Vulnerabilidades exploráveis hoje
410,117na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,503
- Alta20,886
- Média20,029
- Baixa2,062
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2011-4722—99.1%
——30——CVE-2023-3224—99.1%
——30——CVE-2018-16855—99.1%
——30——CVE-2007-0217—99.1%
——30——CVE-2025-43566—99.1%
——30——CVE-2014-2850—99.1%
——30——CVE-2020-15643—99.1%
——30——CVE-2006-6425—99.1%
——30——CVE-2015-76017.8 SEM99.1%
——30Directory traversal vulnerability in PCMan's FTP Server 2.0.7 allows remote attackers to read arbitrary files via a ..// (dot dot double slash) in a RETR command.82dCVE-2014-7187—99.1%
——30——CVE-2021-32819—99.1%
——30——CVE-2019-61115.9 MÉD99.1%
——30An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).26dCVE-2021-42840—99.1%
——30——CVE-2011-4404—99.1%
——30——CVE-2006-0848—99.1%
——30——CVE-2006-1186—99.1%
——30——CVE-2017-7668—99.1%
——30——CVE-2023-28425—99.1%
——30——CVE-2023-50269—99.1%
——30——CVE-2021-40346—99.1%
——30——CVE-2017-8618—99.1%
——30——CVE-2019-12347—99.1%
——30——CVE-2012-4347—99.1%
——30——CVE-2008-5619—99.1%
——30——CVE-2000-0574—99.1%
——30——CVE-2024-27096—99.1%
——30——CVE-2013-5704—99.1%
——30——CVE-2021-44152—99.1%
——30——CVE-2006-1188—99.1%
——30——CVE-2016-7194—99.1%
——30——CVE-2011-3414—99.1%
——30——CVE-2026-26999.8 CRÍ99.1%
——30Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.14dCVE-2022-32174—99.1%
——30——CVE-2021-301195.4 MÉD99.1%
——30Authenticated reflective XSS in HelpDeskTab/rcResults.asp The parameter result of /HelpDeskTab/rcResults.asp is insecurely returned in the requested web page and can be used to perform a Cross Site Scripting attack Example request: `https://x.x.x.x/HelpDeskTab/rcResults.asp?result=<script>alert(document.cookie)</script>` The same is true for the parameter FileName of /done.asp Eaxmple request: `https://x.x.x.x/done.asp?FileName=";</script><script>alert(1);a="&PathData=&originalName=shell.aspx&FileSize=4388&TimeElapsed=00:00:00.078`87dCVE-2023-39456—99.1%
——30——CVE-2022-31626—99.1%
——30——CVE-2016-6515—99.1%
——30——CVE-2018-7123—99.1%
——30——CVE-2023-26361—99.1%
——30——CVE-2000-0408—99.1%
——30——