Vulnerabilities exploitable today
399,240in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,347
- High15,203
- Medium14,178
- Low1,360
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-578199.8 CRI99.9%
KEV—80Sangoma FreePBX Authentication Bypass Vulnerability25dCVE-2016-41179.8 CRI99.9%
KEVR80Adobe Flash Player Arbitrary Code Execution Vulnerability41dCVE-2015-4852—99.9%
KEV—80Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability—CVE-2022-36537—99.9%
KEVR80ZK Framework AuUploader Unspecified Vulnerability—CVE-2019-20085—99.9%
KEV—80TVT NVMS-1000 Directory Traversal Vulnerability—CVE-2017-3506—99.9%
KEV—80Oracle WebLogic Server OS Command Injection Vulnerability—CVE-2021-20124—99.9%
KEV—80Draytek VigorConnect Path Traversal Vulnerability —CVE-2024-47575—99.9%
KEV—80Fortinet FortiManager Missing Authentication Vulnerability—CVE-2020-2883—99.9%
KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2020-5847—99.9%
KEV—80Unraid Remote Code Execution Vulnerability—CVE-2025-54236—99.9%
KEV—80Adobe Commerce and Magento Improper Input Validation Vulnerability—CVE-2018-14847—99.9%
KEV—80MikroTik Router OS Directory Traversal Vulnerability—CVE-2018-0798—99.9%
KEV—80Microsoft Office Memory Corruption Vulnerability—CVE-2020-17530—99.9%
KEV—80Apache Struts Remote Code Execution Vulnerability—CVE-2023-7028—99.9%
KEV—80GitLab Community and Enterprise Editions Improper Access Control Vulnerability—CVE-2024-121210.0 CRI99.9%
KEV—80Progress Kemp LoadMaster OS Command Injection Vulnerability99dCVE-2017-18368—99.9%
KEV—80Zyxel P660HN-T1A Routers Command Injection Vulnerability—CVE-2025-54068—99.9%
KEV—80Laravel Livewire Code Injection Vulnerability—CVE-2020-6287—99.9%
KEV—80SAP NetWeaver Missing Authentication for Critical Function Vulnerability—CVE-2022-23134—99.9%
KEV—80Zabbix Frontend Improper Access Control Vulnerability—CVE-2018-14933—99.9%
KEV—80NUUO NVRmini Devices OS Command Injection Vulnerability —CVE-2025-30406—99.9%
KEV—80Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability—CVE-2024-94747.2 HIG99.9%
KEVR80Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability78dCVE-2019-11580—99.9%
KEVR80Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability—CVE-2023-33246—99.9%
KEV—80Apache RocketMQ Command Execution Vulnerability—CVE-2017-9822—99.9%
KEVR80DotNetNuke (DNN) Remote Code Execution Vulnerability—CVE-2025-124809.1 CRI99.9%
KEV—80Gladinet Triofox Improper Access Control Vulnerability1dCVE-2017-12637—99.9%
KEV—80SAP NetWeaver Directory Traversal Vulnerability—CVE-2025-80888.8 HIG99.9%
KEVR80RARLAB WinRAR Path Traversal Vulnerability71dCVE-2010-0840—99.9%
KEV—80Oracle JRE Unspecified Vulnerability—CVE-2024-28987—99.8%
KEV—80SolarWinds Web Help Desk Hardcoded Credential Vulnerability—CVE-2018-0802—99.8%
KEVR80Microsoft Office Memory Corruption Vulnerability—CVE-2023-20273—99.8%
KEV—80Cisco IOS XE Web UI Command Injection Vulnerability—CVE-2023-36846—99.8%
KEV—80Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability—CVE-2017-1000486—99.8%
KEV—80Primetek Primefaces Remote Code Execution Vulnerability—CVE-2025-47812—99.8%
KEV—80Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability—CVE-2024-559569.8 CRI99.8%
KEVR80Cleo Multiple Products Unauthenticated File Upload Vulnerability77dCVE-2020-8657—99.8%
KEV—80EyesOfNetwork Use of Hard-Coded Credentials Vulnerability—CVE-2024-555919.8 CRI99.8%
KEVR80Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability77dCVE-2025-11953—99.8%
KEV—80React Native Community CLI OS Command Injection Vulnerability—