Vulnerabilities exploitable today
4,330in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,340
- High15,177
- Medium14,103
- Low1,353
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2023-368847.5 HIG99.9%
KEVR80Microsoft Windows Search Remote Code Execution Vulnerability71dCVE-2020-9496—99.9%
——30——CVE-2012-1442—99.9%
——30——CVE-2017-9791—99.9%
KEV—80Apache Struts 1 Improper Input Validation Vulnerability—CVE-2022-3236—99.9%
KEV—80Sophos Firewall Code Injection Vulnerability—CVE-2023-472469.8 CRI99.9%
KEVR80SysAid Server Path Traversal Vulnerability81dCVE-2024-29895—99.9%
——30——CVE-2013-2465—99.9%
KEVR80Oracle Java SE Unspecified Vulnerability—CVE-2012-3152—99.9%
KEV—80Oracle Fusion Middleware Unspecified Vulnerability—CVE-2025-32433—99.9%
KEV—80Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability—CVE-2020-7209—99.9%
——30——CVE-2008-4250—99.9%
KEV—80Microsoft Windows Buffer Overflow Vulnerability—CVE-2019-11477—99.9%
——30——CVE-2018-19276—99.9%
——30——CVE-2023-28341—99.9%
——30——CVE-2026-1281—99.9%
KEV—80Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability—CVE-2015-02044.3 NO 99.9%
——30The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the "FREAK" issue. NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.6dCVE-2023-38646—99.9%
——30——CVE-2022-279257.2 HIG99.9%
KEVR80Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability19dCVE-2026-1340—99.9%
KEV—80Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability—CVE-2018-15473—99.9%
——30——CVE-2024-29059—99.9%
KEV—80Microsoft .NET Framework Information Disclosure Vulnerability—CVE-2015-5119—99.9%
KEV—80Adobe Flash Player Use-After-Free Vulnerability—CVE-2024-8963—99.9%
KEV—80Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability—CVE-2024-506239.8 CRI99.9%
KEVR80Cleo Multiple Products Unrestricted File Upload Vulnerability12dCVE-2019-17558—99.9%
KEV—80Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability—CVE-2024-9463—99.9%
KEV—80Palo Alto Networks Expedition OS Command Injection Vulnerability—CVE-2019-11539—99.9%
KEVR80Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability—CVE-2012-46819.8 CRI99.9%
KEVR80Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability75dCVE-2026-419409.8 CRI99.9%
KEVR80WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability20dCVE-2024-50603—99.9%
KEV—80Aviatrix Controllers OS Command Injection Vulnerability—CVE-2016-3088—99.9%
KEV—80Apache ActiveMQ Improper Input Validation Vulnerability—CVE-2024-20767—99.9%
KEV—80Adobe ColdFusion Improper Access Control Vulnerability—CVE-2019-5418—99.9%
KEV—80Rails Ruby on Rails Path Traversal Vulnerability—CVE-2003-0352—99.9%
——30——CVE-2008-2992—99.9%
KEVR80Adobe Reader and Acrobat Input Validation Vulnerability—CVE-2021-21311—99.9%
KEV—80Adminer Server-Side Request Forgery Vulnerability—CVE-2025-01089.1 CRI99.9%
KEV—80Palo Alto Networks PAN-OS Authentication Bypass Vulnerability26dCVE-2019-5736—99.9%
——30——CVE-2009-1122—99.9%
——30——