Vulnerabilidades exploráveis hoje
410,305na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,510
- Alta20,947
- Média20,093
- Baixa2,065
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2005-2852—98.7%
——30——CVE-2008-5448—98.7%
——30——CVE-2005-3757—98.7%
——30——CVE-2015-4455—98.7%
——30——CVE-2008-0080—98.7%
——30——CVE-2006-2376—98.7%
——30——CVE-2006-3450—98.7%
——30——CVE-2012-5223—98.7%
——30——CVE-2016-9131—98.7%
——30——CVE-2024-5723—98.7%
——30——CVE-2011-0966—98.7%
——30——CVE-2024-46906—98.7%
——30——CVE-2006-6561—98.7%
——30——CVE-2003-0434—98.7%
——30——CVE-2013-0136—98.7%
——30——CVE-2020-16267—98.7%
——30——CVE-2001-0846—98.7%
——30——CVE-2021-3317—98.7%
——30——CVE-2006-3451—98.7%
——30——CVE-2003-0715—98.7%
——30——CVE-2019-8050—98.7%
——30——CVE-2011-1892—98.7%
——30——CVE-2022-29548—98.7%
——30——CVE-2015-0097—98.7%
——30——CVE-2020-13954—98.7%
——30——CVE-2021-233365.9 MÉD98.7%
——30The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon (;), they can cause a difference in the interpretation of the request between the proxy (running with default configuration) and the server. This can result in malicious requests being cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and therefore would not include it in a cache key of an unkeyed parameter.26dCVE-2019-14927—98.7%
——30——CVE-2013-1412—98.7%
——30——CVE-2021-411846.5 MÉD98.7%
——30jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `of` option is now treated as a CSS selector. A workaround is to not accept the value of the `of` option from untrusted sources.7dCVE-2005-0416—98.7%
——30——CVE-2018-121227.5 ALT98.7%
——30Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker can cause a Denial of Service (DoS) by sending headers very slowly keeping HTTP or HTTPS connections and associated resources alive for a long period of time.32dCVE-2006-3493—98.7%
——30——CVE-2025-47981—98.7%
——30——CVE-2009-0553—98.7%
——30——CVE-2011-0567—98.7%
——30——CVE-2008-1091—98.7%
——30——CVE-2019-10945—98.7%
——30——CVE-2022-44666—98.7%
——30——CVE-2005-1665—98.7%
——30——CVE-2022-23277—98.7%
——30——