Vulnerabilidades exploráveis hoje
410,305na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,510
- Alta20,947
- Média20,093
- Baixa2,062
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2008-4259—98.4%
——30——CVE-2007-4675—98.4%
——30——CVE-2017-5334—98.4%
——30——CVE-2018-11094—98.4%
——30——CVE-2014-0254—98.4%
——30——CVE-2016-0118—98.4%
——30——CVE-2010-1262—98.4%
——30——CVE-2006-0010—98.4%
——30——CVE-2016-4231—98.4%
——30——CVE-2022-29078—98.4%
——30——CVE-2021-40531—98.4%
——30——CVE-2024-20290—98.4%
——30——CVE-2007-1559—98.4%
——30——CVE-2022-27665—98.4%
——30——CVE-2013-4878—98.4%
——30——CVE-2024-1874—98.4%
——30——CVE-2024-219077.5 ALT98.4%
——30Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the JsonConvert.DeserializeObject method may trigger a StackOverflow exception resulting in denial of service. Depending on the usage of the library, an unauthenticated and remote attacker may be able to cause the denial of service condition.118dCVE-2010-4321—98.4%
——30——CVE-2023-33625—98.4%
——30——CVE-2020-35713—98.4%
——30——CVE-2020-11710—98.4%
——30——CVE-2012-2288—98.4%
——30——CVE-2024-29276—98.4%
——30——CVE-2026-493737.1 ALT98.4%
——30In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings111dCVE-2018-4949—98.4%
——30——CVE-2024-10124—98.4%
——30——CVE-2020-11546—98.4%
——30——CVE-2008-5711—98.4%
——30——CVE-2025-48976—98.4%
——30——CVE-2012-5960—98.4%
——30——CVE-2007-0220—98.4%
——30——CVE-2026-464429.9 CRÍ98.4%
——30Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, POST /api/v1/node-custom-function lacks route-level authorization, allowing any authenticated user or API key to submit arbitrary JavaScript to the Custom JS Function node. When E2B_APIKEY is not configured — the common deployment case — Flowise executes this code inside a NodeVM sandbox. This sandbox can be escaped, allowing an attacker to reach the host process object and execute system commands via child_process. The result is authenticated remote code execution on the Flowise server host. This issue has been patched in version 3.1.2.109dCVE-2004-0844—98.4%
——30——CVE-2021-37589—98.4%
——30——CVE-2017-5259—98.4%
——30——CVE-2015-3622—98.4%
——30——CVE-2024-13181—98.4%
——30——CVE-2006-2218—98.4%
——30——CVE-2022-35620—98.4%
——30——CVE-2008-0803—98.4%
——30——