Vulnerabilities exploitable today
399,070in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,339
- High15,160
- Medium14,092
- Low1,351
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-27199—100.0%
KEVR80JetBrains TeamCity Relative Path Traversal Vulnerability—CVE-2018-13379—100.0%
KEVR80Fortinet FortiOS SSL VPN Path Traversal Vulnerability—CVE-2023-32315—100.0%
KEV—80Ignite Realtime Openfire Path Traversal Vulnerability—CVE-2012-1823—100.0%
KEV—80PHP-CGI Query String Parameter Vulnerability—CVE-2021-35464—100.0%
KEVR80ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability—CVE-2021-26086—100.0%
KEV—80Atlassian Jira Server and Data Center Path Traversal Vulnerability—CVE-2019-16920—100.0%
KEV—80D-Link Multiple Routers Command Injection Vulnerability—CVE-2024-34102—100.0%
KEV—80Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability—CVE-2023-42793—100.0%
KEVR80JetBrains TeamCity Authentication Bypass Vulnerability—CVE-2022-22954—100.0%
KEVR80VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability—CVE-2015-1635—100.0%
KEV—80Microsoft HTTP.sys Remote Code Execution Vulnerability—CVE-2021-268559.1 CRI100.0%
KEVR80Microsoft Exchange Server Remote Code Execution Vulnerability62dCVE-2021-344739.1 CRI100.0%
KEVR80Microsoft Exchange Server Remote Code Execution Vulnerability71dCVE-2024-218879.1 CRI100.0%
KEVR80Ivanti Connect Secure and Policy Secure Command Injection Vulnerability77dCVE-2024-4577—100.0%
KEVR80PHP-CGI OS Command Injection Vulnerability—CVE-2023-1389—100.0%
KEV—80TP-Link Archer AX-21 Command Injection Vulnerability—CVE-2021-26084—100.0%
KEVR80Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability—CVE-2024-218938.2 HIG100.0%
KEVR80Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability77dCVE-2013-2251—100.0%
KEV—80Apache Struts Improper Input Validation Vulnerability—CVE-2022-29464—100.0%
KEVR80WSO2 Multiple Products Unrestrictive Upload of File Vulnerability—CVE-2017-102717.5 HIG100.0%
KEVR80Oracle Corporation WebLogic Server Remote Code Execution Vulnerability68dCVE-2021-1498—100.0%
KEV—80Cisco HyperFlex HX Data Platform Command Injection Vulnerability—CVE-2023-49669.4 CRI100.0%
KEVR80Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability81dCVE-2024-7593—100.0%
KEV—80Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability—CVE-2025-49704—100.0%
KEVR80Microsoft SharePoint Code Injection Vulnerability—CVE-2021-22005—100.0%
KEVR80VMware vCenter Server File Upload Vulnerability—CVE-2025-32489.8 CRI100.0%
KEVR80Langflow Missing Authentication Vulnerability12dCVE-2025-537709.8 CRI100.0%
KEVR80Microsoft SharePoint Deserialization of Untrusted Data Vulnerability77dCVE-2022-26134—100.0%
KEVR80Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability—CVE-2019-0708—100.0%
KEVR80Microsoft Remote Desktop Services Remote Code Execution Vulnerability—CVE-2019-11510—100.0%
KEVR80Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability—CVE-2024-23897—100.0%
KEVR80Jenkins Command Line Interface (CLI) Path Traversal Vulnerability—CVE-2023-1671—100.0%
KEV—80Sophos Web Appliance Command Injection Vulnerability—CVE-2024-13159—100.0%
KEV—80Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability—CVE-2023-06697.2 HIG100.0%
KEVR80Fortra GoAnywhere MFT Remote Code Execution Vulnerability75dCVE-2014-6271—100.0%
KEV—80GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability—CVE-2019-197819.8 CRI100.0%
KEVR80Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability69dCVE-2017-7921—100.0%
KEV—80Hikvision Multiple Products Improper Authentication Vulnerability—CVE-2021-219859.8 CRI100.0%
KEVR80VMware vCenter Server Improper Input Validation Vulnerability69dCVE-2023-29300—100.0%
KEVR80Adobe ColdFusion Deserialization of Untrusted Data Vulnerability—