Vulnerabilities exploitable today
351,837in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,651
New KEV · 24H0
Exploit Today ≥ 701,587
Distribution · last window
- Critical1,811
- High5,855
- Medium4,717
- Low452
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2022-33266—1.8%
——1——CVE-2026-45353—1.8%
——1——CVE-2021-0562—1.8%
——1——CVE-2018-25274—1.8%
——1——CVE-2022-33281—1.8%
——1——CVE-2023-20775—1.8%
——1——CVE-2026-4016—1.8%
——1——CVE-2026-147903.3 LOW1.8%
——1A flaw has been found in GPAC 26.02.0. This affects the function nhmldump_send_frame of the file src/filters/write_nhml.c of the component Media File Handler. Executing a manipulation can lead to null pointer dereference. The attack requires local access. The exploit has been published and may be used. This patch is called bd1d94e70e3bef364c07c5a1d94eca5c9f56e160. A patch should be applied to remediate this issue. The project explains: "I would consider most of these more as bugs than vulns but anyway they're good to fix".16dCVE-2023-21640—1.8%
——1——CVE-2023-7265—1.8%
——1——CVE-2021-0584—1.8%
——1——CVE-2026-38719—1.8%
——1——CVE-2026-31689—1.8%
——1——CVE-2026-337887.8 HIG1.8%
——1A Missing Authentication for Critical Function vulnerability in the Flexible PIC Concentrators (FPCs) of Juniper Networks Junos OS Evolved on PTX Series allows a local, authenticated attacker with low privileges to gain direct access to FPCs installed in the device.
A local user with low privileges can gain direct access to the installed FPCs as a high privileged user, which can potentially lead to a full compromise of the affected component.
This issue affects Junos OS Evolved on PTX10004, PTX10008, PTX100016, with JNP10K-LC1201 or JNP10K-LC1202:
* All versions before 21.2R3-S8-EVO,
* 21.4-EVO versions before 21.4R3-S7-EVO,
* 22.2-EVO versions before 22.2R3-S4-EVO,
* 22.3-EVO versions before 22.3R3-S3-EVO,
* 22.4-EVO versions before 22.4R3-S2-EVO,
* 23.2-EVO versions before 23.2R2-EVO.5hCVE-2022-25715—1.8%
——1——CVE-2026-533245.5 MED1.8%
——1In the Linux kernel, the following vulnerability has been resolved:
net: mana: Use pci_name() for debugfs directory naming
Use pci_name(pdev) for the per-device debugfs directory instead of
hardcoded "0" for PFs and pci_slot_name(pdev->slot) for VFs. The
previous approach had two issues:
1. pci_slot_name() dereferences pdev->slot, which can be NULL for VFs
in environments like generic VFIO passthrough or nested KVM,
causing a NULL pointer dereference.
2. Multiple PFs would all use "0", and VFs across different PCI
domains or buses could share the same slot name, leading to
-EEXIST errors from debugfs_create_dir().
pci_name(pdev) returns the unique BDF address, is always valid, and is
unique across the system.16dCVE-2026-28587—1.8%
——1——CVE-2026-23155—1.8%
——1——CVE-2022-43125.5 MED1.8%
——1
A cleartext storage of sensitive information vulnerability exists in PcVue versions 8.10 through 15.2.3. This could
allow an unauthorized user with access the email and short messaging service (SMS) accounts configuration files
to discover the associated simple mail transfer protocol (SMTP) account credentials and the SIM card PIN code.
Successful exploitation of this vulnerability could allow an unauthorized user access to the underlying email
account and SIM card.
13dCVE-2022-33301—1.8%
——1——CVE-2025-15621—1.8%
——1——CVE-2023-20767—1.8%
——1——CVE-2021-0538—1.8%
——1——CVE-2023-31306—1.8%
——1——CVE-2025-37985—1.8%
——1——CVE-2026-21054—1.8%
——1——CVE-2022-33263—1.8%
——1——CVE-2024-25023—1.8%
——1——CVE-2022-20114—1.8%
——1——CVE-2021-0926—1.8%
——1——CVE-2023-21638—1.8%
——1——CVE-2023-21637—1.8%
——1——CVE-2023-20774—1.8%
——1——CVE-2023-20768—1.8%
——1——CVE-2022-25721—1.8%
——1——CVE-2022-25746—1.8%
——1——CVE-2025-66906—1.8%
——1——CVE-2021-39799—1.8%
——1——CVE-2025-21082—1.8%
——1——CVE-2026-20447—1.8%
——1——