Vulnerabilities exploitable today
399,114in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,340
- High15,178
- Medium14,103
- Low1,353
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2020-13927—100.0%
KEV—80Apache Airflow's Experimental API Authentication Bypass—CVE-2017-0147—100.0%
KEVR80Microsoft Windows SMBv1 Information Disclosure Vulnerability—CVE-2022-47986—100.0%
KEVR80IBM Aspera Faspex Code Execution Vulnerability—CVE-2025-48703—100.0%
KEV—80CWP Control Web Panel OS Command Injection Vulnerability—CVE-2021-220547.5 HIG100.0%
KEV—80Omnissa Workspace ONE Server-Side Request Forgery19dCVE-2016-6277—100.0%
KEV—80NETGEAR Multiple Routers Remote Code Execution Vulnerability—CVE-2023-46604—100.0%
KEVR80Apache ActiveMQ Deserialization of Untrusted Data Vulnerability—CVE-2021-20038—100.0%
KEVR80SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability—CVE-2018-2628—100.0%
KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2021-31207—100.0%
KEVR80Microsoft Exchange Server Security Feature Bypass Vulnerability—CVE-2021-45046—100.0%
KEVR80Apache Log4j2 Deserialization of Untrusted Data Vulnerability—CVE-2019-11043—100.0%
KEVR80PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability—CVE-2019-27259.8 CRI100.0%
KEVR80Oracle WebLogic Server, Injection19dCVE-2022-22963—100.0%
KEV—80VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability—CVE-2019-16759—100.0%
KEV—80vBulletin PHP Module Remote Code Execution Vulnerability—CVE-2025-224579.0 CRI100.0%
KEVR80Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability77dCVE-2024-32113—100.0%
KEV—80Apache OFBiz Path Traversal Vulnerability—CVE-2022-41082—100.0%
KEVR80Microsoft Exchange Server Remote Code Execution Vulnerability—CVE-2020-10189—100.0%
KEV—80Zoho ManageEngine Desktop Central File Upload Vulnerability—CVE-2023-23752—100.0%
KEV—80Joomla! Improper Access Control Vulnerability—CVE-2022-1388—100.0%
KEVR80F5 BIG-IP Missing Authentication Vulnerability—CVE-2012-0158—100.0%
KEVR80Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability—CVE-2025-24813—100.0%
KEV—80Apache Tomcat Path Equivalence Vulnerability—CVE-2022-479669.8 CRI100.0%
KEVR80Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability81dCVE-2023-21839—100.0%
KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2014-0497—100.0%
KEV—80Adobe Flash Player Integer Underflow Vulnerablity—CVE-2021-35394—100.0%
KEV—80Realtek Jungle SDK Remote Code Execution Vulnerability—CVE-2021-22204—100.0%
KEV—80ExifTool Remote Code Execution Vulnerability—CVE-2015-1427—100.0%
KEV—80Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability—CVE-2021-3156—100.0%
KEV—80Sudo Heap-Based Buffer Overflow Vulnerability—CVE-2019-151079.8 CRI100.0%
KEVR80Webmin Command Injection Vulnerability75dCVE-2023-29298—100.0%
KEV—80Adobe ColdFusion Improper Access Control Vulnerability—CVE-2021-42013—100.0%
KEVR80Apache HTTP Server Path Traversal Vulnerability—CVE-2021-20090—100.0%
KEV—80Arcadyan Buffalo Firmware Path Traversal Vulnerability—CVE-2023-38205—100.0%
KEV—80Adobe ColdFusion Improper Access Control Vulnerability—CVE-2020-25506—100.0%
KEV—80D-Link DNS-320 Device Command Injection Vulnerability—CVE-2024-45195—100.0%
KEV—80Apache OFBiz Forced Browsing Vulnerability—CVE-2023-468058.2 HIG100.0%
KEVR80Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability19dCVE-2017-126178.1 HIG100.0%
KEV—80Apache Tomcat Remote Code Execution Vulnerability56dCVE-2022-406849.8 CRI100.0%
KEVR80Fortinet Multiple Products Authentication Bypass Vulnerability75d