Vulnerabilities exploitable today
367,144in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,256
- High9,258
- Medium5,266
- Low507
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2019-151079.8 CRI100.0%
KEVR80Webmin Command Injection Vulnerability25dCVE-2020-15505—100.0%
KEV—80Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability—CVE-2019-0604—100.0%
KEVR80Microsoft SharePoint Remote Code Execution Vulnerability—CVE-2022-30525—100.0%
KEV—80Zyxel Multiple Firewalls OS Command Injection Vulnerability—CVE-2019-74817.5 HIG100.0%
KEVR80SonicWall SMA100 SQL Injection Vulnerability19dCVE-2023-22527—100.0%
KEVR80Atlassian Confluence Data Center and Server Template Injection Vulnerability—CVE-2022-35405—100.0%
KEV—80Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability—CVE-2016-10033—100.0%
KEV—80PHPMailer Command Injection Vulnerability—CVE-2023-21839—100.0%
KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2021-1497—100.0%
KEV—80Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability—CVE-2012-0158—100.0%
KEVR80Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability—CVE-2026-314317.8 HIG100.0%
KEV—80Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability34dCVE-2019-9670—100.0%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference—CVE-2018-10562—100.0%
KEVR80Dasan GPON Routers Command Injection Vulnerability—CVE-2021-219729.8 CRI100.0%
KEVR80VMware vCenter Server Remote Code Execution Vulnerability19dCVE-2020-7961—100.0%
KEV—80Liferay Portal Deserialization of Untrusted Data Vulnerability—CVE-2021-35394—100.0%
KEV—80Realtek Jungle SDK Remote Code Execution Vulnerability—CVE-2021-31166—100.0%
KEV—80Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability—CVE-2022-47986—100.0%
KEVR80IBM Aspera Faspex Code Execution Vulnerability—CVE-2021-37415—100.0%
KEV—80Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability—CVE-2021-20090—100.0%
KEV—80Arcadyan Buffalo Firmware Path Traversal Vulnerability—CVE-2024-29824—100.0%
KEV—80Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability—CVE-2016-6277—100.0%
KEV—80NETGEAR Multiple Routers Remote Code Execution Vulnerability—CVE-2025-31161—100.0%
KEVR80CrushFTP Authentication Bypass Vulnerability—CVE-2021-345278.8 HIG100.0%
KEVR80Microsoft Windows Print Spooler Remote Code Execution Vulnerability21dCVE-2025-1003510.0 CRI100.0%
KEVR80Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability27dCVE-2025-57777.5 HIG100.0%
KEVR80Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability27dCVE-2019-11043—100.0%
KEVR80PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability—CVE-2021-45046—100.0%
KEVR80Apache Log4j2 Deserialization of Untrusted Data Vulnerability—CVE-2022-46169—100.0%
KEV—80Cacti Command Injection Vulnerability—CVE-2023-42793—100.0%
KEVR80JetBrains TeamCity Authentication Bypass Vulnerability—CVE-2024-38475—100.0%
KEV—80Apache HTTP Server Improper Escaping of Output Vulnerability—CVE-2023-38035—100.0%
KEVR80Ivanti Sentry Authentication Bypass Vulnerability—CVE-2021-33044—100.0%
KEV—80Dahua IP Camera Authentication Bypass Vulnerability—CVE-2025-25257—100.0%
KEV—80Fortinet FortiWeb SQL Injection Vulnerability—CVE-2021-26085—100.0%
KEVR80Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability—CVE-2014-0497—100.0%
KEV—80Adobe Flash Player Integer Underflow Vulnerablity—CVE-2022-1040—100.0%
KEV—80Sophos Firewall Authentication Bypass Vulnerability—CVE-2023-29357—100.0%
KEVR80Microsoft SharePoint Server Privilege Escalation Vulnerability—CVE-2014-7169—100.0%
KEV—80GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability—