Vulnerabilidades exploráveis hoje
410,117na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,499
- Alta20,885
- Média20,028
- Baixa2,062
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2024-24401—98.8%
——30——CVE-2019-9879—98.8%
——30——CVE-2024-8181—98.8%
——30——CVE-2000-0126—98.8%
——30——CVE-2023-30145—98.8%
——30——CVE-2007-2093—98.8%
——30——CVE-2018-8284—98.8%
——30——CVE-2022-38422—98.8%
——30——CVE-2021-27886—98.8%
——30——CVE-2026-336267.5 ALT98.8%
——30LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions prior to 0.12.3 have a Server-Side Request Forgery (SSRF) vulnerability in LMDeploy's vision-language module. The `load_image()` function in `lmdeploy/vl/utils.py` fetches arbitrary URLs without validating internal/private IP addresses, allowing attackers to access cloud metadata services, internal networks, and sensitive resources. Version 0.12.3 patches the issue.14dCVE-2019-9692—98.8%
——30——CVE-2015-9323—98.8%
——30——CVE-2019-3993—98.8%
——30——CVE-2022-38424—98.8%
——30——CVE-2014-9013—98.8%
——30——CVE-2021-29003—98.8%
——30——CVE-2005-1989—98.8%
——30——CVE-2004-0420—98.8%
——30——CVE-2008-4834—98.8%
——30——CVE-2017-11885—98.8%
——30——CVE-2022-45938—98.8%
——30——CVE-2007-2238—98.8%
——30——CVE-2022-37954—98.8%
——30——CVE-2007-0494—98.8%
——30——CVE-2008-5789—98.8%
——30——CVE-2015-5539—98.8%
——30——CVE-2019-7089—98.8%
——30——CVE-2025-32813—98.8%
——30——CVE-2020-8958—98.8%
——30——CVE-2019-6444—98.8%
——30——CVE-2000-09707.5 SEM98.8%
——30IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remote attackers to hijack the secure web session of the user if that user moves to an insecure session, aka the "Session ID Cookie Marking" vulnerability.47dCVE-2019-9164—98.8%
——30——CVE-2015-7245—98.8%
——30——CVE-2004-1812—98.8%
——30——CVE-2009-3031—98.8%
——30——CVE-2005-1988—98.8%
——30——CVE-2019-123845.9 MÉD98.8%
——30FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorphic deserialization. Depending on the classpath content, remote code execution may be possible.32dCVE-2019-5127—98.8%
——30——CVE-2025-40596—98.8%
——30——CVE-2007-2141—98.8%
——30——