Vulnerabilidades exploráveis hoje
413,215na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,602
- Alta22,090
- Média20,599
- Baixa2,123
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2024-27497—98.0%
——29——CVE-2014-0098—98.0%
——29——CVE-2018-17057—98.0%
——29——CVE-2008-1776—98.0%
——29——CVE-2011-40445.8 SEM98.0%
——29An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to modify files via calls to unknown methods.125dCVE-2003-0531—98.0%
——29——CVE-2018-4072—98.0%
——29——CVE-2025-342278.8 ALT98.0%
——29Nagios XI < 2026R1 is vulnerable to an authenticated command injection vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, and Postgres Query wizards. It is possible to inject shell characters into arguments provided to the service and execute arbitrary system commands on the underlying host as the `nagios` user.31dCVE-2010-4598—98.0%
——29——CVE-2016-0060—98.0%
——29——CVE-2013-0030—98.0%
——29——CVE-2025-5438—98.0%
——29——CVE-2022-24627—98.0%
——29——CVE-2018-3760—98.0%
——29——CVE-2022-32209—98.0%
——29——CVE-2018-0893—98.0%
——29——CVE-2011-0980—98.0%
——29——CVE-2024-50326—98.0%
——29——CVE-2020-9375—98.0%
——29——CVE-2004-0197—98.0%
——29——CVE-2013-4782—98.0%
——29——CVE-2016-2179—98.0%
——29——CVE-2011-4518—98.0%
——29——CVE-2018-8733—98.0%
——29——CVE-2022-2863—98.0%
——29——CVE-2022-23111—98.0%
——29——CVE-2022-0572—98.0%
——29——CVE-2020-119967.5 ALT98.0%
——29A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35 and 8.5.0 to 8.5.55 could trigger high CPU usage for several seconds. If a sufficient number of such requests were made on concurrent HTTP/2 connections, the server could become unresponsive.34dCVE-2008-1544—98.0%
——29——CVE-2002-0859—98.0%
——29——CVE-2004-0117—98.0%
——29——CVE-2013-6225—98.0%
——29——CVE-2023-5003—98.0%
——29——CVE-2004-0202—98.0%
——29——CVE-2020-3657—98.0%
——29——CVE-2010-0265—98.0%
——29——CVE-2019-1150—98.0%
——29——CVE-2011-3412—98.0%
——29——CVE-2025-12101—98.0%
——29Cross-Site Scripting (XSS) in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server24dCVE-2025-343929.8 CRÍ98.0%
——29Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not verify the URL defined in an attacker-controlled WSDL that is later loaded by the application. This can lead to arbitrary file write and remote code execution via webshell upload.28d