Vulnerabilities exploitable today
399,114in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,340
- High15,177
- Medium14,103
- Low1,353
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-9463—99.9%
KEV—80Palo Alto Networks Expedition OS Command Injection Vulnerability—CVE-2013-2465—99.9%
KEVR80Oracle Java SE Unspecified Vulnerability—CVE-2022-36804—99.9%
KEV—80Atlassian Bitbucket Server and Data Center Command Injection Vulnerability—CVE-2018-0171—99.9%
KEV—80Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability—CVE-2020-16846—99.9%
KEV—80SaltStack Salt Shell Injection Vulnerability—CVE-2023-368847.5 HIG99.9%
KEVR80Microsoft Windows Search Remote Code Execution Vulnerability71dCVE-2008-2992—99.9%
KEVR80Adobe Reader and Acrobat Input Validation Vulnerability—CVE-2025-497066.5 MED99.9%
KEVR80Microsoft SharePoint Improper Authentication Vulnerability77dCVE-2014-6287—99.9%
KEV—80Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability—CVE-2022-42475—99.9%
KEVR80Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability—CVE-2020-1472—99.9%
KEVR80Microsoft Netlogon Privilege Escalation Vulnerability—CVE-2021-21311—99.9%
KEV—80Adminer Server-Side Request Forgery Vulnerability—CVE-2011-0611—99.9%
KEV—80Adobe Flash Player Remote Code Execution Vulnerability—CVE-2017-9791—99.9%
KEV—80Apache Struts 1 Improper Input Validation Vulnerability—CVE-2020-7247—99.9%
KEV—80OpenSMTPD Remote Code Execution Vulnerability—CVE-2026-1281—99.9%
KEV—80Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability—CVE-2020-14750—99.9%
KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—CVE-2023-34048—99.9%
KEV—80VMware vCenter Server Out-of-Bounds Write Vulnerability—CVE-2023-22515—99.9%
KEVR80Atlassian Confluence Data Center and Server Broken Access Control Vulnerability—CVE-2024-20767—99.9%
KEV—80Adobe ColdFusion Improper Access Control Vulnerability—CVE-2023-472469.8 CRI99.9%
KEVR80SysAid Server Path Traversal Vulnerability81dCVE-2012-05079.8 CRI99.9%
KEVR80Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability67dCVE-2021-4127710.0 CRI99.9%
KEV—80Metabase GeoJSON API Local File Inclusion Vulnerability12dCVE-2024-577277.5 HIG99.9%
KEVR80SimpleHelp Path Traversal Vulnerability77dCVE-2019-5544—99.9%
KEVR80VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability—CVE-2019-20500—99.9%
KEV—80D-Link DWL-2600AP Access Point Command Injection Vulnerability—CVE-2018-6530—99.9%
KEVR80D-Link Multiple Routers OS Command Injection Vulnerability—CVE-2007-3010—99.9%
KEV—80Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability—CVE-2020-25078—99.9%
KEV—80D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability—CVE-2020-14883—99.9%
KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2015-7450—99.9%
KEV—80IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.—CVE-2021-422379.8 CRI99.9%
KEVR80Sitecore XP Remote Command Execution Vulnerability103dCVE-2021-36380—99.9%
KEV—80Sunhillo SureLine OS Command Injection Vulnerablity—CVE-2024-12987—99.9%
KEV—80DrayTek Vigor Routers OS Command Injection Vulnerability—CVE-2020-17519—99.9%
KEV—80Apache Flink Improper Access Control Vulnerability—CVE-2009-0927—99.9%
KEV—80Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability—CVE-2023-25280—99.9%
KEV—80D-Link DIR-820 Router OS Command Injection Vulnerability—CVE-2021-337667.3 HIG99.9%
KEV—80Microsoft Exchange Server Information Disclosure71dCVE-2021-404448.8 HIG99.9%
KEVR80Microsoft MSHTML Remote Code Execution Vulnerability71dCVE-2020-2555—99.9%
KEV—80Oracle Multiple Products Remote Code Execution Vulnerability—