BaselineWatch
61067 CVEs · 136 in KEV
Desk
CVEs known61,067 New, 24 h191 Changed, 24 h200 In KEV136 Public exploit1,650 Match watchlist0

Vulnerabilities

All My stack Known exploited Public exploit Critical (9+) Likely exploited (EPSS ≥ 50%) Changed, 24 h New, 24 h Sort: risk modified published CVSS EPSS
CVEs
CVECVSSEPSSVendor, productDescriptionModified
CVE-2015-5477KEVexploit ×10 7.5 high 100.0% juniper, fedoraproject, junos, fedora, enterprise_linux named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries. 9 Oct
CVE-2015-3306KEVexploit ×23 10.0 critical 99.0% fedoraproject, debian, fedora, debian_linux, tumbleweed The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands. 9 Oct
CVE-2026-55040KEVexploit ×5 9.1 critical 70.0% microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network. 16 h ago
CVE-2026-50522KEVexploit ×5 9.8 critical 3.0% microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. 16 h ago
CVE-2026-56164KEVexploit ×2 5.3 medium 1.0% microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. 16 h ago
CVE-2026-58644KEV 9.8 critical 16.0% microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. 16 h ago

6 of 6

Download these 6 as CSV · subscribe to this list.

EPSS scores: 2026-11-01. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.