Vulnerabilities exploitable today
4,330in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,347
- High15,203
- Medium14,178
- Low1,360
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2021-404448.8 HIG99.9%
KEVR80Microsoft MSHTML Remote Code Execution Vulnerability71dCVE-2022-2024—99.9%
——30——CVE-2021-45382—99.9%
KEV—80D-Link Multiple Routers Remote Code Execution Vulnerability—CVE-2021-36380—99.9%
KEV—80Sunhillo SureLine OS Command Injection Vulnerablity—CVE-2020-11738—99.9%
KEV—80WordPress Snap Creek Duplicator Plugin File Download Vulnerability—CVE-2021-26295—99.9%
——30——CVE-2016-10108—99.9%
——30——CVE-2020-17519—99.9%
KEV—80Apache Flink Improper Access Control Vulnerability—CVE-2022-21661—99.9%
——30——CVE-2015-7450—99.9%
KEV—80IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.—CVE-2021-252996.1 MED99.9%
——30Nagios XI version xi-5.7.5 is affected by cross-site scripting (XSS). The vulnerability exists in the file /usr/local/nagiosxi/html/admin/sshterm.php due to improper sanitization of user-controlled input. A maliciously crafted URL, when clicked by an admin user, can be used to steal his/her session cookies or it can be chained with the previous bugs to get one-click remote command execution (RCE) on the Nagios XI server.104dCVE-2016-10045—99.9%
——30——CVE-2020-14883—99.9%
KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2012-1453—99.9%
——30——CVE-2018-15745—99.9%
——30——CVE-2019-16662—99.9%
——30——CVE-2018-117844.3 MED99.9%
——30When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.5dCVE-2022-43769—99.9%
KEV—80Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability—CVE-2023-0315—99.9%
——30——CVE-2019-18818—99.9%
——30——CVE-2025-34028—99.9%
KEV—80Commvault Command Center Path Traversal Vulnerability—CVE-2025-20281—99.9%
KEV—80Cisco Identity Services Engine Injection Vulnerability—CVE-2021-422379.8 CRI99.9%
KEVR80Sitecore XP Remote Command Execution Vulnerability103dCVE-2013-5211—99.9%
——30——CVE-2012-0392—99.9%
——30——CVE-2016-6601—99.9%
——30——CVE-2021-3378—99.9%
——30——CVE-2020-25078—99.9%
KEV—80D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability—CVE-2016-3714—99.9%
KEV—80ImageMagick Improper Input Validation Vulnerability—CVE-2024-4358—99.9%
KEV—80Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability—CVE-2019-9082—99.9%
KEV—80ThinkPHP Remote Code Execution Vulnerability—CVE-2020-12116—99.9%
——30——CVE-2023-27524—99.9%
KEV—80Apache Superset Insecure Default Initialization of Resource Vulnerability—CVE-2024-56145—99.9%
KEV—80Craft CMS Code Injection Vulnerability—CVE-2007-3010—99.9%
KEV—80Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability—CVE-2018-17456—99.9%
——30——CVE-2023-24489—99.9%
KEV—80Citrix Content Collaboration ShareFile Improper Access Control Vulnerability—CVE-2023-26360—99.9%
KEV—80Adobe ColdFusion Deserialization of Untrusted Data Vulnerability—CVE-2020-1956—99.9%
KEV—80Apache Kylin OS Command Injection Vulnerability—CVE-2026-7289810.0 CRI99.9%
KEV—80Metabase SQL Injection Vulnerability69d