Vulnerabilities exploitable today
401,677in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,400
- High15,531
- Medium14,790
- Low1,422
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2023-21123—1.1%
——0——CVE-2023-53614—1.1%
——0——CVE-2026-1005733.3 LOW1.1%
——0OpenClaw versions before 2026.8.1 contain a sandbox policy bypass vulnerability in the MCP loopback component that allows sandboxed coding-agent sessions to invoke tools explicitly denied by sandbox.tools.deny policy. Attackers can list and invoke denied tools to access data or perform actions the operator intended to exclude from the sandbox.23dCVE-2022-21779—1.1%
——0——CVE-2022-36845—1.1%
——0——CVE-2025-48066—1.1%
——0——CVE-2024-51516—1.1%
——0——CVE-2022-36863—1.1%
——0——CVE-2024-42038—1.1%
——0——CVE-2023-40142—1.1%
——0——CVE-2024-36499—1.1%
——0——CVE-2024-36347—1.1%
——0——CVE-2025-36059—1.1%
——0——CVE-2025-46685—1.1%
——0——CVE-2022-20372—1.1%
——0——CVE-2022-21784—1.1%
——0——CVE-2026-45362—1.1%
——0——CVE-2022-26449—1.1%
——0——CVE-2025-14759—1.1%
——0——CVE-2023-33896—1.1%
——0——CVE-2026-757827.8 HIG1.1%
——0IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable.10dCVE-2024-7295—1.1%
——0——CVE-2025-156216.0 MED1.1%
——0Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication63dCVE-2025-623162.3 LOW1.1%
——0HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured. Absence of these headers may reduce the effectiveness of browser-based security controls and could expose the application to limited security risks under specific conditions.16dCVE-2022-36852—1.1%
——0——CVE-2022-20248—1.1%
——0——CVE-2023-32878—1.1%
——0——CVE-2024-2451—1.1%
——0——CVE-2024-25027—1.1%
——0——CVE-2025-306694.8 MED1.1%
——0Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access.16dCVE-2024-32923—1.1%
——0——CVE-2022-36855—1.1%
——0——CVE-2024-31318—1.1%
——0——CVE-2024-58046—1.1%
——0——CVE-2025-59105—1.1%
——0——CVE-2026-208015.6 MED1.1%
——0Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged users with local network access to view live video streams.
This issue affects all versions of Gallagher NxWitness VMS integration prior to 9.10.017 and Gallagher Hanwha VMS integration prior to 9.10.025.67dCVE-2022-21787—1.1%
——0——CVE-2023-21252—1.1%
——0——CVE-2023-21122—1.1%
——0——CVE-2025-21468—1.1%
——0——