Vulnerabilities exploitable today
367,144in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,256
- High9,258
- Medium5,266
- Low507
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2021-31207—100.0%
KEVR80Microsoft Exchange Server Security Feature Bypass Vulnerability—CVE-2024-45519—100.0%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability—CVE-2021-22986—100.0%
KEVR80F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability—CVE-2025-224579.0 CRI100.0%
KEVR80Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability27dCVE-2020-15505—100.0%
KEV—80Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability—CVE-2024-29824—100.0%
KEV—80Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability—CVE-2021-3156—100.0%
KEV—80Sudo Heap-Based Buffer Overflow Vulnerability—CVE-2019-151079.8 CRI100.0%
KEVR80Webmin Command Injection Vulnerability25dCVE-2023-468058.2 HIG100.0%
KEVR80Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability27dCVE-2017-7269—100.0%
KEV—80Microsoft Windows Server Buffer Overflow Vulnerability—CVE-2021-1497—100.0%
KEV—80Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability—CVE-2024-4879—100.0%
KEV—80ServiceNow Improper Input Validation Vulnerability—CVE-2024-45195—100.0%
KEV—80Apache OFBiz Forced Browsing Vulnerability—CVE-2024-00129.8 CRI100.0%
KEVR80Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability27dCVE-2014-7169—100.0%
KEV—80GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability—CVE-2024-36401—100.0%
KEV—80OSGeo GeoServer GeoTools Eval Injection Vulnerability—CVE-2025-24893—100.0%
KEV—80XWiki Platform Eval Injection Vulnerability—CVE-2021-20038—100.0%
KEVR80SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability—CVE-2021-270657.8 HIG100.0%
KEVR80Microsoft Exchange Server Remote Code Execution Vulnerability12dCVE-2019-11043—100.0%
KEVR80PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability—CVE-2026-1052010.0 CRI100.0%
KEV—80Ivanti Sentry OS Command Injection Vulnerability39dCVE-2021-39226—100.0%
KEV—80Grafana Authentication Bypass Vulnerability—CVE-2016-6277—100.0%
KEV—80NETGEAR Multiple Routers Remote Code Execution Vulnerability—CVE-2020-25506—100.0%
KEV—80D-Link DNS-320 Device Command Injection Vulnerability—CVE-2019-16759—100.0%
KEV—80vBulletin PHP Module Remote Code Execution Vulnerability—CVE-2021-33044—100.0%
KEV—80Dahua IP Camera Authentication Bypass Vulnerability—CVE-2024-249198.6 HIG100.0%
KEVR80Check Point Quantum Security Gateways Information Disclosure Vulnerability26dCVE-2023-34362—100.0%
KEVR80Progress MOVEit Transfer SQL Injection Vulnerability—CVE-2014-8361—100.0%
KEV—80Realtek SDK Improper Input Validation Vulnerability—CVE-2022-35405—100.0%
KEV—80Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability—CVE-2021-36260—100.0%
KEV—80Hikvision Improper Input Validation—CVE-2012-0158—100.0%
KEVR80Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability—CVE-2021-42013—100.0%
KEVR80Apache HTTP Server Path Traversal Vulnerability—CVE-2021-26085—100.0%
KEVR80Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability—CVE-2018-02967.5 HIG100.0%
KEV—80Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability20dCVE-2022-479669.8 CRI100.0%
KEVR80Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability31dCVE-2023-29298—100.0%
KEV—80Adobe ColdFusion Improper Access Control Vulnerability—CVE-2023-42793—100.0%
KEVR80JetBrains TeamCity Authentication Bypass Vulnerability—CVE-2010-28619.8 CRI100.0%
KEVR80Adobe ColdFusion Directory Traversal Vulnerability17dCVE-2015-3113—100.0%
KEV—80Adobe Flash Player Heap-Based Buffer Overflow Vulnerability—