Vulnerabilidades exploráveis hoje
413,525na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,739
- Alta22,705
- Média21,204
- Baixa2,175
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2014-02276.4 SEM97.6%
——29java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to conduct HTTP request smuggling attacks or cause a denial of service (resource consumption) by streaming data with malformed chunked transfer coding.28dCVE-2025-2828—97.6%
——29——CVE-2010-0408—97.6%
——29——CVE-2009-3671—97.6%
——29——CVE-2016-00107.8 ALT97.6%
——29Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Excel for Mac 2011, PowerPoint for Mac 2011, Word for Mac 2011, Excel 2016 for Mac, PowerPoint 2016 for Mac, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."27dCVE-2003-1083—97.6%
——29——CVE-2020-3956—97.6%
——29——CVE-2011-1866—97.6%
——29——CVE-2022-24248—97.6%
——29——CVE-2008-4824—97.6%
——29——CVE-2010-3274—97.6%
——29——CVE-2018-8294—97.6%
——29——CVE-2023-30803—97.6%
——29——CVE-2022-43775—97.6%
——29——CVE-2023-28130—97.6%
——29——CVE-2014-0294—97.6%
——29——CVE-2022-47874—97.6%
——29——CVE-2016-6272—97.6%
——29——CVE-2017-3735—97.6%
——29——CVE-2016-2161—97.6%
——29——CVE-2011-4804—97.6%
——29——CVE-2012-2521—97.6%
——29——CVE-2006-3655—97.6%
——29——CVE-2015-1579—97.6%
——29——CVE-2026-06288.8 ALT97.6%
——29Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. (Chromium security severity: High)16dCVE-2008-4864—97.6%
——29——CVE-2011-4362—97.6%
——29——CVE-2008-4253—97.6%
——29——CVE-2007-4467—97.6%
——29——CVE-2018-15709—97.6%
——29——CVE-2013-3847—97.6%
——29——CVE-2010-3239—97.6%
——29——CVE-2025-30401—97.6%
——29——CVE-2021-26599—97.6%
——29——CVE-2013-3848—97.6%
——29——CVE-2021-445958.8 ALT97.6%
——29Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send manually crafted packets to the ElevationService.exe and execute arbitrary code without any validation with SYSTEM privileges.126dCVE-2005-2842—97.6%
——29——CVE-2006-7065—97.6%
——29——CVE-2020-25111—97.6%
——29——CVE-1999-0153—97.6%
——29——