Vulnerabilities exploitable today
4,330in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,403
- High15,280
- Medium14,292
- Low1,366
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2020-27871—99.8%
——30——CVE-2016-6600—99.8%
——30——CVE-2001-0333—99.8%
——30——CVE-2022-3602—99.8%
——30——CVE-2020-8243—99.8%
KEV—80Ivanti Pulse Connect Secure Code Execution Vulnerability—CVE-2014-2623—99.8%
——30——CVE-2011-3368—99.8%
——30——CVE-2017-121499.8 CRI99.8%
KEVR80Red Hat JBoss Application Server Remote Code Execution Vulnerability13dCVE-2021-21315—99.8%
KEV—80System Information Library for Node.JS Command Injection—CVE-2018-11759—99.8%
——30——CVE-2000-0402—99.8%
——30——CVE-2017-12636—99.8%
——30——CVE-2017-3066—99.8%
KEV—80Adobe ColdFusion Deserialization Vulnerability—CVE-2022-31137—99.8%
——30——CVE-2013-6429—99.8%
——30——CVE-2023-41763—99.8%
KEV—80Microsoft Skype for Business Privilege Escalation Vulnerability—CVE-2015-3824—99.8%
——30——CVE-2025-6218—99.8%
KEV—80RARLAB WinRAR Path Traversal Vulnerability—CVE-2023-37582—99.8%
——30——CVE-2021-32648—99.8%
KEV—80October CMS Improper Authentication—CVE-2023-2947—99.8%
——30——CVE-2009-0545—99.8%
——30——CVE-2020-3952—99.8%
KEV—80VMware vCenter Server Information Disclosure Vulnerability—CVE-2024-40711—99.8%
KEVR80Veeam Backup and Replication Deserialization Vulnerability—CVE-2023-40044—99.8%
KEVR80Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability—CVE-2023-6875—99.8%
——30——CVE-2016-87359.8 CRI99.8%
KEV—80Apache Tomcat Remote Code Execution Vulnerability56dCVE-2021-20123—99.8%
KEV—80Draytek VigorConnect Path Traversal Vulnerability —CVE-2006-2372—99.8%
——30——CVE-2025-37164—99.8%
KEV—80Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability—CVE-2023-46264—99.8%
——30——CVE-2020-29583—99.8%
KEV—80Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability—CVE-2013-04313.7 LOW99.8%
KEVR80Oracle JRE Sandbox Bypass Vulnerability18dCVE-2015-3105—99.8%
——30——CVE-2013-4983—99.8%
——30——CVE-2025-263999.8 CRI99.8%
KEVR80SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability9dCVE-2009-39606.5 MED99.8%
KEVR80Adobe BlazeDS Information Disclosure Vulnerability76dCVE-2023-20073—99.8%
——30——CVE-2018-1207—99.8%
——30——CVE-2024-13161—99.8%
KEV—80Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability—