Vulnerabilities exploitable today
4,330in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,340
- High15,178
- Medium14,103
- Low1,353
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2013-2251—100.0%
KEV—80Apache Struts Improper Input Validation Vulnerability—CVE-2022-22954—100.0%
KEVR80VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability—CVE-2012-1823—100.0%
KEV—80PHP-CGI Query String Parameter Vulnerability—CVE-2020-14882—100.0%
KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—CVE-2021-268559.1 CRI100.0%
KEVR80Microsoft Exchange Server Remote Code Execution Vulnerability62dCVE-2019-16920—100.0%
KEV—80D-Link Multiple Routers Command Injection Vulnerability—CVE-2024-3273—100.0%
KEV—80D-Link Multiple NAS Devices Command Injection Vulnerability—CVE-2022-44877—100.0%
KEV—80CWP Control Web Panel OS Command Injection Vulnerability—CVE-2025-49704—100.0%
KEVR80Microsoft SharePoint Code Injection Vulnerability—CVE-2024-34102—100.0%
KEV—80Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability—CVE-2017-102717.5 HIG100.0%
KEVR80Oracle Corporation WebLogic Server Remote Code Execution Vulnerability68dCVE-2020-8515—100.0%
KEV—80Multiple DrayTek Vigor Routers Web Management Page Vulnerability—CVE-2025-32489.8 CRI100.0%
KEVR80Langflow Missing Authentication Vulnerability12dCVE-2020-34527.5 HIG100.0%
KEV—80Cisco ASA and FTD Read-Only Path Traversal Vulnerability70dCVE-2021-41773—100.0%
KEVR80Apache HTTP Server Path Traversal Vulnerability—CVE-2024-13159—100.0%
KEV—80Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability—CVE-2023-29300—100.0%
KEVR80Adobe ColdFusion Deserialization of Untrusted Data Vulnerability—CVE-2018-11776—100.0%
KEV—80Apache Struts Remote Code Execution Vulnerability—CVE-2018-7600—100.0%
KEVR80Drupal Core Remote Code Execution Vulnerability—CVE-2024-27199—100.0%
KEVR80JetBrains TeamCity Relative Path Traversal Vulnerability—CVE-2021-345239.0 CRI100.0%
KEVR80Microsoft Exchange Server Privilege Escalation Vulnerability71dCVE-2021-33044—100.0%
KEV—80Dahua IP Camera Authentication Bypass Vulnerability—CVE-2023-50387—100.0%
——30——CVE-2020-90549.8 CRI100.0%
KEV—80Zyxel Multiple NAS Devices OS Command Injection Vulnerability12dCVE-2024-4577—100.0%
KEVR80PHP-CGI OS Command Injection Vulnerability—CVE-2023-42793—100.0%
KEVR80JetBrains TeamCity Authentication Bypass Vulnerability—CVE-2019-9670—100.0%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference—CVE-2023-468058.2 HIG100.0%
KEVR80Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability19dCVE-2023-22527—100.0%
KEVR80Atlassian Confluence Data Center and Server Template Injection Vulnerability—CVE-2023-29357—100.0%
KEVR80Microsoft SharePoint Server Privilege Escalation Vulnerability—CVE-2022-406849.8 CRI100.0%
KEVR80Fortinet Multiple Products Authentication Bypass Vulnerability75dCVE-2024-45195—100.0%
KEV—80Apache OFBiz Forced Browsing Vulnerability—CVE-2021-20090—100.0%
KEV—80Arcadyan Buffalo Firmware Path Traversal Vulnerability—CVE-2021-22204—100.0%
KEV—80ExifTool Remote Code Execution Vulnerability—CVE-2025-02829.0 CRI100.0%
KEVR80Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability19dCVE-2025-224579.0 CRI100.0%
KEVR80Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability77dCVE-2024-1709—100.0%
KEVR80ConnectWise ScreenConnect Authentication Bypass Vulnerability—CVE-2025-59287—100.0%
KEV—80Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability—CVE-2023-4863—100.0%
KEV—80Google Chromium WebP Heap-Based Buffer Overflow Vulnerability—CVE-2024-249198.6 HIG100.0%
KEVR80Check Point Quantum Security Gateways Information Disclosure Vulnerability76d