Vulnerabilities exploitable today
401,106in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,446
- High15,740
- Medium14,735
- Low1,451
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2013-6194—99.3%
——30——CVE-2009-1350—99.3%
——30——CVE-2022-23305—99.3%
——30——CVE-2017-13704—99.3%
——30——CVE-2018-11770—99.3%
——30——CVE-2016-0488—99.3%
——30——CVE-2010-0242—99.3%
——30——CVE-2010-1964—99.3%
——30——CVE-2021-28639—99.3%
——30——CVE-2020-2871—99.3%
——30——CVE-2025-252569.8 CRI99.3%
——30An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiSIEM 7.3.0 through 7.3.1, FortiSIEM 7.2.0 through 7.2.5, FortiSIEM 7.1.0 through 7.1.7, FortiSIEM 7.0.0 through 7.0.3, FortiSIEM 6.7.0 through 6.7.9, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions, FortiSIEM 6.4 all versions, FortiSIEM 6.3 all versions, FortiSIEM 6.2 all versions, FortiSIEM 6.1 all versions, FortiSIEM 5.4 all versions, FortiSIEM 5.3 all versions, FortiSIEM 5.2 all versions, FortiSIEM 5.1 all versions, FortiSIEM 5.0 all versions, FortiSIEM 4.10 all versions, FortiSIEM 4.9 all versions, FortiSIEM 4.7 all versions allows an unauthenticated attacker to execute unauthorized code or commands via crafted CLI requests.64dCVE-2024-25111—99.3%
——30——CVE-2023-29489—99.3%
——30——CVE-2007-0213—99.3%
——30——CVE-2019-6553—99.3%
——30——CVE-2003-0694—99.3%
——30——CVE-2008-2161—99.3%
——30——CVE-2019-10123—99.3%
——30——CVE-2012-3399—99.3%
——30——CVE-2020-2852—99.3%
——30——CVE-2019-12630—99.3%
——30——CVE-2011-4828—99.3%
——30——CVE-2020-4241—99.3%
——30——CVE-2020-13548—99.3%
——30——CVE-2020-2854—99.3%
——30——CVE-2005-4085—99.3%
——30——CVE-2021-26690—99.3%
——30——CVE-2023-46574—99.3%
——30——CVE-2025-36604—99.3%
——30——CVE-2018-16833—99.3%
——30——CVE-2009-3869—99.3%
——30——CVE-2018-0934—99.3%
——30——CVE-2025-553159.9 CRI99.3%
——30Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.3dCVE-2022-0415—99.3%
——30——CVE-2018-0835—99.3%
——30——CVE-2015-2295—99.3%
——30——CVE-2017-11909—99.3%
——30——CVE-2019-0233—99.3%
——30——CVE-2012-1851—99.3%
——30——CVE-2019-10405—99.3%
——30——