Vulnerabilidades exploráveis hoje
413,525na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,739
- Alta22,705
- Média21,204
- Baixa2,175
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2024-38816—97.6%
——29——CVE-2010-0264—97.6%
——29——CVE-2026-23550—97.6%
——29——CVE-2000-0662—97.6%
——29——CVE-2023-464747.2 ALT97.6%
——29File Upload vulnerability PMB v.7.4.8 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted PHP file uploaded to the start_import.php file.126dCVE-2007-5006—97.6%
——29——CVE-2019-19908—97.6%
——29——CVE-2019-9955—97.6%
——29——CVE-2020-1436—97.6%
——29——CVE-2009-1868—97.6%
——29——CVE-2011-0658—97.6%
——29——CVE-2021-22823—97.6%
——29——CVE-2022-41657—97.6%
——29——CVE-2024-7959—97.6%
——29Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.27dCVE-2016-3223—97.6%
——29——CVE-2003-0540—97.6%
——29——CVE-2024-36295—97.6%
——29——CVE-2000-0211—97.6%
——29——CVE-2010-0032—97.6%
——29——CVE-2018-8248—97.6%
——29——CVE-2025-49712—97.6%
——29——CVE-2021-21234—97.6%
——29——CVE-2002-0843—97.6%
——29——CVE-2016-3269—97.6%
——29——CVE-2014-0297—97.6%
——29——CVE-2017-15275—97.6%
——29——CVE-2018-8626—97.6%
——29——CVE-2021-43319—97.6%
——29——CVE-2016-9498—97.6%
——29——CVE-2014-5383—97.6%
——29——CVE-2014-4126—97.6%
——29——CVE-2015-6071—97.6%
——29——CVE-2022-26635—97.6%
——29——CVE-2010-2571—97.6%
——29——CVE-2026-454349.8 CRÍ97.6%
——29Improper Authentication vulnerability in Apache OFBiz via Password-Change Logic Flaw Leading to Remote Code Execution
This issue affects Apache OFBiz: before 24.09.06.
Users are recommended to upgrade to version 24.09.06, which fixes the issue.28dCVE-2013-0657—97.6%
——29——CVE-2013-0084—97.6%
——29——CVE-2025-102427.2 ALT97.6%
——29OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attacker with admin privileges to achieve remote code execution.35dCVE-2018-2879—97.6%
——29——CVE-2010-1880—97.6%
——29——