Vulnerabilities exploitable today
399,114in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,340
- High15,177
- Medium14,103
- Low1,353
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2023-368847.5 HIG99.9%
KEVR80Microsoft Windows Search Remote Code Execution Vulnerability71dCVE-2025-3132410.0 CRI99.9%
KEVR80SAP NetWeaver Unrestricted File Upload Vulnerability77dCVE-2020-1472—99.9%
KEVR80Microsoft Netlogon Privilege Escalation Vulnerability—CVE-2017-9805—99.9%
KEV—80Apache Struts Deserialization of Untrusted Data Vulnerability—CVE-2024-20767—99.9%
KEV—80Adobe ColdFusion Improper Access Control Vulnerability—CVE-2016-3088—99.9%
KEV—80Apache ActiveMQ Improper Input Validation Vulnerability—CVE-2020-11978—99.9%
KEV—80Apache Airflow Command Injection—CVE-2020-14750—99.9%
KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—CVE-2022-21587—99.9%
KEVR80Oracle E-Business Suite Unspecified Vulnerability—CVE-2024-8963—99.9%
KEV—80Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability—CVE-2014-6287—99.9%
KEV—80Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability—CVE-2020-16846—99.9%
KEV—80SaltStack Salt Shell Injection Vulnerability—CVE-2024-9463—99.9%
KEV—80Palo Alto Networks Expedition OS Command Injection Vulnerability—CVE-2017-9791—99.9%
KEV—80Apache Struts 1 Improper Input Validation Vulnerability—CVE-2015-54777.5 HIG99.9%
KEV—80 ISC BIND Data Processing Errors Vulnerability11dCVE-2023-48788—99.9%
KEVR80Fortinet FortiClient EMS SQL Injection Vulnerability—CVE-2025-49113—99.9%
KEV—80RoundCube Webmail Deserialization of Untrusted Data Vulnerability—CVE-2017-3881—99.9%
KEV—80Cisco IOS and IOS XE Remote Code Execution Vulnerability—CVE-2016-1555—99.9%
KEV—80NETGEAR Multiple WAP Devices Command Injection Vulnerability—CVE-2014-6278—99.9%
KEV—80GNU Bash OS Command Injection Vulnerability—CVE-2017-7494—99.9%
KEVR80Samba Remote Code Execution Vulnerability—CVE-2019-3929—99.9%
KEV—80Crestron Multiple Products Command Injection Vulnerability—CVE-2019-5418—99.9%
KEV—80Rails Ruby on Rails Path Traversal Vulnerability—CVE-2024-9465—99.9%
KEV—80Palo Alto Networks Expedition SQL Injection Vulnerability—CVE-2026-1340—99.9%
KEV—80Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability—CVE-2023-22515—99.9%
KEVR80Atlassian Confluence Data Center and Server Broken Access Control Vulnerability—CVE-2026-1281—99.9%
KEV—80Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability—CVE-2024-506239.8 CRI99.9%
KEVR80Cleo Multiple Products Unrestricted File Upload Vulnerability12dCVE-2024-50603—99.9%
KEV—80Aviatrix Controllers OS Command Injection Vulnerability—CVE-2023-28771—99.9%
KEV—80Zyxel Multiple Firewalls OS Command Injection Vulnerability—CVE-2020-0646—99.9%
KEV—80Microsoft .NET Framework Remote Code Execution Vulnerability—CVE-2022-42475—99.9%
KEVR80Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability—CVE-2019-16278—99.9%
KEV—80Nostromo nhttpd Directory Traversal Vulnerability—CVE-2024-29059—99.9%
KEV—80Microsoft .NET Framework Information Disclosure Vulnerability—CVE-2024-4040—99.9%
KEV—80CrushFTP VFS Sandbox Escape Vulnerability—CVE-2023-20198—99.9%
KEV—80Cisco IOS XE Web UI Privilege Escalation Vulnerability—CVE-2024-214128.1 HIG99.9%
KEVR80Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability71dCVE-2026-240619.8 CRI99.9%
KEV—80GNU InetUtils Argument Injection Vulnerability20dCVE-2023-472469.8 CRI99.9%
KEVR80SysAid Server Path Traversal Vulnerability81dCVE-2017-01448.8 HIG99.9%
KEVR80Microsoft SMBv1 Remote Code Execution Vulnerability67d