Total CVEs
2378
last 14 days
Avg Priority
26.2
of max 220
KEV
7
actively exploited
POC
137
public exploits
Unpatched
392
CRIT/HIGH without patch
How is Priority Score calculated?
Priority Score is a composite risk metric (0-220) combining multiple real-world threat signals:
KEV +50
CISA Known Exploited Vulnerability — confirmed active exploitation in the wild
EPSS x100
Exploit Prediction Scoring System — probability of exploitation in next 30 days (0-100)
CVSS x5
Common Vulnerability Scoring System — technical severity (0-50)
POC +20
Public exploit code exists — lowers barrier for attackers
0-40 Low
40-80 Medium
80-120 High
120+ Critical
Patch Now — Known Exploited Vulnerabilities
126
CVE-2026-41091
Improper link resolution before file access ('link following') in Microsoft Defender allows an autho
120
CVE-2026-48172
LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exp
117
CVE-2026-8398
A supply chain attack compromised the official installation packages of DAEMON Tools Lite (Windows v
116
CVE-2026-48027
Nx Console is the user interface for Nx & Lerna. On 19 May 2026, a malicious version of Nx Console,
108
CVE-2026-9082
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i
92
CVE-2026-45498
Microsoft Defender Denial of Service Vulnerability
89
CVE-2026-34926
A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authentica
Priority Distribution
| Priority | CVE |
|---|---|
| 46 |
CVE-2026-39834
When writing data larger than 4GB in a single Write call on an SSH channel, an i
|
| 46 |
CVE-2026-7876
IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19
|
| 46 |
CVE-2026-31986
Use of Hard-coded Cryptographic Key vulnerability in Apache OFBiz.
This issue a
|
| 46 |
CVE-2026-39832
When adding a key to a remote agent constraint extensions such as restrict-desti
|
| 46 |
CVE-2026-42508
Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked
|
| 46 |
CVE-2026-47372
Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values
|
| 46 |
CVE-2026-8598
An undocumented configuration export port is accessible on some models
of ZKTec
|
| 46 |
CVE-2026-33000
A malicious actor with access to the network and high privileges could exploit a
|
| 46 |
CVE-2026-46819
Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-B
|
| 46 |
CVE-2026-46354
## Summary
`azureidentity.Validate()` verifies that the PKCS#7 signer certifica
|
| 46 |
CVE-2026-44449
Lumiverse is a full-featured AI chat application. Prior to 0.9.7, when the prima
|
| 46 |
CVE-2026-44632
### Summary
A Server-Side Code Injection vulnerability exists in the Yamcs algor
|
| 46 |
CVE-2026-46621
### Summary
A Server-Side Code Injection vulnerability exists in the Yamcs scrip
|
| 45 |
CVE-2026-22314
Improper Control of Generation of Code ('Code Injection') vulnerability in Mesal
|
| 45 |
CVE-2026-48150
Budibase is an open-source low-code platform. Prior to 3.39.0, /api/public/v1/ro
|
| 45 |
CVE-2026-45721
### Summary
When Algernon is asked for any URL path that resolves to a director
|
| 45 |
CVE-2026-46833
Vulnerability in the Net Service component of Oracle Database Server. Supported
|
| 45 |
CVE-2026-32999
Insufficient character filtering in backup agent signing module on Comet Backup
|
| 0 |
CVE-2026-48700
An issue was discovered in all versions of PCManFM-Qt starting from 1.1.0. When
|
| 0 |
CVE-2026-46395
### Summary
The `hmacBase64()` function in the HAXcms Node.js backend contains t
|
| 0 |
CVE-2026-45568
## Summary
Alice exposes a Python SDK `ProxyShare` with a fixed target URL. Bob
|
| 0 |
CVE-2026-46633
### Description
`Compiler::string()` escapes `"`, `$`, `\`, NUL and TAB when ge
|
| 0 |
CVE-2026-46421
## Impact
On April 29, 2026, compromised versions of `@cap-js/sqlite@2.2.2`, `@
|
Oldest Unpatched Critical/High CVEs
| CVE | Severity | CVSS | Priority | Days Open |
|---|---|---|---|---|
| CVE-2024-3400 | CRITICAL | 10.0 | 224 | 776d |
| CVE-2019-19781 | CRITICAL | 9.8 | 223 | 2344d |
| CVE-2020-5902 | CRITICAL | 9.8 | 223 | 2157d |
| CVE-2021-35464 | CRITICAL | 9.8 | 223 | 1771d |
| CVE-2020-10189 | CRITICAL | 9.8 | 223 | 2274d |
| CVE-2012-4681 | CRITICAL | 9.8 | 223 | 5021d |
| CVE-2022-42475 | CRITICAL | 9.8 | 223 | 1242d |
| CVE-2023-3519 | CRITICAL | 9.8 | 223 | 1044d |
| CVE-2015-7450 | CRITICAL | 9.8 | 222 | 3799d |
| CVE-2023-34048 | CRITICAL | 9.8 | 222 | 946d |
Prev
3 / 3