Vulnerabilities exploitable today
399,114in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,340
- High15,177
- Medium14,103
- Low1,353
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-5518210.0 CRI100.0%
KEVR80Meta React Server Components Remote Code Execution Vulnerability2dCVE-2020-079610.0 CRI100.0%
KEVR80Microsoft SMBv3 Remote Code Execution Vulnerability19dCVE-2019-10149—100.0%
KEV—80Exim Mail Transfer Agent (MTA) Improper Input Validation—CVE-2025-224579.0 CRI100.0%
KEVR80Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability77dCVE-2021-37415—100.0%
KEV—80Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability—CVE-2021-1497—100.0%
KEV—80Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability—CVE-2024-29824—100.0%
KEV—80Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability—CVE-2024-00129.8 CRI100.0%
KEVR80Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability77dCVE-2015-1427—100.0%
KEV—80Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability—CVE-2025-24893—100.0%
KEV—80XWiki Platform Eval Injection Vulnerability—CVE-2023-35199.8 CRI100.0%
KEVR80Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability76dCVE-2017-126158.1 HIG100.0%
KEVR80Apache Tomcat on Windows Remote Code Execution Vulnerability75dCVE-2024-38475—100.0%
KEV—80Apache HTTP Server Improper Escaping of Output Vulnerability—CVE-2015-3113—100.0%
KEV—80Adobe Flash Player Heap-Based Buffer Overflow Vulnerability—CVE-2025-59287—100.0%
KEV—80Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability—CVE-2024-1709—100.0%
KEVR80ConnectWise ScreenConnect Authentication Bypass Vulnerability—CVE-2018-2628—100.0%
KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2023-34362—100.0%
KEVR80Progress MOVEit Transfer SQL Injection Vulnerability—CVE-2012-0158—100.0%
KEVR80Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability—CVE-2023-29357—100.0%
KEVR80Microsoft SharePoint Server Privilege Escalation Vulnerability—CVE-2017-126178.1 HIG100.0%
KEV—80Apache Tomcat Remote Code Execution Vulnerability56dCVE-2023-468058.2 HIG100.0%
KEVR80Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability19dCVE-2017-1000353—100.0%
KEV—80Jenkins Remote Code Execution Vulnerability—CVE-2019-1653—100.0%
KEV—80Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability—CVE-2020-7961—100.0%
KEV—80Liferay Portal Deserialization of Untrusted Data Vulnerability—CVE-2021-31207—100.0%
KEVR80Microsoft Exchange Server Security Feature Bypass Vulnerability—CVE-2025-24813—100.0%
KEV—80Apache Tomcat Path Equivalence Vulnerability—CVE-2023-29298—100.0%
KEV—80Adobe ColdFusion Improper Access Control Vulnerability—CVE-2021-22204—100.0%
KEV—80ExifTool Remote Code Execution Vulnerability—CVE-2023-46604—100.0%
KEVR80Apache ActiveMQ Deserialization of Untrusted Data Vulnerability—CVE-2014-8361—100.0%
KEV—80Realtek SDK Improper Input Validation Vulnerability—CVE-2018-02967.5 HIG100.0%
KEV—80Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability70dCVE-2024-4879—100.0%
KEV—80ServiceNow Improper Input Validation Vulnerability—CVE-2010-28619.8 CRI100.0%
KEVR80Adobe ColdFusion Directory Traversal Vulnerability18dCVE-2021-386479.8 CRI100.0%
KEVR80Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability71dCVE-2021-39226—100.0%
KEV—80Grafana Authentication Bypass Vulnerability—CVE-2022-47986—100.0%
KEVR80IBM Aspera Faspex Code Execution Vulnerability—CVE-2022-22965—100.0%
KEV—80Spring Framework JDK 9+ Remote Code Execution Vulnerability—CVE-2021-44515—100.0%
KEV—80Zoho Desktop Central Authentication Bypass Vulnerability—CVE-2024-249198.6 HIG100.0%
KEVR80Check Point Quantum Security Gateways Information Disclosure Vulnerability76d