Vulnerabilities exploitable today
4,338in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,256
- High9,258
- Medium5,266
- Low507
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2016-1555—99.9%
KEV—80NETGEAR Multiple WAP Devices Command Injection Vulnerability—CVE-2018-11409—99.9%
——30——CVE-2017-15944—99.9%
KEV—80Palo Alto Networks PAN-OS Remote Code Execution Vulnerability—CVE-2015-8562—99.9%
——30——CVE-2023-20887—99.9%
KEV—80Vmware Aria Operations for Networks Command Injection Vulnerability—CVE-2020-6207—99.9%
KEV—80SAP Solution Manager Missing Authentication for Critical Function Vulnerability—CVE-2024-555919.8 CRI99.9%
KEVR80Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability26dCVE-2022-22947—99.9%
KEV—80VMware Spring Cloud Gateway Code Injection Vulnerability—CVE-2020-15920—99.9%
——30——CVE-2012-3153—99.9%
——30——CVE-2022-26138—99.9%
KEV—80Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability—CVE-2023-29084—99.9%
——30——CVE-2020-35847—99.9%
——30——CVE-2021-337667.3 HIG99.9%
KEV—80Microsoft Exchange Server Information Disclosure21dCVE-2021-39144—99.9%
KEV—80XStream Remote Code Execution Vulnerability—CVE-2009-1535—99.9%
——30——CVE-2012-05079.8 CRI99.9%
KEVR80Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability17dCVE-2024-417139.1 CRI99.9%
KEVR80Mitel MiCollab Path Traversal Vulnerability27dCVE-2024-12987—99.9%
KEV—80DrayTek Vigor Routers OS Command Injection Vulnerability—CVE-2022-43781—99.9%
——30——CVE-2016-10108—99.9%
——30——CVE-2023-25717—99.9%
KEV—80Multiple Ruckus Wireless Products CSRF and RCE Vulnerability—CVE-2019-1821—99.9%
——30——CVE-2024-3272—99.9%
KEV—80D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability—CVE-2014-5445—99.9%
——30——CVE-2022-29303—99.9%
KEV—80SolarView Compact Command Injection Vulnerability—CVE-2018-1111—99.9%
——30——CVE-2021-35395—99.9%
KEV—80Realtek AP-Router SDK Buffer Overflow Vulnerability—CVE-2022-22536—99.9%
KEV—80SAP Multiple Products HTTP Request Smuggling Vulnerability—CVE-2018-19410—99.9%
KEV—80Paessler PRTG Network Monitor Local File Inclusion Vulnerability—CVE-2020-14883—99.9%
KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2014-0112—99.9%
——30——CVE-2021-44832—99.9%
——30——CVE-2021-422379.8 CRI99.9%
KEVR80Sitecore XP Remote Command Execution Vulnerability53dCVE-2020-25078—99.9%
KEV—80D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability—CVE-2023-388317.8 HIG99.9%
KEVR80RARLAB WinRAR Code Execution Vulnerability26dCVE-2026-24061—99.9%
KEV—80GNU InetUtils Argument Injection Vulnerability—CVE-2023-25280—99.9%
KEV—80D-Link DIR-820 Router OS Command Injection Vulnerability—CVE-2020-17519—99.9%
KEV—80Apache Flink Improper Access Control Vulnerability—CVE-2007-0882—99.9%
——30——