Vulnerabilidades exploráveis hoje
4,383na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,768
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,784
- Alta22,605
- Média22,024
- Baixa2,187
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2016-2211—99.0%
——30——CVE-2021-28640—99.0%
——30——CVE-2005-1978—99.0%
——30——CVE-2005-2847—99.0%
——30——CVE-2021-221756.8 MÉD99.0%
KEV—80GitLab Server-Side Request Forgery (SSRF) Vulnerability35dCVE-2006-6761—99.0%
——30——CVE-2014-9118—99.0%
——30——CVE-2014-0644—99.0%
——30——CVE-2015-7007—99.0%
——30——CVE-1999-0502—99.0%
——30——CVE-2020-19677.5 ALT99.0%
——30Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).28dCVE-2006-2502—99.0%
——30——CVE-2018-5006—99.0%
——30——CVE-1999-0191—99.0%
——30——CVE-2023-50231—99.0%
——30——CVE-2025-146119.8 CRÍ99.0%
KEV—80Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability29dCVE-2018-3949—99.0%
——30——CVE-2009-0043—99.0%
——30——CVE-2021-24307—99.0%
——30——CVE-2025-5394—99.0%
——30——CVE-2024-37843—99.0%
——30——CVE-2018-7739—99.0%
——30——CVE-2019-17382—99.0%
——30——CVE-2019-0541—99.0%
KEV—80Microsoft MSHTML Remote Code Execution Vulnerability—CVE-2008-3922—99.0%
——30——CVE-2020-35452—99.0%
——30——CVE-2025-12420—99.0%
——30——CVE-2024-50498—99.0%
——30——CVE-2022-1058—99.0%
——30——CVE-2026-534358.8 ALT99.0%
——30In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins deserialize arbitrary types defined in Jenkins core or plugins from an attacker-controlled `config.xml` submission in a way that allows them to handle HTTP requests afterwards.
This can be used to impersonate any user and send HTTP requests on their behalf, up to and including use of the Script Console to run arbitrary code, or to read arbitrary files from the Jenkins controller.11dCVE-2024-6396—99.0%
——30——CVE-2019-11577—99.0%
——30——CVE-2019-9760—99.0%
——30——CVE-2016-7434—99.0%
——30——CVE-2015-1642—99.0%
KEV—80Microsoft Office Memory Corruption Vulnerability—CVE-2010-0248—99.0%
——30——CVE-2018-0840—99.0%
——30——CVE-2023-362558.8 ALT99.0%
——30An issue in Eramba Limited Eramba Enterprise and Community edition v.3.19.1 allows a remote attacker to execute arbitrary code via the path parameter in the URL.120dCVE-2012-2539—99.0%
KEV—80Microsoft Word Remote Code Execution Vulnerability—CVE-2020-12028—99.0%
——30——