Vulnerabilities exploitable today
399,114in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,340
- High15,177
- Medium14,103
- Low1,353
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-12987—99.9%
KEV—80DrayTek Vigor Routers OS Command Injection Vulnerability—CVE-2020-14864—99.9%
KEV—80Oracle Business Intelligence Enterprise Edition Path Transversal—CVE-2020-1956—99.9%
KEV—80Apache Kylin OS Command Injection Vulnerability—CVE-2023-23397—99.9%
KEV—80Microsoft Office Outlook Privilege Escalation Vulnerability—CVE-2020-17519—99.9%
KEV—80Apache Flink Improper Access Control Vulnerability—CVE-2021-4127710.0 CRI99.9%
KEV—80Metabase GeoJSON API Local File Inclusion Vulnerability12dCVE-2019-9082—99.9%
KEV—80ThinkPHP Remote Code Execution Vulnerability—CVE-2022-43769—99.9%
KEV—80Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability—CVE-2021-35395—99.9%
KEV—80Realtek AP-Router SDK Buffer Overflow Vulnerability—CVE-2022-22947—99.9%
KEV—80VMware Spring Cloud Gateway Code Injection Vulnerability—CVE-2010-3962—99.9%
KEV—80Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability—CVE-2020-25223—99.9%
KEV—80Sophos SG UTM Remote Code Execution Vulnerability—CVE-2026-202539.8 CRI99.9%
KEV—80Splunk Enterprise Missing Authentication for Critical Function Vulnerability89dCVE-2019-1003030—99.9%
KEV—80Jenkins Matrix Project Plugin Remote Code Execution Vulnerability—CVE-2018-12739.8 CRI99.9%
KEVR80VMware Tanzu Spring Data Commons Property Binder Vulnerability55dCVE-2020-6207—99.9%
KEV—80SAP Solution Manager Missing Authentication for Critical Function Vulnerability—CVE-2024-3272—99.9%
KEV—80D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability—CVE-2023-52163—99.9%
KEV—80Digiever DS-2105 Pro Missing Authorization Vulnerability—CVE-2007-3010—99.9%
KEV—80Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability—CVE-2025-5086—99.9%
KEV—80Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability—CVE-2020-11651—99.9%
KEV—80SaltStack Salt Authentication Bypass Vulnerability—CVE-2023-24489—99.9%
KEV—80Citrix Content Collaboration ShareFile Improper Access Control Vulnerability—CVE-2025-20281—99.9%
KEV—80Cisco Identity Services Engine Injection Vulnerability—CVE-2015-1641—99.9%
KEV—80Microsoft Office Memory Corruption Vulnerability—CVE-2017-17562—99.9%
KEV—80Embedthis GoAhead Remote Code Execution Vulnerability—CVE-2019-5544—99.9%
KEVR80VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability—CVE-2015-2051—99.9%
KEV—80D-Link DIR-645 Router Remote Code Execution Vulnerability—CVE-2024-56145—99.9%
KEV—80Craft CMS Code Injection Vulnerability—CVE-2023-38203—99.9%
KEVR80Adobe ColdFusion Deserialization of Untrusted Data Vulnerability—CVE-2024-4358—99.9%
KEV—80Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability—CVE-2022-29303—99.9%
KEV—80SolarView Compact Command Injection Vulnerability—CVE-2025-34028—99.9%
KEV—80Commvault Command Center Path Traversal Vulnerability—CVE-2024-417139.1 CRI99.9%
KEVR80Mitel MiCollab Path Traversal Vulnerability77dCVE-2026-352739.8 CRI99.9%
KEVR80Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability89dCVE-2025-2747—99.9%
KEV—80Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability—CVE-2013-0422—99.9%
KEVR80Oracle JRE Remote Code Execution Vulnerability—CVE-2021-36380—99.9%
KEV—80Sunhillo SureLine OS Command Injection Vulnerablity—CVE-2023-20887—99.9%
KEV—80Vmware Aria Operations for Networks Command Injection Vulnerability—CVE-2020-14883—99.9%
KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2026-7289810.0 CRI99.9%
KEV—80Metabase SQL Injection Vulnerability69d