Vulnerabilities exploitable today
4,330in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,340
- High15,177
- Medium14,103
- Low1,353
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2021-37415—100.0%
KEV—80Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability—CVE-2017-7269—100.0%
KEV—80Microsoft Windows Server Buffer Overflow Vulnerability—CVE-2023-388317.8 HIG100.0%
KEVR80RARLAB WinRAR Code Execution Vulnerability76dCVE-2012-1459—100.0%
——30——CVE-2024-36401—100.0%
KEV—80OSGeo GeoServer GeoTools Eval Injection Vulnerability—CVE-2015-3113—100.0%
KEV—80Adobe Flash Player Heap-Based Buffer Overflow Vulnerability—CVE-2020-079610.0 CRI100.0%
KEVR80Microsoft SMBv3 Remote Code Execution Vulnerability19dCVE-2016-6277—100.0%
KEV—80NETGEAR Multiple Routers Remote Code Execution Vulnerability—CVE-2025-5518210.0 CRI100.0%
KEVR80Meta React Server Components Remote Code Execution Vulnerability2dCVE-2025-1003510.0 CRI100.0%
KEVR80Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability2dCVE-2022-1040—100.0%
KEV—80Sophos Firewall Authentication Bypass Vulnerability—CVE-2022-39952—100.0%
——30——CVE-2025-3243210.0 CRI100.0%
KEV—80Craft CMS Code Injection Vulnerability26dCVE-2021-345278.8 HIG100.0%
KEVR80Microsoft Windows Print Spooler Remote Code Execution Vulnerability71dCVE-2023-29298—100.0%
KEV—80Adobe ColdFusion Improper Access Control Vulnerability—CVE-2021-31207—100.0%
KEVR80Microsoft Exchange Server Security Feature Bypass Vulnerability—CVE-2020-13927—100.0%
KEV—80Apache Airflow's Experimental API Authentication Bypass—CVE-2023-38205—100.0%
KEV—80Adobe ColdFusion Improper Access Control Vulnerability—CVE-2022-479669.8 CRI100.0%
KEVR80Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability81dCVE-2023-35199.8 CRI100.0%
KEVR80Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability76dCVE-2019-11043—100.0%
KEVR80PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability—CVE-2010-28619.8 CRI100.0%
KEVR80Adobe ColdFusion Directory Traversal Vulnerability18dCVE-2019-18935—100.0%
KEVR80Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability—CVE-2020-15505—100.0%
KEV—80Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability—CVE-2025-618829.8 CRI100.0%
KEVR80Oracle E-Business Suite Unspecified Vulnerability11dCVE-2021-2220510.0 CRI100.0%
KEVR80GitLab Community and Enterprise Editions Remote Code Execution Vulnerability75dCVE-2019-16759—100.0%
KEV—80vBulletin PHP Module Remote Code Execution Vulnerability—CVE-2012-1446—100.0%
——30——CVE-2016-10033—100.0%
KEV—80PHPMailer Command Injection Vulnerability—CVE-2019-151079.8 CRI100.0%
KEVR80Webmin Command Injection Vulnerability75dCVE-2008-2938—100.0%
——30——CVE-2020-10220—100.0%
——30——CVE-2017-0147—100.0%
KEVR80Microsoft Windows SMBv1 Information Disclosure Vulnerability—CVE-2023-27372—100.0%
——30——CVE-2017-1000353—100.0%
KEV—80Jenkins Remote Code Execution Vulnerability—CVE-2021-220547.5 HIG100.0%
KEV—80Omnissa Workspace ONE Server-Side Request Forgery19dCVE-2025-48703—100.0%
KEV—80CWP Control Web Panel OS Command Injection Vulnerability—CVE-2017-126158.1 HIG100.0%
KEVR80Apache Tomcat on Windows Remote Code Execution Vulnerability75dCVE-2022-22965—100.0%
KEV—80Spring Framework JDK 9+ Remote Code Execution Vulnerability—CVE-2012-1443—100.0%
——30——