Vulnerabilities exploitable today
367,144in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,256
- High9,258
- Medium5,266
- Low507
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-4040—99.9%
KEV—80CrushFTP VFS Sandbox Escape Vulnerability—CVE-2021-32030—99.9%
KEV—80ASUS Routers Improper Authentication Vulnerability—CVE-2018-0171—99.9%
KEV—80Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability—CVE-2022-279257.2 HIG99.9%
KEVR80Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability27dCVE-2008-4250—99.9%
KEV—80Microsoft Windows Buffer Overflow Vulnerability—CVE-2017-7494—99.9%
KEVR80Samba Remote Code Execution Vulnerability—CVE-2019-5418—99.9%
KEV—80Rails Ruby on Rails Path Traversal Vulnerability—CVE-2024-29059—99.9%
KEV—80Microsoft .NET Framework Information Disclosure Vulnerability—CVE-2017-0148—99.9%
KEVR80Microsoft SMBv1 Server Remote Code Execution Vulnerability—CVE-2014-6278—99.9%
KEV—80GNU Bash OS Command Injection Vulnerability—CVE-2025-68613—99.9%
KEV—80n8n Improper Control of Dynamically-Managed Code Resources Vulnerability—CVE-2026-80379.6 CRI99.9%
KEV—80Progress LoadMaster Command Injection Vulnerability21dCVE-2017-9791—99.9%
KEV—80Apache Struts 1 Improper Input Validation Vulnerability—CVE-2012-3152—99.9%
KEV—80Oracle Fusion Middleware Unspecified Vulnerability—CVE-2021-445299.8 CRI99.9%
KEVR80Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability 27dCVE-2018-2628—99.9%
KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2020-14750—99.9%
KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—CVE-2023-34048—99.9%
KEV—80VMware vCenter Server Out-of-Bounds Write Vulnerability—CVE-2024-9465—99.9%
KEV—80Palo Alto Networks Expedition SQL Injection Vulnerability—CVE-2023-20198—99.9%
KEV—80Cisco IOS XE Web UI Privilege Escalation Vulnerability—CVE-2011-0611—99.9%
KEV—80Adobe Flash Player Remote Code Execution Vulnerability—CVE-2026-344867.5 HIG99.9%
KEV—80Apache Tomcat Missing Encryption of Sensitive Data Vulnerability21dCVE-2022-24086—99.9%
KEV—80Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability—CVE-2024-27348—99.9%
KEV—80Apache HugeGraph-Server Improper Access Control Vulnerability—CVE-2024-9463—99.9%
KEV—80Palo Alto Networks Expedition OS Command Injection Vulnerability—CVE-2020-7247—99.9%
KEV—80OpenSMTPD Remote Code Execution Vulnerability—CVE-2025-32433—99.9%
KEV—80Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability—CVE-2019-3929—99.9%
KEV—80Crestron Multiple Products Command Injection Vulnerability—CVE-2019-17558—99.9%
KEV—80Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability—CVE-2024-32113—99.9%
KEV—80Apache OFBiz Path Traversal Vulnerability—CVE-2024-28995—99.9%
KEV—80SolarWinds Serv-U Path Traversal Vulnerability —CVE-2022-22965—99.9%
KEV—80Spring Framework JDK 9+ Remote Code Execution Vulnerability—CVE-2024-5217—99.9%
KEV—80ServiceNow Incomplete List of Disallowed Inputs Vulnerability—CVE-2024-8963—99.9%
KEV—80Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability—CVE-2024-50603—99.9%
KEV—80Aviatrix Controllers OS Command Injection Vulnerability—CVE-2020-1472—99.9%
KEVR80Microsoft Netlogon Privilege Escalation Vulnerability—CVE-2022-42475—99.9%
KEVR80Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability—CVE-2013-2465—99.9%
KEVR80Oracle Java SE Unspecified Vulnerability—CVE-2025-497066.5 MED99.9%
KEVR80Microsoft SharePoint Improper Authentication Vulnerability27dCVE-2020-16846—99.9%
KEV—80SaltStack Salt Shell Injection Vulnerability—