Vulnerabilidades exploráveis hoje
4,383na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,768
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,739
- Alta22,438
- Média21,862
- Baixa2,178
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2019-12989—99.9%
KEV—80Citrix SD-WAN and NetScaler SQL Injection Vulnerability—CVE-2021-40347.8 ALT99.9%
KEVR80Red Hat Polkit Out-of-Bounds Read and Write Vulnerability83dCVE-2014-6332—99.9%
KEV—80Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability—CVE-2026-630779.8 CRÍ99.9%
KEVR80JetBrains TeamCity Deserialization of Untrusted Data Vulnerability13dCVE-2019-20499—99.9%
——30——CVE-2020-6754—99.9%
——30——CVE-2017-9822—99.9%
KEVR80DotNetNuke (DNN) Remote Code Execution Vulnerability—CVE-2015-5531—99.9%
——30——CVE-2024-47575—99.9%
KEV—80Fortinet FortiManager Missing Authentication Vulnerability—CVE-2018-14933—99.9%
KEV—80NUUO NVRmini Devices OS Command Injection Vulnerability —CVE-2024-5137810.0 CRÍ99.9%
KEVR80CyberPanel Incorrect Default Permissions Vulnerability93dCVE-2024-22024—99.9%
——30——CVE-2020-6287—99.9%
KEV—80SAP NetWeaver Missing Authentication for Critical Function Vulnerability—CVE-2016-2183—99.9%
——30——CVE-2019-11478—99.9%
——30——CVE-2023-24941—99.9%
——30——CVE-2024-214139.8 CRÍ99.9%
KEV—80Microsoft Outlook Improper Input Validation Vulnerability88dCVE-2013-2248—99.9%
——30——CVE-2017-9798—99.9%
——30——CVE-2020-24186—99.9%
——30——CVE-2024-31309—99.9%
——30——CVE-2016-5674—99.9%
——30——CVE-2013-3182—99.9%
——30——CVE-2020-2883—99.9%
KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2015-0235—99.9%
——30——CVE-2020-14644—99.9%
KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—CVE-2010-3972—99.9%
——30——CVE-2024-85179.8 CRÍ99.9%
——30SPIP before 4.3.2, 4.2.16, and
4.1.18 is vulnerable to a command injection issue. A
remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request.8dCVE-2020-14092—99.9%
——30——CVE-2017-18368—99.9%
KEV—80Zyxel P660HN-T1A Routers Command Injection Vulnerability—CVE-2014-0515—99.9%
——30——CVE-2017-14492—99.9%
——30——CVE-2015-7857—99.9%
——30——CVE-2023-7028—99.9%
KEV—80GitLab Community and Enterprise Editions Improper Access Control Vulnerability—CVE-2019-8451—99.9%
——30——CVE-2009-0580—99.9%
——30——CVE-2021-46422—99.9%
——30——CVE-2024-482488.6 ALT99.9%
KEV—80NAKIVO Backup and Replication Absolute Path Traversal Vulnerability43dCVE-2024-555919.8 CRÍ99.9%
KEVR80Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability93dCVE-2025-30406—99.9%
KEV—80Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability—