Vulnerabilities exploitable today
4,330in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,347
- High15,203
- Medium14,178
- Low1,360
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2020-25213—99.9%
KEV—80WordPress File Manager Plugin Remote Code Execution Vulnerability—CVE-2020-1943—99.9%
——30——CVE-2017-3248—99.9%
——30——CVE-2018-92069.8 CRI99.9%
——30Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.069dCVE-2016-8869—99.9%
——30——CVE-2015-1641—99.9%
KEV—80Microsoft Office Memory Corruption Vulnerability—CVE-2020-14864—99.9%
KEV—80Oracle Business Intelligence Enterprise Edition Path Transversal—CVE-2024-417139.1 CRI99.9%
KEVR80Mitel MiCollab Path Traversal Vulnerability78dCVE-2020-11455—99.9%
——30——CVE-2021-4127710.0 CRI99.9%
KEV—80Metabase GeoJSON API Local File Inclusion Vulnerability12dCVE-2025-2747—99.9%
KEV—80Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability—CVE-2023-23397—99.9%
KEV—80Microsoft Office Outlook Privilege Escalation Vulnerability—CVE-2021-26812—99.9%
——30——CVE-2024-9264—99.9%
——30——CVE-2017-17562—99.9%
KEV—80Embedthis GoAhead Remote Code Execution Vulnerability—CVE-2020-2555—99.9%
KEV—80Oracle Multiple Products Remote Code Execution Vulnerability—CVE-2012-1420—99.9%
——30——CVE-2015-2051—99.9%
KEV—80D-Link DIR-645 Router Remote Code Execution Vulnerability—CVE-2024-20439—99.9%
KEV—80Cisco Smart Licensing Utility Static Credential Vulnerability—CVE-2025-4123—99.9%
——30——CVE-2019-7256—99.9%
KEV—80Nice Linear eMerge E3-Series OS Command Injection Vulnerability—CVE-2023-38203—99.9%
KEVR80Adobe ColdFusion Deserialization of Untrusted Data Vulnerability—CVE-2019-1003030—99.9%
KEV—80Jenkins Matrix Project Plugin Remote Code Execution Vulnerability—CVE-2025-27636—99.9%
——30——CVE-2019-3398—99.9%
KEV—80Atlassian Confluence Server and Data Center Path Traversal Vulnerability—CVE-2013-0422—99.9%
KEVR80Oracle JRE Remote Code Execution Vulnerability—CVE-2022-28219—99.9%
——30——CVE-2022-0824—99.9%
——30——CVE-2017-8291—99.9%
KEV—80Artifex Ghostscript Type Confusion Vulnerability—CVE-2018-12739.8 CRI99.9%
KEVR80VMware Tanzu Spring Data Commons Property Binder Vulnerability56dCVE-2019-0230—99.9%
——30——CVE-2016-9299—99.9%
——30——CVE-2026-202539.8 CRI99.9%
KEV—80Splunk Enterprise Missing Authentication for Critical Function Vulnerability89dCVE-2023-52163—99.9%
KEV—80Digiever DS-2105 Pro Missing Authorization Vulnerability—CVE-2025-5086—99.9%
KEV—80Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability—CVE-2026-0257—99.9%
KEVR80Palo Alto Networks PAN-OS Authentication Bypass Vulnerability—CVE-2015-0014—99.9%
——30——CVE-2021-44790—99.9%
——30——CVE-2010-3962—99.9%
KEV—80Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability—CVE-2021-37344—99.9%
——30——