Vulnerabilities exploitable today
399,240in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,347
- High15,203
- Medium14,178
- Low1,360
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2010-0249—99.8%
KEV—80Microsoft Internet Explorer Use-After-Free Vulnerability—CVE-2025-92429.8 CRI99.8%
KEV—80WatchGuard Firebox Out-of-Bounds Write Vulnerability71dCVE-2016-4437—99.8%
KEV—80Apache Shiro Code Execution Vulnerability—CVE-2013-0632—99.8%
KEV—80Adobe ColdFusion Authentication Bypass Vulnerability—CVE-2019-6340—99.8%
KEV—80Drupal Core Remote Code Execution Vulnerability—CVE-2024-116809.8 CRI99.8%
KEV—80ProjectSend Improper Authentication Vulnerability98dCVE-2022-279247.5 HIG99.8%
KEVR80Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability18dCVE-2025-113717.5 HIG99.8%
KEV—80Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability12dCVE-2025-54309—99.8%
KEV—80 CrushFTP Unprotected Alternate Channel Vulnerability—CVE-2020-5849—99.8%
KEV—80Unraid Authentication Bypass Vulnerability—CVE-2024-559569.8 CRI99.8%
KEVR80Cleo Multiple Products Unauthenticated File Upload Vulnerability77dCVE-2023-36846—99.8%
KEV—80Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability—CVE-2026-8570610.0 CRI99.8%
KEV—80GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability26dCVE-2023-20273—99.8%
KEV—80Cisco IOS XE Web UI Command Injection Vulnerability—CVE-2025-4008—99.8%
KEV—80Smartbedded Meteobridge Command Injection Vulnerability—CVE-2026-20182—99.8%
KEV—80Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability—CVE-2024-6670—99.8%
KEVR80Progress WhatsUp Gold SQL Injection Vulnerability—CVE-2025-644469.8 CRI99.8%
KEV—80Fortinet FortiWeb Path Traversal Vulnerability2dCVE-2022-33891—99.8%
KEV—80Apache Spark Command Injection Vulnerability—CVE-2021-44077—99.8%
KEV—80Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability—CVE-2017-0143—99.8%
KEVR80Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability—CVE-2024-28987—99.8%
KEV—80SolarWinds Web Help Desk Hardcoded Credential Vulnerability—CVE-2022-24706—99.8%
KEV—80Apache CouchDB Insecure Default Initialization of Resource Vulnerability—CVE-2024-73998.8 HIG99.8%
KEV—80Samsung MagicINFO 9 Server Path Traversal Vulnerability19dCVE-2023-389507.5 HIG99.8%
KEV—80ZKTeco BioTime Path Traversal Vulnerability103dCVE-2021-268587.8 HIG99.8%
KEVR80Microsoft Exchange Server Remote Code Execution Vulnerability19dCVE-2017-5689—99.8%
KEV—80Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability—CVE-2018-0802—99.8%
KEVR80Microsoft Office Memory Corruption Vulnerability—CVE-2022-370429.8 CRI99.8%
KEVR80Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability78dCVE-2019-2616—99.8%
KEV—80Oracle BI Publisher Unauthorized Access Vulnerability—CVE-2026-422718.8 HIG99.8%
KEV—80BerriAI LiteLLM Command Injection Vulnerability98dCVE-2020-2551—99.8%
KEV—80Oracle Fusion Middleware Unspecified Vulnerability—CVE-2025-11953—99.8%
KEV—80React Native Community CLI OS Command Injection Vulnerability—CVE-2025-342918.8 HIG99.8%
KEV—80Langflow Origin Validation Error Vulnerability5dCVE-2020-10148—99.8%
KEV—80SolarWinds Orion Authentication Bypass Vulnerability—CVE-2026-21643—99.8%
KEV—80Fortinet FortiClient EMS SQL Injection Vulnerability—CVE-2018-10561—99.8%
KEV—80Dasan GPON Routers Authentication Bypass Vulnerability—CVE-2016-0189—99.8%
KEVR80Microsoft Internet Explorer Memory Corruption Vulnerability—CVE-2025-47812—99.8%
KEV—80Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability—CVE-2017-1000486—99.8%
KEV—80Primetek Primefaces Remote Code Execution Vulnerability—