Vulnerabilidades exploráveis hoje
413,525na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,739
- Alta22,705
- Média21,204
- Baixa2,175
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2022-29592—97.5%
——29——CVE-2024-72646.5 MÉD97.5%
——29libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an
ASN.1 Generalized Time field. If given an syntactically incorrect field, the
parser might end up using -1 for the length of the *time fraction*, leading to
a `strlen()` getting performed on a pointer to a heap buffer area that is not
(purposely) null terminated.
This flaw most likely leads to a crash, but can also lead to heap contents
getting returned to the application when
[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.28dCVE-2016-0047—97.5%
——29——CVE-2006-2385—97.5%
——29——CVE-2025-536939.8 CRÍ97.5%
——29Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Cache Poisoning.This issue affects Sitecore Experience Manager (XM): from 9.0 through 9.3, from 10.0 through 10.4; Experience Platform (XP): from 9.0 through 9.3, from 10.0 through 10.4.24dCVE-2021-3064—97.5%
——29——CVE-2016-0136—97.5%
——29——CVE-2012-1529—97.5%
——29——CVE-2024-29021—97.5%
——29——CVE-2015-4664—97.5%
——29——CVE-2017-3167—97.5%
——29——CVE-2026-363569.1 CRÍ97.5%
——29The GoAhead web server on MeiG Smart FORGE_SLT711 devices (firmware MDM9607.LE.1.0-00110-STD.PROD-1) allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint.129dCVE-2008-6825—97.5%
——29——CVE-2025-140944.7 MÉD97.5%
——29A flaw has been found in Edimax BR-6478AC V3 1.0.15. The affected element is the function sub_44CCE4 of the file /boafrm/formSysCmd. This manipulation of the argument sysCmd causes os command injection. The attack may be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.25dCVE-2010-1623—97.5%
——29——CVE-2021-41355—97.5%
——29——CVE-2019-8600—97.5%
——29——CVE-2016-3363—97.5%
——29——CVE-2022-0591—97.5%
——29——CVE-2004-0791—97.5%
——29——CVE-2021-233377.2 ALT97.5%
——29Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.34dCVE-2023-31689—97.5%
——29——CVE-2017-8725—97.5%
——29——CVE-2014-2497—97.5%
——29——CVE-2016-9361—97.5%
——29——CVE-2011-1271—97.5%
——29——CVE-2005-3559—97.5%
——29——CVE-2002-1287—97.5%
——29——CVE-2018-10008029.8 CRÍ97.5%
——29Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in shutil module (make_archive function) that can result in Denial of service, Information gain via injection of arbitrary files on the system or entire drive. This attack appear to be exploitable via Passage of unfiltered user input to the function. This vulnerability appears to have been fixed in after commit add531a1e55b0a739b0f42582f1c9747e5649ace.34dCVE-2007-2291—97.5%
——29——CVE-2024-37148—97.5%
——29——CVE-2022-45711—97.5%
——29——CVE-2010-1881—97.5%
——29——CVE-2010-1879—97.5%
——29——CVE-2014-1755—97.5%
——29——CVE-2021-44261—97.5%
——29——CVE-2013-3855—97.5%
——29——CVE-2009-2694—97.5%
——29——CVE-2013-3853—97.5%
——29——CVE-2019-0598—97.5%
——29——