Vulnerabilidades exploráveis hoje
413,525na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,739
- Alta22,705
- Média21,205
- Baixa2,175
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2002-1831—97.7%
——29——CVE-2000-0621—97.7%
——29——CVE-2013-3846—97.7%
——29——CVE-2002-0386—97.7%
——29——CVE-2017-3106—97.7%
——29——CVE-2011-2131—97.7%
——29——CVE-2002-0863—97.7%
——29——CVE-2022-37134—97.7%
——29——CVE-2019-120867.5 ALT97.7%
——29A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint, the service has the mysql-connector-java jar (8.0.14 or earlier) in the classpath, and an attacker can host a crafted MySQL server reachable by the victim, an attacker can send a crafted JSON message that allows them to read arbitrary local files on the server. This occurs because of missing com.mysql.cj.jdbc.admin.MiniAdmin validation.34dCVE-2016-7234—97.7%
——29——CVE-2025-54574—97.7%
——29——CVE-2006-7206—97.7%
——29——CVE-2006-7066—97.7%
——29——CVE-2014-6308—97.7%
——29——CVE-2021-39341—97.7%
——29——CVE-2008-3843—97.7%
——29——CVE-2019-25224—97.7%
——29——CVE-2017-7924—97.7%
——29——CVE-2001-0137—97.7%
——29——CVE-2010-1717—97.7%
——29——CVE-2019-19719—97.7%
——29——CVE-2022-35742—97.7%
——29——CVE-2014-4671—97.7%
——29——CVE-2015-0019—97.7%
——29——CVE-2015-0923—97.7%
——29——CVE-2023-333817.2 ALT97.7%
——29A command injection vulnerability was found in the ping functionality of the MitraStar GPT-2741GNAC router (firmware version AR_g5.8_110WVN0b7_2). The vulnerability allows an authenticated user to execute arbitrary OS commands by sending specially crafted input to the router via the ping function.126dCVE-2009-3431—97.7%
——29——CVE-2012-0004—97.7%
——29——CVE-2015-3302—97.7%
——29——CVE-2016-00357.8 ALT97.7%
——29Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."27dCVE-2016-3318—97.7%
——29——CVE-2017-8742—97.7%
——29——CVE-2011-1261—97.7%
——29——CVE-2017-5805—97.7%
——29——CVE-2010-1257—97.7%
——29——CVE-2017-85128.8 ALT97.7%
——29A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8509, CVE-2017-8510, CVE-2017-8511, CVE-2017-0260, and CVE-2017-8506.27dCVE-2012-2523—97.7%
——29——CVE-2022-45942—97.7%
——29——CVE-2008-0590—97.7%
——29——CVE-2013-3131—97.7%
——29——