Vulnerabilidades exploráveis hoje
410,305na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,510
- Alta20,947
- Média20,093
- Baixa2,062
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2017-11281—98.4%
——30——CVE-2017-11779—98.4%
——30——CVE-2016-4228—98.4%
——30——CVE-2024-56064—98.4%
——30——CVE-2013-3143—98.4%
——30——CVE-2005-1979—98.4%
——30——CVE-2026-277608.1 ALT98.4%
——30OpenCATS prior to commit 3002a29 contains a PHP code injection vulnerability in the installer AJAX endpoint that allows unauthenticated attackers to execute arbitrary code by injecting PHP statements into the databaseConnectivity action parameter. Attackers can break out of the define() string context in config.php using a single quote and statement separator to inject malicious PHP code that persists and executes on every subsequent page load when the installation wizard remains incomplete.118dCVE-2024-2651—98.4%
——30——CVE-2007-1754—98.4%
——30——CVE-2009-1028—98.4%
——30——CVE-2016-2563—98.4%
——30——CVE-2014-0591—98.4%
——30——CVE-2025-9769—98.4%
——30——CVE-2020-11710—98.4%
——30——CVE-2017-3241—98.4%
——30——CVE-2024-2454—98.4%
——30——CVE-2026-3065—98.4%
——30——CVE-2008-4922—98.4%
——30——CVE-2024-12828—98.4%
——30——CVE-2026-21445—98.4%
——30——CVE-2003-0346—98.4%
——30——CVE-2008-0871—98.4%
——30——CVE-2013-4878—98.4%
——30——CVE-2022-27665—98.4%
——30——CVE-2012-2288—98.4%
——30——CVE-2022-24502—98.4%
——30——CVE-2026-464429.9 CRÍ98.4%
——30Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, POST /api/v1/node-custom-function lacks route-level authorization, allowing any authenticated user or API key to submit arbitrary JavaScript to the Custom JS Function node. When E2B_APIKEY is not configured — the common deployment case — Flowise executes this code inside a NodeVM sandbox. This sandbox can be escaped, allowing an attacker to reach the host process object and execute system commands via child_process. The result is authenticated remote code execution on the Flowise server host. This issue has been patched in version 3.1.2.109dCVE-2016-4227—98.4%
——30——CVE-2016-0118—98.4%
——30——CVE-2005-1184—98.4%
——30——CVE-2010-1262—98.4%
——30——CVE-2018-11094—98.4%
——30——CVE-2008-5711—98.4%
——30——CVE-2021-40531—98.4%
——30——CVE-2018-4949—98.4%
——30——CVE-2010-2730—98.4%
——30——CVE-2008-2286—98.4%
——30——CVE-2022-29078—98.4%
——30——CVE-2023-24033—98.4%
——30——CVE-2009-1612—98.4%
——30——