Vulnerabilities exploitable today
367,144in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,256
- High9,258
- Medium5,266
- Low507
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-49113—99.9%
KEV—80RoundCube Webmail Deserialization of Untrusted Data Vulnerability—CVE-2020-10199—99.9%
KEV—80Sonatype Nexus Repository Remote Code Execution Vulnerability—CVE-2021-33045—99.9%
KEV—80Dahua IP Camera Authentication Bypass Vulnerability—CVE-2018-0171—99.9%
KEV—80Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability—CVE-2024-38856—99.9%
KEV—80Apache OFBiz Incorrect Authorization Vulnerability—CVE-2022-22965—99.9%
KEV—80Spring Framework JDK 9+ Remote Code Execution Vulnerability—CVE-2021-445299.8 CRI99.9%
KEVR80Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability 27dCVE-2022-279257.2 HIG99.9%
KEVR80Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability27dCVE-2007-3010—99.9%
KEV—80Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability—CVE-2026-630309.8 CRI99.9%
KEV—80WordPress Core Interpretation Conflict Vulnerability40dCVE-2018-19410—99.9%
KEV—80Paessler PRTG Network Monitor Local File Inclusion Vulnerability—CVE-2023-52163—99.9%
KEV—80Digiever DS-2105 Pro Missing Authorization Vulnerability—CVE-2023-388317.8 HIG99.9%
KEVR80RARLAB WinRAR Code Execution Vulnerability26dCVE-2023-23397—99.9%
KEV—80Microsoft Office Outlook Privilege Escalation Vulnerability—CVE-2022-43769—99.9%
KEV—80Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability—CVE-2020-2555—99.9%
KEV—80Oracle Multiple Products Remote Code Execution Vulnerability—CVE-2021-337667.3 HIG99.9%
KEV—80Microsoft Exchange Server Information Disclosure21dCVE-2020-25078—99.9%
KEV—80D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability—CVE-2020-25213—99.9%
KEV—80WordPress File Manager Plugin Remote Code Execution Vulnerability—CVE-2021-35395—99.9%
KEV—80Realtek AP-Router SDK Buffer Overflow Vulnerability—CVE-2023-24489—99.9%
KEV—80Citrix Content Collaboration ShareFile Improper Access Control Vulnerability—CVE-2019-7256—99.9%
KEV—80Nice Linear eMerge E3-Series OS Command Injection Vulnerability—CVE-2021-404448.8 HIG99.9%
KEVR80Microsoft MSHTML Remote Code Execution Vulnerability21dCVE-2021-41277—99.9%
KEV—80Metabase GeoJSON API Local File Inclusion Vulnerability—CVE-2021-39144—99.9%
KEV—80XStream Remote Code Execution Vulnerability—CVE-2026-202539.8 CRI99.9%
KEV—80Splunk Enterprise Missing Authentication for Critical Function Vulnerability39dCVE-2023-27524—99.9%
KEV—80Apache Superset Insecure Default Initialization of Resource Vulnerability—CVE-2025-34028—99.9%
KEV—80Commvault Command Center Path Traversal Vulnerability—CVE-2021-36380—99.9%
KEV—80Sunhillo SureLine OS Command Injection Vulnerablity—CVE-2019-9082—99.9%
KEV—80ThinkPHP Remote Code Execution Vulnerability—CVE-2023-25717—99.9%
KEV—80Multiple Ruckus Wireless Products CSRF and RCE Vulnerability—CVE-2022-29303—99.9%
KEV—80SolarView Compact Command Injection Vulnerability—CVE-2026-341978.8 HIG99.9%
KEV—80Apache ActiveMQ Improper Input Validation Vulnerability27dCVE-2016-1555—99.9%
KEV—80NETGEAR Multiple WAP Devices Command Injection Vulnerability—CVE-2015-2051—99.9%
KEV—80D-Link DIR-645 Router Remote Code Execution Vulnerability—CVE-2020-1956—99.9%
KEV—80Apache Kylin OS Command Injection Vulnerability—CVE-2023-20887—99.9%
KEV—80Vmware Aria Operations for Networks Command Injection Vulnerability—CVE-2022-26138—99.9%
KEV—80Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability—CVE-2020-14864—99.9%
KEV—80Oracle Business Intelligence Enterprise Edition Path Transversal—CVE-2026-24061—99.9%
KEV—80GNU InetUtils Argument Injection Vulnerability—