Vulnerabilities exploitable today
367,144in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,256
- High9,258
- Medium5,266
- Low507
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2021-26084—100.0%
KEVR80Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability—CVE-2023-444877.5 HIG100.0%
KEV—80HTTP/2 Rapid Reset Attack Vulnerability20dCVE-2024-34102—100.0%
KEV—80Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability—CVE-2021-22005—100.0%
KEVR80VMware vCenter Server File Upload Vulnerability—CVE-2024-7593—100.0%
KEV—80Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability—CVE-2022-22954—100.0%
KEVR80VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability—CVE-2023-27350—100.0%
KEVR80PaperCut MF/NG Improper Access Control Vulnerability—CVE-2023-49669.4 CRI100.0%
KEVR80Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability31dCVE-2014-0160—100.0%
KEV—80OpenSSL Information Disclosure Vulnerability—CVE-2023-1389—100.0%
KEV—80TP-Link Archer AX-21 Command Injection Vulnerability—CVE-2024-13159—100.0%
KEV—80Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability—CVE-2021-35464—100.0%
KEVR80ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability—CVE-2021-344739.1 CRI100.0%
KEVR80Microsoft Exchange Server Remote Code Execution Vulnerability21dCVE-2022-26134—100.0%
KEVR80Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability—CVE-2025-537709.8 CRI100.0%
KEVR80Microsoft SharePoint Deserialization of Untrusted Data Vulnerability27dCVE-2021-41773—100.0%
KEVR80Apache HTTP Server Path Traversal Vulnerability—CVE-2018-7600—100.0%
KEVR80Drupal Core Remote Code Execution Vulnerability—CVE-2017-102717.5 HIG100.0%
KEVR80Oracle Corporation WebLogic Server Remote Code Execution Vulnerability18dCVE-2012-1823—100.0%
KEV—80PHP-CGI Query String Parameter Vulnerability—CVE-2020-5902—100.0%
KEVR80F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability—CVE-2026-314317.8 HIG100.0%
KEV—80Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability34dCVE-2019-27259.8 CRI100.0%
KEVR80Oracle WebLogic Server, Injection6dCVE-2019-0604—100.0%
KEVR80Microsoft SharePoint Remote Code Execution Vulnerability—CVE-2019-151079.8 CRI100.0%
KEVR80Webmin Command Injection Vulnerability25dCVE-2020-10189—100.0%
KEV—80Zoho ManageEngine Desktop Central File Upload Vulnerability—CVE-2021-35394—100.0%
KEV—80Realtek Jungle SDK Remote Code Execution Vulnerability—CVE-2024-36401—100.0%
KEV—80OSGeo GeoServer GeoTools Eval Injection Vulnerability—CVE-2022-41082—100.0%
KEVR80Microsoft Exchange Server Remote Code Execution Vulnerability—CVE-2023-42793—100.0%
KEVR80JetBrains TeamCity Authentication Bypass Vulnerability—CVE-2022-1388—100.0%
KEVR80F5 BIG-IP Missing Authentication Vulnerability—CVE-2017-7269—100.0%
KEV—80Microsoft Windows Server Buffer Overflow Vulnerability—CVE-2021-219729.8 CRI100.0%
KEVR80VMware vCenter Server Remote Code Execution Vulnerability19dCVE-2021-1497—100.0%
KEV—80Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability—CVE-2020-13927—100.0%
KEV—80Apache Airflow's Experimental API Authentication Bypass—CVE-2021-36260—100.0%
KEV—80Hikvision Improper Input Validation—CVE-2012-0158—100.0%
KEVR80Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability—CVE-2021-26085—100.0%
KEVR80Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability—CVE-2022-406849.8 CRI100.0%
KEVR80Fortinet Multiple Products Authentication Bypass Vulnerability25dCVE-2020-25506—100.0%
KEV—80D-Link DNS-320 Device Command Injection Vulnerability—CVE-2024-45519—100.0%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability—