Vulnerabilidades exploráveis hoje
4,383na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,768
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,754
- Alta22,480
- Média21,910
- Baixa2,178
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2020-28188—99.9%
——30——CVE-2026-237609.8 CRÍ99.9%
KEVR80SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability94dCVE-1999-0016—99.9%
——30——CVE-2022-20687.3 ALT99.9%
——30In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).2dCVE-2017-6090—99.9%
——30——CVE-2024-45507—99.9%
——30——CVE-2020-12259—99.9%
——30——CVE-2010-0840—99.9%
KEV—80Oracle JRE Unspecified Vulnerability—CVE-2025-54068—99.9%
KEV—80Laravel Livewire Code Injection Vulnerability—CVE-2021-35587—99.9%
KEV—80Oracle Fusion Middleware Unspecified Vulnerability—CVE-2020-17530—99.9%
KEV—80Apache Struts Remote Code Execution Vulnerability—CVE-2000-0573—99.9%
——30——CVE-2011-2523—99.9%
——30——CVE-2026-33017—99.9%
KEV—80Langflow Code Injection Vulnerability—CVE-2025-34037—99.9%
——30An OS command injection vulnerability exists in various models of E-Series Linksys routers via the /tmUnblock.cgi and /hndUnblock.cgi endpoints over HTTP on port 8080. The CGI scripts improperly process user-supplied input passed to the ttcp_ip parameter without sanitization, allowing unauthenticated attackers to inject shell commands. This vulnerability was reported to be exploited in the wild by the "TheMoon" worm in 2014 to deploy a MIPS ELF payload, enabling arbitrary code execution on the router. Additionally, this vulnerability may affect other Linksys products to include, but not limited to, WAG/WAP/WES/WET/WRT-series router models and Wireless-N access points and routers. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-06 UTC.107dCVE-2018-19518—99.9%
——30——CVE-2019-20085—99.9%
KEV—80TVT NVMS-1000 Directory Traversal Vulnerability—CVE-2022-24112—99.9%
KEV—80Apache APISIX Authentication Bypass Vulnerability—CVE-2023-2442—99.9%
——30——CVE-2018-202507.8 ALT99.9%
KEVR80WinRAR Absolute Path Traversal Vulnerability85dCVE-2023-51467—99.9%
——30——CVE-2017-3506—99.9%
KEV—80Oracle WebLogic Server OS Command Injection Vulnerability—CVE-2014-6321—99.9%
——30——CVE-2018-14847—99.9%
KEV—80MikroTik Router OS Directory Traversal Vulnerability—CVE-2022-36446—99.9%
——30——CVE-2020-12256—99.9%
——30——CVE-2019-1652—99.9%
KEV—80Cisco Small Business Routers Improper Input Validation Vulnerability—CVE-2021-20124—99.9%
KEV—80Draytek VigorConnect Path Traversal Vulnerability —CVE-2023-0297—99.9%
——30——CVE-2025-618847.5 ALT99.9%
KEVR80Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability29dCVE-2022-2733—99.9%
——30——CVE-2020-5847—99.9%
KEV—80Unraid Remote Code Execution Vulnerability—CVE-2023-25194—99.9%
——30——CVE-2020-1147—99.9%
KEV—80Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability—CVE-2026-879028.1 ALT99.9%
KEV—80WordPress Core Remote File Inclusion Vulnerability39dCVE-2021-33544—99.9%
——30——CVE-2021-268577.8 ALT99.9%
KEVR80Microsoft Exchange Server Remote Code Execution Vulnerability79dCVE-2025-124809.1 CRÍ99.9%
KEV—80Gladinet Triofox Improper Access Control Vulnerability18dCVE-2019-1663—99.9%
——30——CVE-2022-23131—99.9%
KEV—80Zabbix Frontend Authentication Bypass Vulnerability—