Vulnerabilities exploitable today
399,240in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,347
- High15,203
- Medium14,178
- Low1,360
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2022-43939—99.8%
KEV—80Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability—CVE-2022-279247.5 HIG99.8%
KEVR80Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability18dCVE-2025-6218—99.8%
KEV—80RARLAB WinRAR Path Traversal Vulnerability—CVE-2024-13161—99.8%
KEV—80Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability—CVE-2012-5076—99.8%
KEV—80Oracle Java SE Sandbox Bypass Vulnerability—CVE-2017-8464—99.8%
KEV—80Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability—CVE-2020-3952—99.8%
KEV—80VMware vCenter Server Information Disclosure Vulnerability—CVE-2017-01458.8 HIG99.8%
KEVR80Microsoft SMBv1 Remote Code Execution Vulnerability68dCVE-2016-87359.8 CRI99.8%
KEV—80Apache Tomcat Remote Code Execution Vulnerability56dCVE-2010-2568—99.8%
KEV—80Microsoft Windows Remote Code Execution Vulnerability—CVE-2018-4878—99.8%
KEVR80Adobe Flash Player Use-After-Free Vulnerability—CVE-2024-13160—99.8%
KEV—80Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability—CVE-2018-14839—99.8%
KEV—80LG N1A1 NAS Remote Command Execution Vulnerability—CVE-2023-36844—99.8%
KEV—80Juniper Junos OS EX Series PHP External Variable Modification Vulnerability—CVE-2017-5521—99.8%
KEV—80NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability—CVE-2017-3066—99.8%
KEV—80Adobe ColdFusion Deserialization Vulnerability—CVE-2019-7195—99.8%
KEVR80QNAP Photo Station Path Traversal Vulnerability—CVE-2019-17621—99.8%
KEV—80D-Link DIR-859 Router Command Execution Vulnerability—CVE-2020-17463—99.8%
KEV—80Fuel CMS SQL Injection Vulnerability—CVE-2017-0146—99.8%
KEVR80Microsoft Windows SMB Remote Code Execution Vulnerability—CVE-2018-111389.8 CRI99.8%
KEVR80Quest KACE System Management Appliance Remote Command Execution Vulnerability69dCVE-2021-35211—99.8%
KEVR80SolarWinds Serv-U Remote Code Execution Vulnerability—CVE-2021-20123—99.8%
KEV—80Draytek VigorConnect Path Traversal Vulnerability —CVE-2010-3333—99.8%
KEV—80Microsoft Office Stack-based Buffer Overflow Vulnerability—CVE-2018-159827.8 HIG99.8%
KEVR80Adobe Flash Player Use-After-Free Vulnerability19dCVE-2022-26352—99.8%
KEVR80dotCMS Unrestricted Upload of File Vulnerability—CVE-2026-630779.8 CRI99.8%
KEVR80JetBrains TeamCity Deserialization of Untrusted Data Vulnerability76dCVE-2017-121499.8 CRI99.8%
KEVR80Red Hat JBoss Application Server Remote Code Execution Vulnerability13dCVE-2024-40711—99.8%
KEVR80Veeam Backup and Replication Deserialization Vulnerability—CVE-2022-262589.8 CRI99.8%
KEV—80D-Link DIR-820L Remote Code Execution Vulnerability103dCVE-2012-0754—99.8%
KEV—80Adobe Flash Player Memory Corruption Vulnerability—CVE-2013-04313.7 LOW99.8%
KEVR80Oracle JRE Sandbox Bypass Vulnerability18dCVE-2023-40044—99.8%
KEVR80Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability—CVE-2020-8243—99.8%
KEV—80Ivanti Pulse Connect Secure Code Execution Vulnerability—CVE-2017-8570—99.8%
KEV—80Microsoft Office Remote Code Execution Vulnerability—CVE-2025-37164—99.8%
KEV—80Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability—CVE-2021-32648—99.8%
KEV—80October CMS Improper Authentication—CVE-2021-21315—99.8%
KEV—80System Information Library for Node.JS Command Injection—CVE-2021-423218.8 HIG99.8%
KEVR80Microsoft Exchange Server Remote Code Execution Vulnerability62dCVE-2023-41763—99.8%
KEV—80Microsoft Skype for Business Privilege Escalation Vulnerability—