Vulnerabilities exploitable today
399,467in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,403
- High15,280
- Medium14,292
- Low1,366
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2018-14667—99.5%
KEV—80Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability—CVE-2021-42258—99.5%
KEVR80BQE BillQuick Web Suite SQL Injection Vulnerability—CVE-2005-2773—99.5%
KEV—80HP OpenView Network Node Manager Remote Code Execution Vulnerability—CVE-2014-0780—99.5%
KEV—80InduSoft Web Studio NTWebServer Directory Traversal Vulnerability—CVE-2024-21182—99.5%
KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2017-8543—99.5%
KEV—80Microsoft Windows Search Remote Code Execution Vulnerability—CVE-2018-8298—99.5%
KEV—80ChakraCore Scripting Engine Type Confusion Vulnerability—CVE-2025-1316—99.5%
KEV—80Edimax IC-7100 IP Camera OS Command Injection Vulnerability—CVE-2019-12991—99.5%
KEV—80Citrix SD-WAN and NetScaler Command Injection Vulnerability—CVE-2017-9248—99.5%
KEV—80Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability—CVE-2020-5741—99.5%
KEV—80Plex Media Server Remote Code Execution Vulnerability—CVE-2025-6205—99.5%
KEV—80Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability—CVE-2025-40536—99.5%
KEV—80SolarWinds Web Help Desk Security Control Bypass Vulnerability—CVE-2024-37383—99.5%
KEV—80RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability—CVE-2023-47565—99.5%
KEV—80QNAP VioStor NVR OS Command Injection Vulnerability—CVE-2026-2196210.0 CRI99.5%
KEV—80Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability57dCVE-2021-422787.5 HIG99.5%
KEVR80Microsoft Active Directory Domain Services Privilege Escalation Vulnerability62dCVE-2017-6316—99.5%
KEV—80Citrix Multiple Products Remote Code Execution Vulnerability—CVE-2013-2551—99.5%
KEVR80Microsoft Internet Explorer Use-After-Free Vulnerability—CVE-2015-3043—99.5%
KEV—80Adobe Flash Player Memory Corruption Vulnerability—CVE-2018-0824—99.5%
KEV—80Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability—CVE-2025-2746—99.5%
KEV—80Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability—CVE-2018-18325—99.5%
KEV—80DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability—CVE-2021-252988.8 HIG99.5%
KEV—80Nagios XI OS Command Injection103dCVE-2019-9978—99.5%
KEV—80WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability—CVE-2018-81207.0 HIG99.5%
KEVR80Microsoft Win32k Privilege Escalation Vulnerability69dCVE-2013-3918—99.5%
KEV—80Microsoft Windows Out-of-Bounds Write Vulnerability—CVE-2018-7841—99.4%
KEV—80Schneider Electric U.motion Builder SQL Injection Vulnerability—CVE-2022-20699—99.4%
KEV—80Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability—CVE-2020-32597.5 HIG99.4%
KEVR80Cisco ASA and FTD Information Disclosure Vulnerability70dCVE-2017-8540—99.4%
KEV—80Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability—CVE-2026-735708.9 HIG99.4%
KEV—80Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability57dCVE-2021-252968.8 HIG99.4%
KEV—80Nagios XI OS Command Injection103dCVE-2025-300668.6 HIG99.4%
KEV—80tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability26dCVE-2017-6334—99.4%
KEV—80NETGEAR DGN2200 Devices OS Command Injection Vulnerability—CVE-2010-4344—99.4%
KEV—80Exim Heap-Based Buffer Overflow Vulnerability—CVE-2018-8414—99.4%
KEV—80Microsoft Windows Shell Remote Code Execution Vulnerability—CVE-2012-1856—99.4%
KEV—80Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability—CVE-2019-2215—99.4%
KEV—80Android Kernel Use-After-Free Vulnerability—CVE-2024-203538.6 HIG99.4%
KEV—80Cisco ASA and FTD Denial of Service Vulnerability70d