Vulnerabilities exploitable today
4,338in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,256
- High9,258
- Medium5,266
- Low507
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-4885—99.9%
KEV—80Progress WhatsUp Gold Path Traversal Vulnerability—CVE-2023-28771—99.9%
KEV—80Zyxel Multiple Firewalls OS Command Injection Vulnerability—CVE-2020-19389.8 CRI99.9%
KEV—80Apache Tomcat Improper Privilege Management Vulnerability6dCVE-2020-14750—99.9%
KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—CVE-2018-76029.8 CRI99.9%
KEVR80Drupal Core Remote Code Execution Vulnerability18dCVE-2022-301907.8 HIG99.9%
KEVR80Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability25dCVE-2017-01448.8 HIG99.9%
KEVR80Microsoft SMBv1 Remote Code Execution Vulnerability17dCVE-2025-29927—99.9%
——30——CVE-2020-0646—99.9%
KEV—80Microsoft .NET Framework Remote Code Execution Vulnerability—CVE-2024-27348—99.9%
KEV—80Apache HugeGraph-Server Improper Access Control Vulnerability—CVE-2020-36289—99.9%
——30——CVE-2022-24086—99.9%
KEV—80Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability—CVE-2020-11978—99.9%
KEV—80Apache Airflow Command Injection—CVE-2023-22515—99.9%
KEVR80Atlassian Confluence Data Center and Server Broken Access Control Vulnerability—CVE-2025-68613—99.9%
KEV—80n8n Improper Control of Dynamically-Managed Code Resources Vulnerability—CVE-2021-445299.8 CRI99.9%
KEVR80Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability 27dCVE-2022-303337.5 HIG99.9%
KEVR80RARLAB UnRAR Directory Traversal Vulnerability27dCVE-2022-36804—99.9%
KEV—80Atlassian Bitbucket Server and Data Center Command Injection Vulnerability—CVE-2022-40300—99.9%
——30——CVE-2020-10199—99.9%
KEV—80Sonatype Nexus Repository Remote Code Execution Vulnerability—CVE-2015-1538—99.9%
——30——CVE-2022-24637—99.9%
——30——CVE-2022-39986—99.9%
——30——CVE-2019-16278—99.9%
KEV—80Nostromo nhttpd Directory Traversal Vulnerability—CVE-2025-49113—99.9%
KEV—80RoundCube Webmail Deserialization of Untrusted Data Vulnerability—CVE-2014-0114—99.9%
——30——CVE-2020-06188.8 HIG99.9%
KEVR80Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability16dCVE-2020-11022—99.9%
——30——CVE-2021-21978—99.9%
——30——CVE-2021-25646—99.9%
——30——CVE-2017-3881—99.9%
KEV—80Cisco IOS and IOS XE Remote Code Execution Vulnerability—CVE-2020-7247—99.9%
KEV—80OpenSMTPD Remote Code Execution Vulnerability—CVE-2021-40539—99.9%
KEVR80Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability—CVE-2019-3929—99.9%
KEV—80Crestron Multiple Products Command Injection Vulnerability—CVE-2011-3192—99.9%
——30——CVE-2023-368847.5 HIG99.9%
KEVR80Microsoft Windows Search Remote Code Execution Vulnerability21dCVE-2020-9496—99.9%
——30——CVE-2012-1442—99.9%
——30——CVE-2017-9791—99.9%
KEV—80Apache Struts 1 Improper Input Validation Vulnerability—CVE-2022-3236—99.9%
KEV—80Sophos Firewall Code Injection Vulnerability—