Vulnerabilities exploitable today
4,337in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,263
- High9,268
- Medium5,273
- Low508
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2017-1001000—99.7%
——30——CVE-2017-14491—99.7%
——30——CVE-2003-0772—99.7%
——30——CVE-2023-32164—99.7%
——30——CVE-2019-10758—99.7%
KEV—80MongoDB mongo-express Remote Code Execution Vulnerability—CVE-2023-412668.2 HIG99.7%
KEVR80Qlik Sense Path Traversal Vulnerability26dCVE-2024-20328—99.7%
——30——CVE-2019-7214—99.7%
——30——CVE-2021-2401—99.7%
——30——CVE-2023-44352—99.7%
——30——CVE-2022-38111—99.7%
——30——CVE-2004-0493—99.7%
——30——CVE-2022-24697—99.7%
——30——CVE-2019-8449—99.7%
——30——CVE-2023-28343—99.7%
——30——CVE-2002-0649—99.7%
——30——CVE-2023-389507.5 HIG99.7%
KEV—80ZKTeco BioTime Path Traversal Vulnerability53dCVE-2015-6132—99.7%
——30——CVE-2023-28128—99.7%
——30——CVE-2019-16663—99.7%
——30——CVE-2020-10923—99.7%
——30——CVE-2021-21029—99.7%
——30——CVE-2007-3925—99.7%
——30——CVE-2022-23134—99.7%
KEV—80Zabbix Frontend Improper Access Control Vulnerability—CVE-2005-2278—99.7%
——30——CVE-2024-58136—99.7%
KEV—80Yiiframework Yii Improper Protection of Alternate Path Vulnerability—CVE-2024-28986—99.7%
KEV—80SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability—CVE-2019-11581—99.7%
KEV—80Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability—CVE-2025-64328—99.7%
KEV—80Sangoma FreePBX OS Command Injection Vulnerability—CVE-2017-2741—99.7%
——30——CVE-2026-505229.8 CRI99.7%
KEV—80Microsoft SharePoint Deserialization of Untrusted Data Vulnerability 39dCVE-2020-8656—99.7%
——30——CVE-2013-6955—99.7%
——30——CVE-2018-17463—99.7%
KEV—80Google Chromium V8 Remote Code Execution Vulnerability—CVE-2017-17105—99.7%
——30——CVE-2026-600049.8 CRI99.7%
KEV—80Gitea Code Injection Vulnerability4dCVE-2020-28949—99.7%
KEV—80PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability—CVE-2013-3214—99.7%
——30——CVE-2023-25690—99.7%
——30——CVE-2003-0201—99.7%
——30——