Vulnerabilities exploitable today
4,330in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,340
- High15,177
- Medium14,103
- Low1,353
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-24813—100.0%
KEV—80Apache Tomcat Path Equivalence Vulnerability—CVE-2022-35405—100.0%
KEV—80Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability—CVE-2025-4427—100.0%
KEV—80Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability—CVE-2019-0232—100.0%
——30——CVE-2025-25257—100.0%
KEV—80Fortinet FortiWeb SQL Injection Vulnerability—CVE-2024-32113—100.0%
KEV—80Apache OFBiz Path Traversal Vulnerability—CVE-2026-1052010.0 CRI100.0%
KEV—80Ivanti Sentry OS Command Injection Vulnerability13dCVE-2019-3396—100.0%
KEVR80Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability—CVE-2019-0604—100.0%
KEVR80Microsoft SharePoint Remote Code Execution Vulnerability—CVE-2021-20038—100.0%
KEVR80SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability—CVE-2022-24816—100.0%
KEV—80OSGeo GeoServer JAI-EXT Code Injection Vulnerability—CVE-2018-02967.5 HIG100.0%
KEV—80Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability70dCVE-2024-45519—100.0%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability—CVE-2019-74817.5 HIG100.0%
KEVR80SonicWall SMA100 SQL Injection Vulnerability69dCVE-2015-1427—100.0%
KEV—80Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability—CVE-2020-7961—100.0%
KEV—80Liferay Portal Deserialization of Untrusted Data Vulnerability—CVE-2023-21839—100.0%
KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2021-22986—100.0%
KEVR80F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability—CVE-2023-46604—100.0%
KEVR80Apache ActiveMQ Deserialization of Untrusted Data Vulnerability—CVE-2014-0497—100.0%
KEV—80Adobe Flash Player Integer Underflow Vulnerablity—CVE-2021-35394—100.0%
KEV—80Realtek Jungle SDK Remote Code Execution Vulnerability—CVE-2024-29826—100.0%
——30——CVE-2024-29825—100.0%
——30——CVE-2021-270657.8 HIG100.0%
KEVR80Microsoft Exchange Server Remote Code Execution Vulnerability19dCVE-2019-1653—100.0%
KEV—80Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability—CVE-2021-44515—100.0%
KEV—80Zoho Desktop Central Authentication Bypass Vulnerability—CVE-2021-36260—100.0%
KEV—80Hikvision Improper Input Validation—CVE-2021-31166—100.0%
KEV—80Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability—CVE-2021-219729.8 CRI100.0%
KEVR80VMware vCenter Server Remote Code Execution Vulnerability69dCVE-2025-24893—100.0%
KEV—80XWiki Platform Eval Injection Vulnerability—CVE-2015-4000—100.0%
——30——CVE-2024-29823—100.0%
——30——CVE-2025-53771—100.0%
——30——CVE-2020-13379—100.0%
——30——CVE-2024-00129.8 CRI100.0%
KEVR80Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability77dCVE-2022-35914—100.0%
KEV—80Teclib GLPI Remote Code Execution Vulnerability—CVE-2017-12635—100.0%
——30——CVE-2023-23752—100.0%
KEV—80Joomla! Improper Access Control Vulnerability—CVE-2017-8917—100.0%
——30——CVE-2022-46169—100.0%
KEV—80Cacti Command Injection Vulnerability—