Vulnerabilities exploitable today
4,330in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,503
- High15,973
- Medium14,894
- Low1,472
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2003-0822—99.7%
——30——CVE-2020-39929.8 CRI99.7%
KEVR80VMware ESXi OpenSLP Use-After-Free Vulnerability70dCVE-2024-31984—99.7%
——30——CVE-2020-7980—99.7%
——30——CVE-2021-25216—99.7%
——30——CVE-2018-17254—99.7%
——30——CVE-2019-14470—99.7%
——30——CVE-2023-26469—99.7%
——30——CVE-2018-16763—99.7%
——30——CVE-2009-4006—99.7%
——30——CVE-2016-0041—99.7%
——30——CVE-2019-0539—99.7%
——30——CVE-2024-42009—99.7%
KEV—80RoundCube Webmail Cross-Site Scripting Vulnerability—CVE-2021-27561—99.7%
KEV—80Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability—CVE-2015-1187—99.7%
KEV—80D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability—CVE-2022-28368—99.7%
——30——CVE-2023-46262—99.7%
——30——CVE-2023-27992—99.7%
KEV—80Zyxel Multiple NAS Devices Command Injection Vulnerability—CVE-2019-1619—99.7%
——30——CVE-2019-9514—99.7%
——30——CVE-2006-0003—99.7%
——30——CVE-2016-7200—99.7%
KEV—80Microsoft Edge Memory Corruption Vulnerability—CVE-2005-0356—99.7%
——30——CVE-2019-8942—99.7%
——30——CVE-2020-2230—99.7%
——30——CVE-2014-4511—99.7%
——30——CVE-2015-8605—99.7%
——30——CVE-2024-0769—99.7%
KEV—80 D-Link DIR-859 Router Path Traversal Vulnerability—CVE-2019-7194—99.7%
KEVR80QNAP Photo Station Path Traversal Vulnerability—CVE-2023-43208—99.7%
KEVR80NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability—CVE-2014-9034—99.7%
——30——CVE-2025-33073—99.7%
KEV—80Microsoft Windows SMB Client Improper Access Control Vulnerability—CVE-2021-41291—99.7%
——30——CVE-2014-1776—99.7%
KEV—80Microsoft Internet Explorer Memory Corruption Vulnerability—CVE-2024-9464—99.7%
——30——CVE-2022-12927.3 HIG99.7%
——30The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).7dCVE-2017-5817—99.7%
——30——CVE-2021-237588.1 HIG99.7%
KEV—80Ajax.NET Professional Deserialization of Untrusted Data Vulnerability55dCVE-2010-1297—99.7%
KEV—80Adobe Flash Player Memory Corruption Vulnerability—CVE-2009-2765—99.7%
——30——