Vulnerabilities exploitable today
349,130in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,644
New KEV · 24H0
Exploit Today ≥ 701,579
Distribution · last window
- Critical1,293
- High4,219
- Medium3,544
- Low277
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2017-12637—99.8%
KEV—80SAP NetWeaver Directory Traversal Vulnerability—CVE-2016-4117—99.8%
KEV—80Adobe Flash Player Arbitrary Code Execution Vulnerability—CVE-2017-1000486—99.8%
KEV—80Primetek Primefaces Remote Code Execution Vulnerability—CVE-2025-30406—99.8%
KEV—80Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability—CVE-2016-0189—99.8%
KEV—80Microsoft Internet Explorer Memory Corruption Vulnerability—CVE-2024-48248—99.8%
KEV—80NAKIVO Backup and Replication Absolute Path Traversal Vulnerability—CVE-2007-5659—99.8%
KEV—80Adobe Acrobat and Reader Buffer Overflow Vulnerability—CVE-2021-40870—99.8%
KEV—80Aviatrix Controller Unrestricted Upload of File—CVE-2020-6287—99.8%
KEV—80SAP NetWeaver Missing Authentication for Critical Function Vulnerability—CVE-2024-21413—99.8%
KEV—80Microsoft Outlook Improper Input Validation Vulnerability—CVE-2024-28987—99.8%
KEV—80SolarWinds Web Help Desk Hardcoded Credential Vulnerability—CVE-2023-36846—99.8%
KEV—80Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability—CVE-2018-14933—99.8%
KEV—80NUUO NVRmini Devices OS Command Injection Vulnerability —CVE-2021-26857—99.8%
KEVR80Microsoft Exchange Server Remote Code Execution Vulnerability—CVE-2020-14644—99.8%
KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—CVE-2025-24016—99.8%
KEV—80Wazuh Server Deserialization of Untrusted Data Vulnerability—CVE-2023-36845—99.8%
KEV—80Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability—CVE-2025-57819—99.8%
KEV—80Sangoma FreePBX Authentication Bypass Vulnerability—CVE-2024-6670—99.8%
KEVR80Progress WhatsUp Gold SQL Injection Vulnerability—CVE-2016-4437—99.8%
KEV—80Apache Shiro Code Execution Vulnerability—CVE-2017-0143—99.8%
KEVR80Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability—CVE-2020-2551—99.8%
KEV—80Oracle Fusion Middleware Unspecified Vulnerability—CVE-2024-47575—99.8%
KEV—80Fortinet FortiManager Missing Authentication Vulnerability—CVE-2020-1147—99.8%
KEV—80Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability—CVE-2018-0802—99.8%
KEV—80Microsoft Office Memory Corruption Vulnerability—CVE-2024-55956—99.8%
KEVR80Cleo Multiple Products Unauthenticated File Upload Vulnerability—CVE-2017-18368—99.8%
KEV—80Zyxel P660HN-T1A Routers Command Injection Vulnerability—CVE-2018-10561—99.8%
KEV—80Dasan GPON Routers Authentication Bypass Vulnerability—CVE-2021-44077—99.8%
KEV—80Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability—CVE-2026-21643—99.8%
KEV—80Fortinet FortiClient EMS SQL Injection Vulnerability—CVE-2025-49113—99.8%
KEV—80RoundCube Webmail Deserialization of Untrusted Data Vulnerability—CVE-2013-0632—99.8%
KEV—80Adobe ColdFusion Authentication Bypass Vulnerability—CVE-2024-9474—99.8%
KEVR80Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability—CVE-2013-0625—99.8%
KEV—80Adobe ColdFusion Authentication Bypass Vulnerability—CVE-2020-5849—99.8%
KEV—80Unraid Authentication Bypass Vulnerability—CVE-2017-9822—99.8%
KEVR80DotNetNuke (DNN) Remote Code Execution Vulnerability—CVE-2015-5122—99.8%
KEV—80Adobe Flash Player Use-After-Free Vulnerability—CVE-2012-1723—99.8%
KEVR80Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability—CVE-2022-33891—99.8%
KEV—80Apache Spark Command Injection Vulnerability—CVE-2021-42321—99.8%
KEVR80Microsoft Exchange Server Remote Code Execution Vulnerability—