Vulnerabilities exploitable today
4,330in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,347
- High15,203
- Medium14,178
- Low1,360
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-537049.8 CRI99.9%
KEVR80SonicWall SonicOS SSLVPN Improper Authentication Vulnerability78dCVE-2015-0313—99.9%
KEV—80Adobe Flash Player Use-After-Free Vulnerability—CVE-2022-23134—99.9%
KEV—80Zabbix Frontend Improper Access Control Vulnerability—CVE-2021-22911—99.9%
——30——CVE-2023-36934—99.9%
——30——CVE-2008-1447—99.9%
——30——CVE-2022-0342—99.9%
——30——CVE-2018-0798—99.9%
KEV—80Microsoft Office Memory Corruption Vulnerability—CVE-2017-12637—99.9%
KEV—80SAP NetWeaver Directory Traversal Vulnerability—CVE-2006-3918—99.9%
——30——CVE-2002-0840—99.9%
——30——CVE-2024-0204—99.9%
——30——CVE-2019-10068—99.9%
KEV—80Kentico Xperience Deserialization of Untrusted Data Vulnerability—CVE-2023-36845—99.9%
KEV—80Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability—CVE-2011-4862—99.9%
——30——CVE-2019-10173—99.9%
——30——CVE-2025-578199.8 CRI99.9%
KEV—80Sangoma FreePBX Authentication Bypass Vulnerability25dCVE-2017-9798—99.9%
——30——CVE-2015-4852—99.9%
KEV—80Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability—CVE-2020-13167—99.9%
——30——CVE-2001-0797—99.9%
——30——CVE-2021-40347.8 HIG99.9%
KEVR80Red Hat Polkit Out-of-Bounds Read and Write Vulnerability67dCVE-2014-6332—99.9%
KEV—80Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability—CVE-2002-0392—99.9%
——30——CVE-2019-12989—99.9%
KEV—80Citrix SD-WAN and NetScaler SQL Injection Vulnerability—CVE-2024-94747.2 HIG99.9%
KEVR80Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability78dCVE-2019-20499—99.9%
——30——CVE-2020-6754—99.9%
——30——CVE-2017-9822—99.9%
KEVR80DotNetNuke (DNN) Remote Code Execution Vulnerability—CVE-2015-5531—99.9%
——30——CVE-2024-47575—99.9%
KEV—80Fortinet FortiManager Missing Authentication Vulnerability—CVE-2018-14933—99.9%
KEV—80NUUO NVRmini Devices OS Command Injection Vulnerability —CVE-2024-5137810.0 CRI99.9%
KEVR80CyberPanel Incorrect Default Permissions Vulnerability77dCVE-2024-22024—99.9%
——30——CVE-2020-6287—99.9%
KEV—80SAP NetWeaver Missing Authentication for Critical Function Vulnerability—CVE-2016-2183—99.9%
——30——CVE-2019-11478—99.9%
——30——CVE-2023-24941—99.9%
——30——CVE-2025-54236—99.9%
KEV—80Adobe Commerce and Magento Improper Input Validation Vulnerability—CVE-2024-214139.8 CRI99.9%
KEV—80Microsoft Outlook Improper Input Validation Vulnerability71d