Vulnerabilidades exploráveis hoje
4,383na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,768
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,784
- Alta22,600
- Média22,020
- Baixa2,186
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2014-0112—99.9%
——30——CVE-2007-0882—99.9%
——30——CVE-2019-1821—99.9%
——30——CVE-2022-29303—99.9%
KEV—80SolarView Compact Command Injection Vulnerability—CVE-2022-43781—99.9%
——30——CVE-2014-5445—99.9%
——30——CVE-2023-29084—99.9%
——30——CVE-2020-17519—99.9%
KEV—80Apache Flink Improper Access Control Vulnerability—CVE-2022-22536—99.9%
KEV—80SAP Multiple Products HTTP Request Smuggling Vulnerability—CVE-2018-19410—99.9%
KEV—80Paessler PRTG Network Monitor Local File Inclusion Vulnerability—CVE-2021-44832—99.9%
——30——CVE-2023-25280—99.9%
KEV—80D-Link DIR-820 Router OS Command Injection Vulnerability—CVE-2018-1111—99.9%
——30——CVE-2023-6553—99.9%
——30——CVE-2021-404448.8 ALT99.9%
KEVR80Microsoft MSHTML Remote Code Execution Vulnerability87dCVE-2022-2024—99.9%
——30——CVE-2021-45382—99.9%
KEV—80D-Link Multiple Routers Remote Code Execution Vulnerability—CVE-2021-36380—99.9%
KEV—80Sunhillo SureLine OS Command Injection Vulnerablity—CVE-2020-11738—99.9%
KEV—80WordPress Snap Creek Duplicator Plugin File Download Vulnerability—CVE-2021-26295—99.9%
——30——CVE-2016-10108—99.9%
——30——CVE-2022-21661—99.9%
——30——CVE-2015-7450—99.9%
KEV—80IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.—CVE-2021-252996.1 MÉD99.9%
——30Nagios XI version xi-5.7.5 is affected by cross-site scripting (XSS). The vulnerability exists in the file /usr/local/nagiosxi/html/admin/sshterm.php due to improper sanitization of user-controlled input. A maliciously crafted URL, when clicked by an admin user, can be used to steal his/her session cookies or it can be chained with the previous bugs to get one-click remote command execution (RCE) on the Nagios XI server.120dCVE-2016-10045—99.9%
——30——CVE-2026-21643—99.9%
KEV—80Fortinet FortiClient EMS SQL Injection Vulnerability—CVE-2020-14883—99.9%
KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2019-16662—99.9%
——30——CVE-2018-117844.3 MÉD99.9%
——30When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.22dCVE-2022-43769—99.9%
KEV—80Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability—CVE-2023-0315—99.9%
——30——CVE-2019-18818—99.9%
——30——CVE-2018-15745—99.9%
——30——CVE-2025-34028—99.9%
KEV—80Commvault Command Center Path Traversal Vulnerability—CVE-2025-20281—99.9%
KEV—80Cisco Identity Services Engine Injection Vulnerability—CVE-2021-422379.8 CRÍ99.9%
KEVR80Sitecore XP Remote Command Execution Vulnerability120dCVE-2024-92649.9 CRÍ99.9%
——30The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` queries containing user input. These queries are insufficiently sanitized before being passed to `duckdb`, leading to a command injection and local file inclusion vulnerability. Any user with the VIEWER or higher permission is capable of executing this attack. The `duckdb` binary must be present in Grafana's $PATH for this attack to function; by default, this binary is not installed in Grafana distributions.2dCVE-2013-5211—99.9%
——30——CVE-2024-109148.1 ALT99.9%
——30A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgi_user_add of the file /cgi-bin/account_mgr.cgi?cmd=cgi_user_add. The manipulation of the argument name leads to os command injection. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.2dCVE-2012-1453—99.9%
——30——