Vulnerabilities exploitable today
402,527in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,756
New KEV · 24H0
Exploit Today ≥ 701,669
Distribution · last window
- Critical4,273
- High17,818
- Medium16,366
- Low1,585
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2023-24851—1.5%
——0——CVE-2023-28542—1.5%
——0——CVE-2021-0611—1.5%
——0——CVE-2023-48409—1.5%
——0——CVE-2022-25713—1.5%
——0——CVE-2022-20015—1.5%
——0——CVE-2026-40224—1.5%
——0——CVE-2023-28557—1.5%
——0——CVE-2021-25511—1.5%
——0——CVE-2022-20271—1.5%
——0——CVE-2021-0612—1.5%
——0——CVE-2024-45444—1.5%
——0——CVE-2022-33232—1.5%
——0——CVE-2021-0413—1.5%
——0——CVE-2018-5852—1.5%
——0——CVE-2023-21630—1.5%
——0——CVE-2019-9268—1.5%
——0——CVE-2021-0528—1.5%
——0——CVE-2025-623172.6 LOW1.5%
——0HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. Passing sensitive data in URLs may expose it through browser history, logs, or intermediary systems, potentially leading to unintended information disclosure under certain conditions.18dCVE-2024-8885—1.5%
——0——CVE-2025-20025—1.5%
——0——CVE-2022-21769—1.5%
——0——CVE-2023-24853—1.5%
——0——CVE-2025-26470—1.5%
——0——CVE-2023-21632—1.5%
——0——CVE-2022-20079—1.5%
——0——CVE-2023-28573—1.5%
——0——CVE-2025-20087—1.5%
——0——CVE-2023-21651—1.5%
——0——CVE-2021-0615—1.5%
——0——CVE-2022-40534—1.5%
——0——CVE-2021-0619—1.5%
——0——CVE-2023-33029—1.5%
——0——CVE-2023-21672—1.5%
——0——CVE-2023-28539—1.5%
——0——CVE-2026-730727.3 HIG1.5%
——0Vim is an open source, command line text editor. Prior to 9.2.0846, set_sofo() in src/spellfile.c reuses sl_sal_first[] without resetting values left by set_sal_first(), so a crafted spell file containing an SN_SAL section before an SN_SOFO section causes under-counted mapping lists and attacker-influenced writes beyond a heap allocation. This issue is fixed in version 9.2.0846.18dCVE-2025-677946.1 MED1.5%
——0An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 before 24.2.8, and 25.1 before 25.1.6. Directories and files created by the agent are created with overly permissive ACLs, allowing local users without administrator rights to trigger actions or destabilize the agent.11dCVE-2026-798087.8 HIG1.5%
——0A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an authenticated local user to execute arbitrary code with elevated privileges on the affected host or to disrupt the availability of the affected service.17dCVE-2026-1026203.3 LOW1.5%
——0A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 245d3c6823377755f2c1d5fdddd010279c6ed94d. It is suggested to install a patch to address this issue.22dCVE-2021-0527—1.5%
——0——