Vulnerabilidades exploráveis hoje
413,525na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,739
- Alta22,705
- Média21,207
- Baixa2,176
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2024-4884—97.9%
——29——CVE-2023-2924—97.9%
——29——CVE-2020-10030—97.9%
——29——CVE-2018-17686—97.9%
——29——CVE-2008-5793—97.9%
——29——CVE-2020-175277.5 ALT97.9%
——29While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent stream. While this would most likely lead to an error and the closure of the HTTP/2 connection, it is possible that information could leak between requests.34dCVE-2018-4890—97.9%
——29——CVE-2004-0748—97.9%
——29——CVE-2018-8158—97.9%
——29——CVE-2008-3892—97.9%
——29——CVE-2006-0032—97.9%
——29——CVE-2024-29671—97.9%
——29——CVE-2008-2248—97.9%
——29——CVE-1999-0448—97.9%
——29——CVE-2023-28400—97.9%
——29——CVE-2012-0183—97.9%
——29——CVE-2011-1910—97.9%
——29——CVE-2021-27114—97.9%
——29——CVE-2008-2247—97.9%
——29——CVE-2016-0798—97.9%
——29——CVE-2024-8132—97.9%
——29——CVE-2018-0804—97.9%
——29——CVE-2018-0806—97.9%
——29——CVE-2014-1800—97.9%
——29——CVE-2024-45309—97.9%
——29——CVE-2015-64209.8 CRÍ97.9%
——29Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Service Provider; Unified Computing; Voice and Unified Communications Devices; Video, Streaming, TelePresence, and Transcoding Devices; Wireless; and Cisco Hosted Services products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.35dCVE-2022-4855—97.9%
——29——CVE-2022-21881—97.9%
——29——CVE-2002-200017.5 ALT97.9%
——29The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE.50dCVE-2021-34805—97.9%
——29——CVE-2012-0185—97.9%
——29——CVE-2006-3605—97.9%
——29——CVE-2017-0292—97.9%
——29——CVE-2014-6369—97.9%
——29——CVE-2018-8148—97.9%
——29——CVE-2017-2932—97.9%
——29——CVE-2018-4982—97.9%
——29——CVE-2024-13059—97.9%
——29——CVE-2011-2004—97.9%
——29——CVE-2018-0807—97.9%
——29——