Vulnerabilidades exploráveis hoje
410,305na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,510
- Alta20,947
- Média20,093
- Baixa2,062
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2001-0010—98.3%
——29——CVE-2024-38148—98.3%
——29——CVE-2019-6714—98.3%
——29——CVE-2022-28054—98.3%
——29——CVE-2013-3482—98.3%
——29——CVE-2020-14425—98.3%
——29——CVE-2023-38874—98.3%
——29——CVE-2024-503799.8 CRÍ98.3%
——29Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write (non-default configuration).
This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97.
The following versions were EOL at the time the CVE was created but are
known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected.
Users are recommended to upgrade to version 11.0.2, 10.1.34 or 9.0.98, which fixes the issue.6dCVE-2001-0663—98.3%
——29——CVE-2009-2506—98.3%
——29——CVE-2006-0004—98.3%
——29——CVE-2015-8048—98.3%
——29——CVE-2019-0667—98.3%
——29——CVE-2022-40881—98.3%
——29——CVE-2022-322054.3 MÉD98.3%
——29A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them. A sufficiently large amount of (big) cookies make subsequent HTTP requests to this, or other servers to which the cookies match, create requests that become larger than the threshold that curl uses internally to avoid sending crazy large requests (1048576 bytes) and instead returns an error.This denial state might remain for as long as the same cookies are kept, match and haven't expired. Due to cookie matching rules, a server on `foo.example.com` can set cookies that also would match for `bar.example.com`, making it it possible for a "sister server" to effectively cause a denial of service for a sibling site on the same second level domain using this method.26dCVE-2006-1192—98.3%
——29——CVE-2006-1191—98.3%
——29——CVE-2007-0215—98.3%
——29——CVE-2021-46378—98.3%
——29——CVE-2013-4826—98.3%
——29——CVE-2022-24463—98.3%
——29——CVE-2008-5178—98.3%
——29——CVE-2020-4463—98.3%
——29——CVE-2015-1896—98.3%
——29——CVE-2005-2089—98.3%
——29——CVE-2016-2569—98.3%
——29——CVE-2015-7855—98.3%
——29——CVE-2022-31680—98.3%
——29——CVE-2007-4466—98.3%
——29——CVE-2017-2986—98.3%
——29——CVE-2009-4225—98.3%
——29——CVE-2009-0558—98.3%
——29——CVE-2023-337818.8 ALT98.3%
——29An issue in D-Link DIR-842V2 v1.0.3 allows attackers to execute arbitrary commands via importing a crafted file.124dCVE-2008-0470—98.3%
——29——CVE-2023-36210—98.3%
——29——CVE-2009-1043—98.3%
——29——CVE-2007-1750—98.3%
——29——CVE-2020-0729—98.3%
——29——CVE-2021-24146—98.3%
——29——CVE-2023-4708—98.3%
——29——