Vulnerabilidades exploráveis hoje
410,117na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,499
- Alta20,885
- Média20,028
- Baixa2,062
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2015-8256—98.9%
——30——CVE-2025-1338—98.9%
——30——CVE-2024-265949.1 CRÍ98.9%
——30In the Linux kernel, the following vulnerability has been resolved:
ksmbd: validate mech token in session setup
If client send invalid mech token in session setup request, ksmbd
validate and make the error if it is invalid.97dCVE-2016-0957—98.9%
——30——CVE-2023-6567—98.9%
——30——CVE-2023-6623—98.9%
——30——CVE-2022-365348.8 ALT98.9%
——30Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and below was discovered to contain multiple remote code execution (RCE) vulnerabilities via the Job_ExecuteBefore and Job_ExecuteAfter parameters at post_profilesettings.php.124dCVE-2024-47176—98.9%
——30——CVE-2021-28635—98.9%
——30——CVE-2016-0487—98.9%
——30——CVE-2024-38018—98.9%
——30——CVE-2021-28474—98.9%
——30——CVE-2008-0111—98.9%
——30——CVE-2014-0282—98.9%
——30——CVE-2014-7285—98.9%
——30——CVE-2016-53888.1 ALT98.9%
——30Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue. NOTE: the vendor states "A mitigation is planned for future releases of Tomcat, tracked as CVE-2016-5388"; in other words, this is not a CVE ID for a vulnerability.25dCVE-2021-369527.8 ALT98.9%
——30Visual Studio Remote Code Execution Vulnerability91dCVE-2024-33610—98.9%
——30——CVE-2022-22956—98.9%
——30——CVE-2005-1219—98.9%
——30——CVE-2024-21726—98.9%
——30——CVE-2022-47939—98.9%
——30——CVE-2022-24760—98.9%
——30——CVE-2023-1133—98.9%
——30——CVE-2007-2447—98.9%
——30——CVE-2020-6010—98.9%
——30——CVE-2004-0572—98.9%
——30——CVE-2024-3346—98.9%
——30——CVE-2015-5134—98.9%
——30——CVE-2013-4784—98.9%
——30——CVE-2011-3486—98.9%
——30——CVE-2025-2563—98.9%
——30——CVE-2019-56457.5 ALT98.9%
——30By sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP handler, an attacker can register an arbitrary regular expression. When evaluated, this malicious handler can either prevent new HTTP handler sessions from being established, or cause a resource exhaustion on the Metasploit server.18dCVE-2017-11890—98.9%
——30——CVE-2023-36756—98.9%
——30——CVE-2006-3738—98.9%
——30——CVE-2019-20224—98.9%
——30——CVE-2023-44351—98.9%
——30——CVE-2021-3407—98.9%
——30——CVE-2018-8420—98.9%
——30——