Vulnerabilities exploitable today
349,216in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,644
New KEV · 24H0
Exploit Today ≥ 701,579
Distribution · last window
- Critical1,299
- High4,252
- Medium3,580
- Low277
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-32927—0.3%
——0——CVE-2024-56187—0.3%
——0——CVE-2024-32901—0.3%
——0——CVE-2023-48345—0.3%
——0——CVE-2024-56186—0.3%
——0——CVE-2023-48350—0.3%
——0——CVE-2023-48349—0.3%
——0——CVE-2023-48344—0.3%
——0——CVE-2023-48343—0.3%
——0——CVE-2023-48351—0.3%
——0——CVE-2025-47349—0.3%
——0——CVE-2025-36105—0.3%
——0——CVE-2024-20086—0.3%
——0——CVE-2024-20087—0.3%
——0——CVE-2024-47017—0.3%
——0——CVE-2022-39856—0.3%
——0——CVE-2018-9449—0.3%
——0——CVE-2023-40638—0.3%
——0——CVE-2024-36334—0.3%
——0——CVE-2025-36522—0.3%
——0——CVE-2023-33917—0.3%
——0——CVE-2023-20726—0.3%
——0——CVE-2026-499585.0 MED0.3%
——0Hermes WebUI before version 0.51.303 contains a time-of-check time-of-use (TOCTOU) race condition vulnerability in the git_discard function within api/workspace_git.py that allows attackers to delete files outside the configured workspace boundary by replacing a validated path component with a symlink after validation but before deletion. Attackers can substitute a workspace-controlled path component with a symlink pointing to an external directory between the safe_resolve_ws() validation step and the subsequent Path.unlink() or shutil.rmtree() deletion call, causing the delete operation to follow the symlink and remove arbitrary files outside the workspace.3dCVE-2024-39429—0.3%
——0——CVE-2024-39430—0.3%
——0——CVE-2025-47329—0.3%
——0——CVE-2025-47327—0.3%
——0——CVE-2023-52536—0.3%
——0——CVE-2022-39850—0.3%
——0——CVE-2022-39848—0.3%
——0——CVE-2022-39849—0.3%
——0——CVE-2022-39903—0.3%
——0——CVE-2018-9412—0.3%
——0——CVE-2025-22446—0.3%
——0——CVE-2022-42772—0.3%
——0——CVE-2023-33916—0.3%
——0——CVE-2025-36898—0.3%
——0——CVE-2022-47356—0.3%
——0——CVE-2022-42782—0.3%
——0——CVE-2025-21466—0.3%
——0——