Vulnerabilities exploitable today
367,144in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,256
- High9,258
- Medium5,266
- Low507
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2023-52163—99.9%
KEV—80Digiever DS-2105 Pro Missing Authorization Vulnerability—CVE-2022-22536—99.9%
KEV—80SAP Multiple Products HTTP Request Smuggling Vulnerability—CVE-2007-3010—99.9%
KEV—80Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability—CVE-2025-34028—99.9%
KEV—80Commvault Command Center Path Traversal Vulnerability—CVE-2020-14883—99.9%
KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2021-422379.8 CRI99.9%
KEVR80Sitecore XP Remote Command Execution Vulnerability53dCVE-2023-48788—99.9%
KEVR80Fortinet FortiClient EMS SQL Injection Vulnerability—CVE-2026-202539.8 CRI99.9%
KEV—80Splunk Enterprise Missing Authentication for Critical Function Vulnerability39dCVE-2021-45382—99.9%
KEV—80D-Link Multiple Routers Remote Code Execution Vulnerability—CVE-2016-1555—99.9%
KEV—80NETGEAR Multiple WAP Devices Command Injection Vulnerability—CVE-2023-27524—99.9%
KEV—80Apache Superset Insecure Default Initialization of Resource Vulnerability—CVE-2021-404448.8 HIG99.9%
KEVR80Microsoft MSHTML Remote Code Execution Vulnerability21dCVE-2020-11738—99.9%
KEV—80WordPress Snap Creek Duplicator Plugin File Download Vulnerability—CVE-2023-26360—99.9%
KEV—80Adobe ColdFusion Deserialization of Untrusted Data Vulnerability—CVE-2017-8291—99.9%
KEV—80Artifex Ghostscript Type Confusion Vulnerability—CVE-2026-24061—99.9%
KEV—80GNU InetUtils Argument Injection Vulnerability—CVE-2020-6207—99.9%
KEV—80SAP Solution Manager Missing Authentication for Critical Function Vulnerability—CVE-2023-23397—99.9%
KEV—80Microsoft Office Outlook Privilege Escalation Vulnerability—CVE-2024-555919.8 CRI99.9%
KEVR80Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability26dCVE-2025-618847.5 HIG99.9%
KEVR80Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability27dCVE-2021-41277—99.9%
KEV—80Metabase GeoJSON API Local File Inclusion Vulnerability—CVE-2024-12987—99.9%
KEV—80DrayTek Vigor Routers OS Command Injection Vulnerability—CVE-2019-9082—99.9%
KEV—80ThinkPHP Remote Code Execution Vulnerability—CVE-2020-14864—99.9%
KEV—80Oracle Business Intelligence Enterprise Edition Path Transversal—CVE-2020-25213—99.9%
KEV—80WordPress File Manager Plugin Remote Code Execution Vulnerability—CVE-2026-341978.8 HIG99.9%
KEV—80Apache ActiveMQ Improper Input Validation Vulnerability27dCVE-2023-20887—99.9%
KEV—80Vmware Aria Operations for Networks Command Injection Vulnerability—CVE-2018-12739.8 CRI99.9%
KEVR80VMware Tanzu Spring Data Commons Property Binder Vulnerability5dCVE-2024-4358—99.9%
KEV—80Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability—CVE-2013-0422—99.9%
KEVR80Oracle JRE Remote Code Execution Vulnerability—CVE-2026-39987—99.9%
KEV—80Marimo Remote Code Execution Vulnerability—CVE-2021-39144—99.9%
KEV—80XStream Remote Code Execution Vulnerability—CVE-2022-29303—99.9%
KEV—80SolarView Compact Command Injection Vulnerability—CVE-2025-20281—99.9%
KEV—80Cisco Identity Services Engine Injection Vulnerability—CVE-2024-417139.1 CRI99.9%
KEVR80Mitel MiCollab Path Traversal Vulnerability27dCVE-2018-14933—99.9%
KEV—80NUUO NVRmini Devices OS Command Injection Vulnerability —CVE-2018-202507.8 HIG99.9%
KEVR80WinRAR Absolute Path Traversal Vulnerability18dCVE-2015-0313—99.9%
KEV—80Adobe Flash Player Use-After-Free Vulnerability—CVE-2025-54068—99.9%
KEV—80Laravel Livewire Code Injection Vulnerability—CVE-2024-47575—99.9%
KEV—80Fortinet FortiManager Missing Authentication Vulnerability—