Vulnerabilities exploitable today
367,165in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,263
- High9,269
- Medium5,274
- Low508
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2021-20124—99.9%
KEV—80Draytek VigorConnect Path Traversal Vulnerability —CVE-2022-36537—99.9%
KEVR80ZK Framework AuUploader Unspecified Vulnerability—CVE-2011-3544—99.9%
KEV—80Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability—CVE-2024-47575—99.9%
KEV—80Fortinet FortiManager Missing Authentication Vulnerability—CVE-2019-10068—99.9%
KEV—80Kentico Xperience Deserialization of Untrusted Data Vulnerability—CVE-2022-41352—99.9%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability—CVE-2022-24112—99.9%
KEV—80Apache APISIX Authentication Bypass Vulnerability—CVE-2023-46747—99.9%
KEVR80F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability—CVE-2018-0798—99.9%
KEV—80Microsoft Office Memory Corruption Vulnerability—CVE-2020-17530—99.9%
KEV—80Apache Struts Remote Code Execution Vulnerability—CVE-2017-3506—99.9%
KEV—80Oracle WebLogic Server OS Command Injection Vulnerability—CVE-2025-54068—99.9%
KEV—80Laravel Livewire Code Injection Vulnerability—CVE-2020-5410—99.9%
KEV—80VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability—CVE-2019-3398—99.9%
KEV—80Atlassian Confluence Server and Data Center Path Traversal Vulnerability—CVE-2018-14933—99.9%
KEV—80NUUO NVRmini Devices OS Command Injection Vulnerability —CVE-2022-33891—99.8%
KEV—80Apache Spark Command Injection Vulnerability—CVE-2013-0625—99.8%
KEV—80Adobe ColdFusion Authentication Bypass Vulnerability—CVE-2024-28987—99.8%
KEV—80SolarWinds Web Help Desk Hardcoded Credential Vulnerability—CVE-2021-44077—99.8%
KEV—80Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability—CVE-2025-47812—99.8%
KEV—80Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability—CVE-2026-0257—99.8%
KEVR80Palo Alto Networks PAN-OS Authentication Bypass Vulnerability—CVE-2018-0802—99.8%
KEVR80Microsoft Office Memory Corruption Vulnerability—CVE-2023-7028—99.8%
KEV—80GitLab Community and Enterprise Editions Improper Access Control Vulnerability—CVE-2016-4437—99.8%
KEV—80Apache Shiro Code Execution Vulnerability—CVE-2007-5659—99.8%
KEV—80Adobe Acrobat and Reader Buffer Overflow Vulnerability—CVE-2022-24706—99.8%
KEV—80Apache CouchDB Insecure Default Initialization of Resource Vulnerability—CVE-2025-11953—99.8%
KEV—80React Native Community CLI OS Command Injection Vulnerability—CVE-2021-40870—99.8%
KEV—80Aviatrix Controller Unrestricted Upload of File—CVE-2023-36845—99.8%
KEV—80Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability—CVE-2020-1147—99.8%
KEV—80Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability—CVE-2026-21643—99.8%
KEV—80Fortinet FortiClient EMS SQL Injection Vulnerability—CVE-2025-30406—99.8%
KEV—80Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability—CVE-2018-10561—99.8%
KEV—80Dasan GPON Routers Authentication Bypass Vulnerability—CVE-2021-268587.8 HIG99.8%
KEVR80Microsoft Exchange Server Remote Code Execution Vulnerability12dCVE-2012-17239.8 CRI99.8%
KEVR80Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability25dCVE-2025-4008—99.8%
KEV—80Smartbedded Meteobridge Command Injection Vulnerability—CVE-2020-14644—99.8%
KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—CVE-2026-398089.8 CRI99.8%
KEV—80Fortinet FortiSandbox OS Command Injection Vulnerability45dCVE-2013-0632—99.8%
KEV—80Adobe ColdFusion Authentication Bypass Vulnerability—CVE-2019-12989—99.8%
KEV—80Citrix SD-WAN and NetScaler SQL Injection Vulnerability—