper to freeze the queue after taking
the limits lock.
This also removes taking the sysfs lock for the store_limit method as
it doesn't protect anything here, but creates even more nesting.
Hopefully it will go away from the actual sysfs methods entirely soon.
(commit log adapted from a similar patch from Damien Le Moal)9dCVE-2020-0265—3.7%
——1——CVE-2024-34153—3.7%
——1——CVE-2026-57307—3.7%
——1——CVE-2026-24809—3.7%
——1——CVE-2026-64874—3.7%
——1Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN credentials were exposed in administrator request URLs.4dCVE-2024-28887—3.7%
——1——CVE-2019-9249—3.7%
——1——CVE-2025-38092—3.7%
——1——CVE-2019-20534—3.7%
——1——CVE-2023-28585—3.7%
——1——CVE-2024-6580—3.7%
——1——CVE-2024-45355—3.7%
——1——CVE-2025-37751—3.7%
——1——CVE-2021-35085—3.7%
——1——CVE-2024-24977—3.7%
——1——CVE-2023-20988—3.7%
——1——CVE-2022-25992—3.7%
——1——CVE-2026-46069—3.7%
——1——CVE-2023-31358—3.7%
——1——CVE-2025-28932—3.7%
——1——CVE-2026-341985.3 MED3.7%
——1Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the TrustProxies middleware trusts all proxies ($proxies = '*'), accepting X-Forwarded-Host from any source. The TrustHosts middleware, intended to prevent host header attacks, has a circular caching dependency that prevents it from ever validating hosts. When a password reset is requested, the ResetPassword notification generates the reset URL using url(route(..., false)), which derives the host from the (spoofable) request. An unauthenticated attacker can trigger a password reset email containing a link pointing to an attacker-controlled domain, enabling token theft and account takeover. This issue is fixed in version 4.0.0-beta.471.20dCVE-2023-53259—3.7%
——1——CVE-2025-28931—3.7%
——1——CVE-2026-591467.8 HIG3.7%
——1Data::SpatialHash::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via unvalidated bucket, link and free-list indices in sph_walk_cell and sph_alloc_slot.
The attach-time validator sph_validate_header checks the header scalars and region layout against the file size, but does not validate the array contents it then trusts. sph_walk_cell reads entries[buckets[b]] and follows each entry's next link raw, and sph_alloc_slot writes through a file-stored free_head index, none bounded against the entry count (max_entries).
A local peer that can write the backing file can leave the header valid while poisoning the bucket chain and free list, so a query reads through an out-of-bounds bucket and next index and an insert writes through an out-of-bounds free-list head, corrupting memory or crashing the process.5dCVE-2025-39886—3.7%
——1——CVE-2025-58831—3.7%
——1——CVE-2026-8012—3.7%
——1——CVE-2025-28923—3.7%
——1——CVE-2021-1939—3.7%
——1——CVE-2026-118803.1 LOW3.7%
——1The Fluent Forms WordPress plugin before 6.2.1 does not properly verify ownership before processing a subscription cancellation request, allowing authenticated users with a low-privilege account to cancel subscriptions belonging to other users.26dCVE-2025-4636—3.7%
——1——CVE-2026-28553—3.7%
——1——CVE-2021-20335—3.7%
——1——CVE-2026-2428—3.7%
——1——CVE-2025-39719—3.7%
——1——CVE-2021-22295—3.7%
——1——CVE-2023-25176—3.7%
——1——