Vulnerabilities exploitable today
4,276in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,644
New KEV · 24H0
Exploit Today ≥ 701,579
Distribution · last window
- Critical1,298
- High4,252
- Medium3,575
- Low277
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2023-7028—99.9%
KEV—80GitLab Community and Enterprise Editions Improper Access Control Vulnerability—CVE-2020-2883—99.9%
KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2006-3918—99.9%
——30——CVE-2021-4034—99.9%
KEV—80Red Hat Polkit Out-of-Bounds Read and Write Vulnerability—CVE-2015-0235—99.9%
——30——CVE-2020-6754—99.9%
——30——CVE-2024-51378—99.9%
KEVR80CyberPanel Incorrect Default Permissions Vulnerability—CVE-2017-9822—99.8%
KEVR80DotNetNuke (DNN) Remote Code Execution Vulnerability—CVE-2019-10173—99.8%
——30——CVE-2020-12259—99.8%
——30——CVE-2024-9474—99.8%
KEVR80Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability—CVE-2024-47575—99.8%
KEV—80Fortinet FortiManager Missing Authentication Vulnerability—CVE-2025-49113—99.8%
KEV—80RoundCube Webmail Deserialization of Untrusted Data Vulnerability—CVE-2024-22024—99.8%
——30——CVE-2020-6287—99.8%
KEV—80SAP NetWeaver Missing Authentication for Critical Function Vulnerability—CVE-2023-36934—99.8%
——30——CVE-2019-11478—99.8%
——30——CVE-2023-24941—99.8%
——30——CVE-2024-6670—99.8%
KEVR80Progress WhatsUp Gold SQL Injection Vulnerability—CVE-2024-21413—99.8%
KEV—80Microsoft Outlook Improper Input Validation Vulnerability—CVE-2013-2248—99.8%
——30——CVE-2021-46422—99.8%
——30——CVE-2024-8517—99.8%
——30——CVE-2024-31309—99.8%
——30——CVE-2016-5674—99.8%
——30——CVE-2014-0515—99.8%
——30——CVE-2017-12637—99.8%
KEV—80SAP NetWeaver Directory Traversal Vulnerability—CVE-2012-1460—99.8%
——30——CVE-2020-24186—99.8%
——30——CVE-2010-3972—99.8%
——30——CVE-2020-14092—99.8%
——30——CVE-2017-18368—99.8%
KEV—80Zyxel P660HN-T1A Routers Command Injection Vulnerability—CVE-2018-11784—99.8%
——30——CVE-2020-14644—99.8%
KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—CVE-2019-8451—99.8%
——30——CVE-2009-0580—99.8%
——30——CVE-2021-31474—99.8%
——30——CVE-2012-1463—99.8%
——30——CVE-2016-4117—99.8%
KEV—80Adobe Flash Player Arbitrary Code Execution Vulnerability—CVE-2016-2004—99.8%
——30——