Vulnerabilidades exploráveis hoje
410,117na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,503
- Alta20,886
- Média20,029
- Baixa2,062
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2012-1493—99.2%
——30——CVE-2024-6781—99.2%
——30——CVE-2007-2708—99.2%
——30——CVE-2012-3811—99.2%
——30——CVE-2009-0323—99.2%
——30——CVE-2006-5780—99.2%
——30——CVE-2001-0779—99.2%
——30——CVE-2023-45878—99.2%
——30——CVE-2021-42130—99.2%
——30——CVE-2018-0986—99.2%
——30——CVE-2023-39473—99.2%
——30——CVE-2021-270847.8 ALT99.2%
——30Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability82dCVE-2014-3789—99.2%
——30——CVE-2026-07409.8 CRÍ99.2%
——30The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'NF_FU_AJAX_Controllers_Uploads::handle_upload' function in all versions up to, and including, 3.3.26. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Note: The vulnerability was partially patched in version 3.3.25 and fully patched in version 3.3.27.14dCVE-2018-3191—99.2%
——30——CVE-2018-9948—99.2%
——30——CVE-2023-29017—99.2%
——30——CVE-2018-7187—99.2%
——30——CVE-2018-18982—99.2%
——30——CVE-2003-0245—99.2%
——30——CVE-2018-8617—99.2%
——30——CVE-2022-25772—99.2%
——30——CVE-2016-0777—99.2%
——30——CVE-2017-11914—99.2%
——30——CVE-2006-5198—99.2%
——30——CVE-2002-2226—99.2%
——30——CVE-2025-4443—99.2%
——30——CVE-2017-16944—99.2%
——30——CVE-2016-5427—99.2%
——30——CVE-2009-1136—99.2%
——30——CVE-2004-1638—99.2%
——30——CVE-2023-349667.5 ALT99.2%
——30An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function sl_unpack_loop() did not validate a field in the network packet that contains the count of elements in an array-like structure. By passing 0 as the count value, the attacked function will run in an endless loop consuming 100% CPU. This flaw allows an attacker to issue a malformed RPC request, triggering an infinite loop, resulting in a denial of service condition.2dCVE-2016-6304—99.2%
——30——CVE-2025-5301—99.2%
——30——CVE-2006-4446—99.2%
——30——CVE-2017-9080—99.2%
——30——CVE-2015-7768—99.2%
——30——CVE-2014-3888—99.2%
——30——CVE-2021-29492—99.2%
——30——CVE-2023-1578—99.2%
——30——