See what became
exploitable.

Latest CVEs, exploit intelligence and public PoC references, updated hourly.

Browse latest

Last sync 10:05 UTC 8 of 8 sources healthy

Latest intelligence

796–810 of 1041 matching entries · 3145 total · live data

Entries per page

CVEVulnerabilityCVSSUpdatedProductPoCKEV

CVE-2022-41404Windows Apache Tomcat resource limits implementation guide for CVE-2022-41404 DoS vulnerability protection0.014 Sep 202622:00 UTCUnknown productSee original advisory8 sourcesCandidateNo CVE-2022-41401CVE-2022-41401 exploit6.511 Sep 202618:33 UTCUnknown productSee original advisory24 sourcesCandidateNo CVE-2022-38181KEVArm Mali GPU Kernel Driver Use-After-Free Vulnerability8.811 Sep 202621:04 UTCMali Graphics Processing Unit (GPU)See original advisory193 sourcesVerifiedYes CVE-2022-37305rollback_car_attack_proverif exploit6.413 Sep 202618:09 UTCUnknown productSee original advisory16 sourcesCandidateNo CVE-2022-36945rollback_car_attack_proverif exploit6.413 Sep 202618:09 UTCUnknown productSee original advisory16 sourcesCandidateNo CVE-2022-36804KEVAtlassian Bitbucket Server and Data Center Command Injection Vulnerability0.020 Aug 202622:00 UTCBitbucket Server and Data CenterSee original advisory858 sourcesVerifiedYes CVE-2022-34303CVE-2022-34303 - Secure Boot bypass via CryptoPro Secure Disk signed UEFI Shell (Shell_Full.efi) - BYOVUA technique exploiting mm command for gSecurity2 corruption to load unsigned UEFI applications.0.030 Aug 202622:00 UTCUnknown productSee original advisory25 sourcesCandidateNo CVE-2022-34302CVE-2022-34302 - Secure Boot bypass via New Horizon Datasys signed bootloader (shdloader.efi) - BYOVUA technique exploiting built-in custom PE/COFF loader to load unsigned UEFI applications without signature verification.0.06 Sep 202622:00 UTCUnknown productSee original advisory25 sourcesCandidateNo CVE-2022-34301CVE-2022-34301 - Secure Boot bypass via Eurosoft signed UEFI Shell (esdiags.efi) - BYOVUA technique exploiting mm command for gSecurity2 corruption to load unsigned UEFI applications.0.06 Sep 202622:00 UTCUnknown productSee original advisory26 sourcesCandidateNo CVE-2022-32073project_BIT_nmap_script exploit9.813 Sep 202618:28 UTCUnknown productSee original advisory16 sourcesCandidateNo CVE-2022-31101Prestashop blockwishlist module 2.1.0 - SQLi8.825 Aug 202621:54 UTCUnknown productSee original advisory136 sourcesVerifiedNo CVE-2022-30526CVE-2022-30526 exploit7.814 Sep 202604:52 UTCUnknown productSee original advisory31 sourcesCandidateNo CVE-2022-30190KEVMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability9.325 Aug 202602:55 UTCWindowsSee original advisory125 sourcesCandidateYes CVE-2022-29900Reproduction of the Retbleed (CVE-2022-29900/29901) micro-architectural attack in gem5. RSB underflow, Flush+Reload side-channel leak, and a verified lfence mitigation.0.010 Sep 202622:00 UTCUnknown productSee original advisory27 sourcesCandidateNo CVE-2022-28368Dompdf 1.2.1 - Remote Code Execution (RCE)9.813 Sep 202618:32 UTCUnknown productSee original advisory48 sourcesVerifiedNo

Priority signals

Counts across the current dataset

CISA Known Exploited Vulnerability

CVE-2026-87886

Acronis Backup Incorrect Default Permissions Vulnerability

Updated 15 Sep 2026 Open intelligence

Watched vendors

Signals, not noise.

Every item keeps its source trail. Confidence describes evidence quality; severity describes potential impact. They remain separate throughout the product.

01

Collect

Incremental source connectors preserve timestamps, URLs, and content hashes.

02

Correlate

CVE, GHSA, product, repository, and advisory identifiers are deduplicated.

03

Verify

Source quality, consistency, and independent references form the confidence score.