Vulnerabilities exploitable today
401,110in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,438
- High15,694
- Medium14,714
- Low1,445
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2023-20803—0.6%
——0——CVE-2026-813306.5 MED0.6%
——0The C6 ear camera transmits live video to the EarVision Android application over unencrypted UDP streams. The application manifest permits cleartext traffic, and captured network traffic contains reconstructable JPEG or WEBP video frames transmitted over UDP. An attacker within local wireless range may capture and reconstruct the live video stream without transport encryption.42dCVE-2023-40139—0.6%
——0——CVE-2025-21432—0.6%
——0——CVE-2023-40135—0.6%
——0——CVE-2022-20310—0.6%
——0——CVE-2022-20428—0.6%
——0——CVE-2022-20336—0.6%
——0——CVE-2025-319726.5 MED0.6%
——0HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker unauthorized access to sensitive data transmitted between internal components.26dCVE-2026-210623.3 LOW0.6%
——0Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.64dCVE-2024-456364.1 MED0.6%
——0IBM Security QRadar EDR 3.12 through 3.12.24 stores user credentials in plain text which can be read by a local privileged user.20dCVE-2024-29749—0.6%
——0——CVE-2026-1076784.7 MED0.6%
——0FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's mov_read_pssh(). Attackers can supply a crafted MP4 file with tens of thousands of small pssh boxes to exhaust the stack and crash the process, while also causing quadratic CPU consumption.8dCVE-2025-22830—0.6%
——0——CVE-2025-48630—0.6%
——0——CVE-2025-20707—0.6%
——0——CVE-2025-319632.9 LOW0.6%
——0Improper authentication and missing CSRF protection in the local setup interface component in HCL BigFix IVR version 4.2 allows a local attacker to perform unauthorized configuration changes via unauthenticated administrative configuration requests.15dCVE-2023-21048—0.6%
——0——CVE-2025-0080—0.6%
——0——CVE-2022-33729—0.6%
——0——CVE-2022-36847—0.6%
——0——CVE-2023-20974—0.6%
——0——CVE-2023-21208—0.6%
——0——CVE-2026-7941—0.6%
——0——CVE-2026-569504.4 MED0.6%
——0In validate_ns_buf of mbu_class.rs, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.31dCVE-2023-21210—0.6%
——0——CVE-2023-21148—0.6%
——0——CVE-2025-26454—0.6%
——0——CVE-2026-205005.5 MED0.6%
——0In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232.43dCVE-2023-21377—0.5%
——0——CVE-2023-42737—0.6%
——0——CVE-2023-20977—0.6%
——0——CVE-2023-35689—0.6%
——0——CVE-2026-798407.3 HIG0.6%
——0A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash.7dCVE-2023-42749—0.6%
——0——CVE-2025-21470—0.6%
——0——CVE-2024-33058—0.6%
——0——CVE-2026-24921—0.6%
——0——CVE-2026-31499—0.6%
——0——CVE-2026-798397.3 HIG0.6%
——0A buffer overflow vulnerability in HPE NonStop ODBC/MX Server may cause memory corruption, resulting in application crash.7d