Vulnerabilities exploitable today
4,330in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,504
- High15,974
- Medium14,897
- Low1,475
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-1698—99.6%
——30——CVE-2024-1512—99.6%
——30——CVE-2016-4054—99.6%
——30——CVE-2020-15148—99.6%
——30——CVE-2020-10808—99.6%
——30——CVE-2019-12840—99.6%
——30——CVE-2016-0709—99.6%
——30——CVE-2025-26794—99.6%
——30——CVE-2014-6352—99.6%
KEV—80Microsoft Windows Code Injection Vulnerability—CVE-2020-11532—99.6%
——30——CVE-2018-12709.8 CRI99.6%
——30Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack.13dCVE-2008-2499—99.6%
——30——CVE-2025-54254—99.6%
——30——CVE-2022-25149—99.6%
——30——CVE-2016-10176—99.6%
——30——CVE-2012-1675—99.6%
——30——CVE-2017-14143—99.6%
——30——CVE-2023-36824—99.6%
——30——CVE-2020-8012—99.6%
——30——CVE-2020-9850—99.6%
——30——CVE-2021-22883—99.6%
——30——CVE-2007-2449—99.6%
——30——CVE-2026-80379.6 CRI99.6%
KEV—80Progress LoadMaster Command Injection Vulnerability6dCVE-2002-0079—99.6%
——30——CVE-2019-10692—99.6%
——30——CVE-2022-410808.8 HIG99.6%
KEVR80Microsoft Exchange Server Privilege Escalation Vulnerability72dCVE-2013-3897—99.6%
KEV—80Microsoft Internet Explorer Use-After-Free Vulnerability—CVE-2018-9059—99.6%
——30——CVE-2019-1429—99.6%
KEV—80Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability—CVE-2023-34192—99.6%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability—CVE-2024-8877—99.6%
——30——CVE-2021-42129—99.6%
——30——CVE-2020-362227.5 HIG99.6%
——30A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.7dCVE-2020-362277.5 HIG99.6%
——30A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.7dCVE-2021-295057.5 HIG99.6%
——30XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types is affected. The vulnerability is patched in version 1.4.17.14dCVE-2023-27856—99.6%
——30——CVE-2014-8741—99.6%
——30——CVE-2007-2508—99.6%
——30——CVE-2021-422877.5 HIG99.6%
KEVR80Microsoft Active Directory Domain Services Privilege Escalation Vulnerability63dCVE-2022-21449—99.6%
——30——