Vulnerabilities exploitable today
4,330in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,403
- High15,277
- Medium14,292
- Low1,366
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2015-8399—99.1%
——30——CVE-2007-1373—99.1%
——30——CVE-2022-36096—99.1%
——30——CVE-2023-29919—99.1%
——30——CVE-2012-3259—99.1%
——30——CVE-2026-194789.4 CRI99.1%
——30GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQL directive.49dCVE-2023-37928—99.1%
——30——CVE-2010-2333—99.1%
——30——CVE-2021-32706—99.1%
——30——CVE-2021-3577—99.1%
——30——CVE-2022-46889—99.1%
——30——CVE-2021-24499—99.1%
——30——CVE-2011-0257—99.1%
——30——CVE-2007-4744—99.1%
——30——CVE-2018-17207—99.1%
——30——CVE-2005-0595—99.1%
——30——CVE-2012-1434—99.1%
——30——CVE-2020-8655—99.1%
KEV—80EyesOfNetwork Improper Privilege Management Vulnerability—CVE-2024-23638—99.1%
——30——CVE-2022-47938—99.1%
——30——CVE-2025-583608.2 HIG99.1%
KEV—80OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability2dCVE-2022-35869—99.1%
——30——CVE-2013-0810—99.1%
——30——CVE-2010-3072—99.1%
——30——CVE-2014-100002—99.1%
——30——CVE-2014-4148—99.1%
KEV—80Microsoft Windows Remote Code Execution Vulnerability—CVE-2013-3763—99.1%
——30——CVE-2019-8442—99.1%
——30——CVE-2024-213387.8 HIG99.1%
KEVR80Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability71dCVE-2019-12265—99.1%
——30——CVE-2020-15419—99.1%
——30——CVE-2005-0053—99.1%
——30——CVE-2007-6019—99.1%
——30——CVE-2022-36021—99.1%
——30——CVE-2021-46417—99.1%
——30——CVE-2011-2595—99.1%
——30——CVE-2024-20931—99.1%
——30——CVE-2008-5159—99.1%
——30——CVE-2024-9380—99.1%
KEV—80Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability—CVE-2017-11841—99.1%
——30——