Vulnerabilities exploitable today
4,337in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,263
- High9,269
- Medium5,273
- Low508
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2016-6600—99.8%
——30——CVE-2025-12480—99.8%
KEV—80Gladinet Triofox Improper Access Control Vulnerability—CVE-2015-3824—99.8%
——30——CVE-2019-20501—99.8%
——30——CVE-2021-21311—99.8%
KEV—80Adminer Server-Side Request Forgery Vulnerability—CVE-2025-6218—99.8%
KEV—80RARLAB WinRAR Path Traversal Vulnerability—CVE-2023-37582—99.8%
——30——CVE-2021-32648—99.8%
KEV—80October CMS Improper Authentication—CVE-2023-2947—99.8%
——30——CVE-2020-27871—99.8%
——30——CVE-2022-31137—99.8%
——30——CVE-2009-0545—99.8%
——30——CVE-2020-3952—99.8%
KEV—80VMware vCenter Server Information Disclosure Vulnerability—CVE-2024-40711—99.8%
KEVR80Veeam Backup and Replication Deserialization Vulnerability—CVE-2023-41763—99.8%
KEV—80Microsoft Skype for Business Privilege Escalation Vulnerability—CVE-2023-6875—99.8%
——30——CVE-2016-87359.8 CRI99.8%
KEV—80Apache Tomcat Remote Code Execution Vulnerability6dCVE-2018-1207—99.8%
——30——CVE-2021-20123—99.8%
KEV—80Draytek VigorConnect Path Traversal Vulnerability —CVE-2006-2372—99.8%
——30——CVE-2009-3103—99.8%
——30——CVE-2025-37164—99.8%
KEV—80Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability—CVE-2023-46264—99.8%
——30——CVE-2020-29583—99.8%
KEV—80Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability—CVE-2023-40044—99.8%
KEVR80Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability—CVE-2013-4983—99.8%
——30——CVE-2023-20073—99.8%
——30——CVE-2024-13161—99.8%
KEV—80Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability—CVE-2024-5276—99.8%
——30——CVE-2024-7954—99.8%
——30——CVE-2020-11984—99.8%
——30——CVE-2025-1094—99.8%
——30——CVE-2017-8464—99.8%
KEV—80Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability—CVE-2025-5086—99.8%
KEV—80Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability—CVE-2009-39606.5 MED99.8%
KEVR80Adobe BlazeDS Information Disclosure Vulnerability25dCVE-2013-04315.3 MED99.8%
KEVR80Oracle JRE Sandbox Bypass Vulnerability17dCVE-2012-1426—99.8%
——30——CVE-2012-1439—99.8%
——30——CVE-2012-1445—99.8%
——30——CVE-2017-3599—99.8%
——30——