Vulnerabilities exploitable today
367,144in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,256
- High9,258
- Medium5,266
- Low507
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2022-46169—100.0%
KEV—80Cacti Command Injection Vulnerability—CVE-2025-618829.8 CRI100.0%
KEVR80Oracle E-Business Suite Unspecified Vulnerability27dCVE-2025-4427—100.0%
KEV—80Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability—CVE-2016-10033—100.0%
KEV—80PHPMailer Command Injection Vulnerability—CVE-2014-0497—100.0%
KEV—80Adobe Flash Player Integer Underflow Vulnerablity—CVE-2020-0688—100.0%
KEVR80Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability—CVE-2018-02967.5 HIG100.0%
KEV—80Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability20dCVE-2012-46819.8 CRI99.9%
KEVR80Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability25dCVE-2024-506239.8 CRI99.9%
KEVR80Cleo Multiple Products Unrestricted File Upload Vulnerability31dCVE-2024-8963—99.9%
KEV—80Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability—CVE-2024-4040—99.9%
KEV—80CrushFTP VFS Sandbox Escape Vulnerability—CVE-2020-19389.8 CRI99.9%
KEV—80Apache Tomcat Improper Privilege Management Vulnerability6dCVE-2011-0611—99.9%
KEV—80Adobe Flash Player Remote Code Execution Vulnerability—CVE-2023-22515—99.9%
KEVR80Atlassian Confluence Data Center and Server Broken Access Control Vulnerability—CVE-2024-32113—99.9%
KEV—80Apache OFBiz Path Traversal Vulnerability—CVE-2020-0646—99.9%
KEV—80Microsoft .NET Framework Remote Code Execution Vulnerability—CVE-2018-76029.8 CRI99.9%
KEVR80Drupal Core Remote Code Execution Vulnerability18dCVE-2013-2465—99.9%
KEVR80Oracle Java SE Unspecified Vulnerability—CVE-2024-29059—99.9%
KEV—80Microsoft .NET Framework Information Disclosure Vulnerability—CVE-2024-27348—99.9%
KEV—80Apache HugeGraph-Server Improper Access Control Vulnerability—CVE-2019-17558—99.9%
KEV—80Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability—CVE-2023-472469.8 CRI99.9%
KEVR80SysAid Server Path Traversal Vulnerability31dCVE-2024-50603—99.9%
KEV—80Aviatrix Controllers OS Command Injection Vulnerability—CVE-2023-34048—99.9%
KEV—80VMware vCenter Server Out-of-Bounds Write Vulnerability—CVE-2016-3088—99.9%
KEV—80Apache ActiveMQ Improper Input Validation Vulnerability—CVE-2022-301907.8 HIG99.9%
KEVR80Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability25dCVE-2025-68613—99.9%
KEV—80n8n Improper Control of Dynamically-Managed Code Resources Vulnerability—CVE-2024-9463—99.9%
KEV—80Palo Alto Networks Expedition OS Command Injection Vulnerability—CVE-2020-7247—99.9%
KEV—80OpenSMTPD Remote Code Execution Vulnerability—CVE-2020-16846—99.9%
KEV—80SaltStack Salt Shell Injection Vulnerability—CVE-2022-22965—99.9%
KEV—80Spring Framework JDK 9+ Remote Code Execution Vulnerability—CVE-2024-38856—99.9%
KEV—80Apache OFBiz Incorrect Authorization Vulnerability—CVE-2022-36804—99.9%
KEV—80Atlassian Bitbucket Server and Data Center Command Injection Vulnerability—CVE-2025-49113—99.9%
KEV—80RoundCube Webmail Deserialization of Untrusted Data Vulnerability—CVE-2017-3881—99.9%
KEV—80Cisco IOS and IOS XE Remote Code Execution Vulnerability—CVE-2020-06188.8 HIG99.9%
KEVR80Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability16dCVE-2017-0147—99.9%
KEVR80Microsoft Windows SMBv1 Information Disclosure Vulnerability—CVE-2022-35914—99.9%
KEV—80Teclib GLPI Remote Code Execution Vulnerability—CVE-2023-20198—99.9%
KEV—80Cisco IOS XE Web UI Privilege Escalation Vulnerability—CVE-2022-303337.5 HIG99.9%
KEVR80RARLAB UnRAR Directory Traversal Vulnerability27d