Vulnerabilities exploitable today
399,114in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,340
- High15,177
- Medium14,103
- Low1,353
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2010-3962—99.9%
KEV—80Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability—CVE-2019-9082—99.9%
KEV—80ThinkPHP Remote Code Execution Vulnerability—CVE-2023-38203—99.9%
KEVR80Adobe ColdFusion Deserialization of Untrusted Data Vulnerability—CVE-2018-6530—99.9%
KEVR80D-Link Multiple Routers OS Command Injection Vulnerability—CVE-2011-3544—99.9%
KEV—80Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability—CVE-2021-337667.3 HIG99.9%
KEV—80Microsoft Exchange Server Information Disclosure71dCVE-2023-24489—99.9%
KEV—80Citrix Content Collaboration ShareFile Improper Access Control Vulnerability—CVE-2023-52163—99.9%
KEV—80Digiever DS-2105 Pro Missing Authorization Vulnerability—CVE-2026-7289810.0 CRI99.9%
KEV—80Metabase SQL Injection Vulnerability69dCVE-2015-2051—99.9%
KEV—80D-Link DIR-645 Router Remote Code Execution Vulnerability—CVE-2018-19410—99.9%
KEV—80Paessler PRTG Network Monitor Local File Inclusion Vulnerability—CVE-2022-26138—99.9%
KEV—80Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability—CVE-2024-121210.0 CRI99.9%
KEV—80Progress Kemp LoadMaster OS Command Injection Vulnerability99dCVE-2022-23134—99.9%
KEV—80Zabbix Frontend Improper Access Control Vulnerability—CVE-2020-6287—99.9%
KEV—80SAP NetWeaver Missing Authentication for Critical Function Vulnerability—CVE-2019-10068—99.9%
KEV—80Kentico Xperience Deserialization of Untrusted Data Vulnerability—CVE-2024-1708—99.9%
KEVR80ConnectWise ScreenConnect Path Traversal Vulnerability—CVE-2017-9822—99.9%
KEVR80DotNetNuke (DNN) Remote Code Execution Vulnerability—CVE-2016-0752—99.9%
KEV—80Ruby on Rails Directory Traversal Vulnerability—CVE-2020-14644—99.9%
KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—CVE-2019-12989—99.9%
KEV—80Citrix SD-WAN and NetScaler SQL Injection Vulnerability—CVE-2009-1151—99.9%
KEV—80phpMyAdmin Remote Code Execution Vulnerability—CVE-2021-268577.8 HIG99.9%
KEVR80Microsoft Exchange Server Remote Code Execution Vulnerability62dCVE-2023-7028—99.9%
KEV—80GitLab Community and Enterprise Editions Improper Access Control Vulnerability—CVE-2020-5847—99.9%
KEV—80Unraid Remote Code Execution Vulnerability—CVE-2021-40347.8 HIG99.9%
KEVR80Red Hat Polkit Out-of-Bounds Read and Write Vulnerability66dCVE-2023-33246—99.9%
KEV—80Apache RocketMQ Command Execution Vulnerability—CVE-2022-413529.8 CRI99.9%
KEVR80Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability40dCVE-2024-94747.2 HIG99.9%
KEVR80Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability77dCVE-2016-30818.1 HIG99.9%
KEV—80Apache Struts Command Injection Vulnerability11dCVE-2024-482488.6 HIG99.9%
KEV—80NAKIVO Backup and Replication Absolute Path Traversal Vulnerability26dCVE-2019-11580—99.9%
KEVR80Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability—CVE-2016-41179.8 CRI99.9%
KEVR80Adobe Flash Player Arbitrary Code Execution Vulnerability40dCVE-2020-2883—99.9%
KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2015-0313—99.9%
KEV—80Adobe Flash Player Use-After-Free Vulnerability—CVE-2018-202507.8 HIG99.9%
KEVR80WinRAR Absolute Path Traversal Vulnerability68dCVE-2025-80888.8 HIG99.9%
KEVR80RARLAB WinRAR Path Traversal Vulnerability70dCVE-2025-54236—99.9%
KEV—80Adobe Commerce and Magento Improper Input Validation Vulnerability—CVE-2023-46747—99.9%
KEVR80F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability—CVE-2026-237609.8 CRI99.9%
KEVR80SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability77d