Vulnerabilities exploitable today
399,114in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,340
- High15,177
- Medium14,103
- Low1,353
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-24893—100.0%
KEV—80XWiki Platform Eval Injection Vulnerability—CVE-2021-270657.8 HIG100.0%
KEVR80Microsoft Exchange Server Remote Code Execution Vulnerability19dCVE-2022-1040—100.0%
KEV—80Sophos Firewall Authentication Bypass Vulnerability—CVE-2021-31207—100.0%
KEVR80Microsoft Exchange Server Security Feature Bypass Vulnerability—CVE-2017-7269—100.0%
KEV—80Microsoft Windows Server Buffer Overflow Vulnerability—CVE-2022-406849.8 CRI100.0%
KEVR80Fortinet Multiple Products Authentication Bypass Vulnerability75dCVE-2021-20090—100.0%
KEV—80Arcadyan Buffalo Firmware Path Traversal Vulnerability—CVE-2024-45195—100.0%
KEV—80Apache OFBiz Forced Browsing Vulnerability—CVE-2024-32113—100.0%
KEV—80Apache OFBiz Path Traversal Vulnerability—CVE-2022-30525—100.0%
KEV—80Zyxel Multiple Firewalls OS Command Injection Vulnerability—CVE-2015-1427—100.0%
KEV—80Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability—CVE-2025-5518210.0 CRI100.0%
KEVR80Meta React Server Components Remote Code Execution Vulnerability2dCVE-2023-35199.8 CRI100.0%
KEVR80Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability76dCVE-2016-6277—100.0%
KEV—80NETGEAR Multiple Routers Remote Code Execution Vulnerability—CVE-2024-1709—100.0%
KEVR80ConnectWise ScreenConnect Authentication Bypass Vulnerability—CVE-2021-3156—100.0%
KEV—80Sudo Heap-Based Buffer Overflow Vulnerability—CVE-2026-1340—99.9%
KEV—80Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability—CVE-2022-279257.2 HIG99.9%
KEVR80Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability19dCVE-2019-3929—99.9%
KEV—80Crestron Multiple Products Command Injection Vulnerability—CVE-2022-42475—99.9%
KEVR80Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability—CVE-2020-14750—99.9%
KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—CVE-2021-33045—99.9%
KEV—80Dahua IP Camera Authentication Bypass Vulnerability—CVE-2024-9465—99.9%
KEV—80Palo Alto Networks Expedition SQL Injection Vulnerability—CVE-2026-419409.8 CRI99.9%
KEVR80WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability20dCVE-2025-32433—99.9%
KEV—80Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability—CVE-2018-20062—99.9%
KEV—80ThinkPHP "noneCms" Remote Code Execution Vulnerability—CVE-2018-0171—99.9%
KEV—80Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability—CVE-2020-16846—99.9%
KEV—80SaltStack Salt Shell Injection Vulnerability—CVE-2012-46819.8 CRI99.9%
KEVR80Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability75dCVE-2026-240619.8 CRI99.9%
KEV—80GNU InetUtils Argument Injection Vulnerability20dCVE-2017-15944—99.9%
KEV—80Palo Alto Networks PAN-OS Remote Code Execution Vulnerability—CVE-2025-497066.5 MED99.9%
KEVR80Microsoft SharePoint Improper Authentication Vulnerability77dCVE-2025-3132410.0 CRI99.9%
KEVR80SAP NetWeaver Unrestricted File Upload Vulnerability77dCVE-2012-3152—99.9%
KEV—80Oracle Fusion Middleware Unspecified Vulnerability—CVE-2017-9805—99.9%
KEV—80Apache Struts Deserialization of Untrusted Data Vulnerability—CVE-2024-214128.1 HIG99.9%
KEVR80Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability71dCVE-2019-11539—99.9%
KEVR80Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability—CVE-2017-3881—99.9%
KEV—80Cisco IOS and IOS XE Remote Code Execution Vulnerability—CVE-2021-40539—99.9%
KEVR80Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability—CVE-2017-0148—99.9%
KEVR80Microsoft SMBv1 Server Remote Code Execution Vulnerability—