Vulnerabilities exploitable today
4,338in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,256
- High9,258
- Medium5,266
- Low507
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2023-472469.8 CRI99.9%
KEVR80SysAid Server Path Traversal Vulnerability31dCVE-2025-497066.5 MED99.9%
KEVR80Microsoft SharePoint Improper Authentication Vulnerability27dCVE-2012-3152—99.9%
KEV—80Oracle Fusion Middleware Unspecified Vulnerability—CVE-2020-7209—99.9%
——30——CVE-2008-4250—99.9%
KEV—80Microsoft Windows Buffer Overflow Vulnerability—CVE-2019-11477—99.9%
——30——CVE-2018-19276—99.9%
——30——CVE-2013-2465—99.9%
KEVR80Oracle Java SE Unspecified Vulnerability—CVE-2023-28341—99.9%
——30——CVE-2015-0204—99.9%
——30——CVE-2023-38646—99.9%
——30——CVE-2022-279257.2 HIG99.9%
KEVR80Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability27dCVE-2018-15473—99.9%
——30——CVE-2024-29059—99.9%
KEV—80Microsoft .NET Framework Information Disclosure Vulnerability—CVE-2026-344867.5 HIG99.9%
KEV—80Apache Tomcat Missing Encryption of Sensitive Data Vulnerability21dCVE-2024-506239.8 CRI99.9%
KEVR80Cleo Multiple Products Unrestricted File Upload Vulnerability31dCVE-2024-8963—99.9%
KEV—80Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability—CVE-2025-32433—99.9%
KEV—80Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability—CVE-2019-17558—99.9%
KEV—80Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability—CVE-2024-9463—99.9%
KEV—80Palo Alto Networks Expedition OS Command Injection Vulnerability—CVE-2024-50603—99.9%
KEV—80Aviatrix Controllers OS Command Injection Vulnerability—CVE-2019-11539—99.9%
KEVR80Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability—CVE-2012-46819.8 CRI99.9%
KEVR80Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability25dCVE-2026-41940—99.9%
KEVR80WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability—CVE-2022-24816—99.9%
KEV—80OSGeo GeoServer JAI-EXT Code Injection Vulnerability—CVE-2016-3088—99.9%
KEV—80Apache ActiveMQ Improper Input Validation Vulnerability—CVE-2024-20767—99.9%
KEV—80Adobe ColdFusion Improper Access Control Vulnerability—CVE-2019-5418—99.9%
KEV—80Rails Ruby on Rails Path Traversal Vulnerability—CVE-2003-0352—99.9%
——30——CVE-2008-2992—99.9%
KEVR80Adobe Reader and Acrobat Input Validation Vulnerability—CVE-2025-0108—99.9%
KEV—80Palo Alto Networks PAN-OS Authentication Bypass Vulnerability—CVE-2024-29895—99.9%
——30——CVE-2019-5736—99.9%
——30——CVE-2009-1122—99.9%
——30——CVE-2023-48788—99.9%
KEVR80Fortinet FortiClient EMS SQL Injection Vulnerability—CVE-2019-1003000—99.9%
——30——CVE-2018-12613—99.9%
——30——CVE-2022-21587—99.9%
KEVR80Oracle E-Business Suite Unspecified Vulnerability—CVE-2012-1457—99.9%
——30——CVE-2018-1000861—99.9%
KEV—80Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability—