Vulnerabilities exploitable today
4,338in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,263
- High9,269
- Medium5,274
- Low508
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2017-3248—99.9%
——30——CVE-2023-24489—99.9%
KEV—80Citrix Content Collaboration ShareFile Improper Access Control Vulnerability—CVE-2026-39987—99.9%
KEV—80Marimo Remote Code Execution Vulnerability—CVE-2026-630309.8 CRI99.9%
KEV—80WordPress Core Interpretation Conflict Vulnerability40dCVE-2018-92069.8 CRI99.9%
——30Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.019dCVE-2016-8869—99.9%
——30——CVE-2020-14864—99.9%
KEV—80Oracle Business Intelligence Enterprise Edition Path Transversal—CVE-2026-341978.8 HIG99.9%
KEV—80Apache ActiveMQ Improper Input Validation Vulnerability27dCVE-2022-28219—99.9%
——30——CVE-2020-11455—99.9%
——30——CVE-2021-41277—99.9%
KEV—80Metabase GeoJSON API Local File Inclusion Vulnerability—CVE-2019-7256—99.9%
KEV—80Nice Linear eMerge E3-Series OS Command Injection Vulnerability—CVE-2020-2555—99.9%
KEV—80Oracle Multiple Products Remote Code Execution Vulnerability—CVE-2019-0230—99.9%
——30——CVE-2012-1420—99.9%
——30——CVE-2019-20500—99.9%
KEV—80D-Link DWL-2600AP Access Point Command Injection Vulnerability—CVE-2015-2051—99.9%
KEV—80D-Link DIR-645 Router Remote Code Execution Vulnerability—CVE-2025-20281—99.9%
KEV—80Cisco Identity Services Engine Injection Vulnerability—CVE-2025-4123—99.9%
——30——CVE-2018-12739.8 CRI99.9%
KEVR80VMware Tanzu Spring Data Commons Property Binder Vulnerability5dCVE-2022-0824—99.9%
——30——CVE-2017-8291—99.9%
KEV—80Artifex Ghostscript Type Confusion Vulnerability—CVE-2016-9299—99.9%
——30——CVE-2026-202539.8 CRI99.9%
KEV—80Splunk Enterprise Missing Authentication for Critical Function Vulnerability39dCVE-2023-52163—99.9%
KEV—80Digiever DS-2105 Pro Missing Authorization Vulnerability—CVE-2015-0014—99.9%
——30——CVE-2010-3962—99.9%
KEV—80Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability—CVE-2019-1003030—99.9%
KEV—80Jenkins Matrix Project Plugin Remote Code Execution Vulnerability—CVE-2021-44790—99.9%
——30——CVE-2019-3398—99.9%
KEV—80Atlassian Confluence Server and Data Center Path Traversal Vulnerability—CVE-2019-5544—99.9%
KEVR80VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability—CVE-2021-37344—99.9%
——30——CVE-2015-1641—99.9%
KEV—80Microsoft Office Memory Corruption Vulnerability—CVE-2019-17662—99.9%
——30——CVE-2015-3306—99.9%
——30——CVE-2021-22502—99.9%
KEV—80Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability—CVE-2023-2948—99.9%
——30——CVE-2023-38203—99.9%
KEVR80Adobe ColdFusion Deserialization of Untrusted Data Vulnerability—CVE-2011-3544—99.9%
KEV—80Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability—CVE-2020-25223—99.9%
KEV—80Sophos SG UTM Remote Code Execution Vulnerability—