Vulnerabilities exploitable today
4,338in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,256
- High9,258
- Medium5,266
- Low507
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2012-1823—100.0%
KEV—80PHP-CGI Query String Parameter Vulnerability—CVE-2020-14882—100.0%
KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—CVE-2024-3273—100.0%
KEV—80D-Link Multiple NAS Devices Command Injection Vulnerability—CVE-2022-22954—100.0%
KEVR80VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability—CVE-2019-16920—100.0%
KEV—80D-Link Multiple Routers Command Injection Vulnerability—CVE-2021-268559.1 CRI100.0%
KEVR80Microsoft Exchange Server Remote Code Execution Vulnerability12dCVE-2025-32489.8 CRI100.0%
KEVR80Langflow Missing Authentication Vulnerability48dCVE-2022-44877—100.0%
KEV—80CWP Control Web Panel OS Command Injection Vulnerability—CVE-2023-50387—100.0%
——30——CVE-2025-49704—100.0%
KEVR80Microsoft SharePoint Code Injection Vulnerability—CVE-2024-34102—100.0%
KEV—80Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability—CVE-2020-8515—100.0%
KEV—80Multiple DrayTek Vigor Routers Web Management Page Vulnerability—CVE-2017-102717.5 HIG100.0%
KEVR80Oracle Corporation WebLogic Server Remote Code Execution Vulnerability18dCVE-2020-34527.5 HIG100.0%
KEV—80Cisco ASA and FTD Read-Only Path Traversal Vulnerability20dCVE-2024-13159—100.0%
KEV—80Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability—CVE-2021-41773—100.0%
KEVR80Apache HTTP Server Path Traversal Vulnerability—CVE-2018-11776—100.0%
KEV—80Apache Struts Remote Code Execution Vulnerability—CVE-2024-27199—100.0%
KEVR80JetBrains TeamCity Relative Path Traversal Vulnerability—CVE-2018-7600—100.0%
KEVR80Drupal Core Remote Code Execution Vulnerability—CVE-2024-7593—100.0%
KEV—80Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability—CVE-2021-345239.0 CRI100.0%
KEVR80Microsoft Exchange Server Privilege Escalation Vulnerability21dCVE-2023-29300—100.0%
KEVR80Adobe ColdFusion Deserialization of Untrusted Data Vulnerability—CVE-2017-126178.1 HIG100.0%
KEV—80Apache Tomcat Remote Code Execution Vulnerability6dCVE-2020-9054—100.0%
KEV—80Zyxel Multiple NAS Devices OS Command Injection Vulnerability—CVE-2024-4577—100.0%
KEVR80PHP-CGI OS Command Injection Vulnerability—CVE-2019-9670—100.0%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference—CVE-2023-468058.2 HIG100.0%
KEVR80Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability27dCVE-2022-406849.8 CRI100.0%
KEVR80Fortinet Multiple Products Authentication Bypass Vulnerability25dCVE-2023-29357—100.0%
KEVR80Microsoft SharePoint Server Privilege Escalation Vulnerability—CVE-2023-22527—100.0%
KEVR80Atlassian Confluence Data Center and Server Template Injection Vulnerability—CVE-2024-45195—100.0%
KEV—80Apache OFBiz Forced Browsing Vulnerability—CVE-2021-20090—100.0%
KEV—80Arcadyan Buffalo Firmware Path Traversal Vulnerability—CVE-2021-22204—100.0%
KEV—80ExifTool Remote Code Execution Vulnerability—CVE-2024-1709—100.0%
KEVR80ConnectWise ScreenConnect Authentication Bypass Vulnerability—CVE-2025-224579.0 CRI100.0%
KEVR80Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability27dCVE-2025-59287—100.0%
KEV—80Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability—CVE-2023-42793—100.0%
KEVR80JetBrains TeamCity Authentication Bypass Vulnerability—CVE-2025-02829.0 CRI100.0%
KEVR80Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability27dCVE-2023-4863—100.0%
KEV—80Google Chromium WebP Heap-Based Buffer Overflow Vulnerability—CVE-2024-249198.6 HIG100.0%
KEVR80Check Point Quantum Security Gateways Information Disclosure Vulnerability26d