Vulnerabilidades exploráveis hoje
413,525na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,739
- Alta22,705
- Média21,204
- Baixa2,175
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2014-1824—97.3%
——29——CVE-2010-0520—97.3%
——29——CVE-2019-13294—97.3%
——29——CVE-2011-1988—97.3%
——29——CVE-2011-1873—97.3%
——29——CVE-2024-5230—97.3%
——29——CVE-2013-0023—97.3%
——29——CVE-2012-0007—97.3%
——29——CVE-2013-3157—97.3%
——29——CVE-2024-50324—97.3%
——29——CVE-2010-1353—97.3%
——29——CVE-2006-4560—97.3%
——29——CVE-2024-234729.6 CRÍ97.3%
——29SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability. This vulnerability allows an authenticated user to arbitrary read and delete files in ARM.8dCVE-2019-0566—97.3%
——29——CVE-2011-1564—97.3%
——29——CVE-2001-0902—97.3%
——29——CVE-2013-0089—97.3%
——29——CVE-2002-1056—97.3%
——29——CVE-2015-2153—97.3%
——29——CVE-2018-15716—97.3%
——29——CVE-2022-30011—97.3%
——29——CVE-2000-0742—97.3%
——29——CVE-2005-0199—97.3%
——29——CVE-2019-0812—97.3%
——29——CVE-2002-0860—97.3%
——29——CVE-2009-4098—97.3%
——29——CVE-2018-0862—97.3%
——29——CVE-2008-5515—97.3%
——29——CVE-2018-12533—97.3%
——29——CVE-2013-3891—97.3%
——29——CVE-2012-6495—97.3%
——29——CVE-2013-3248—97.3%
——29——CVE-2013-1600—97.3%
——29——CVE-2015-2440—97.3%
——29——CVE-2020-0964—97.3%
——29——CVE-2020-36197—97.3%
——29——CVE-2004-1550—97.3%
——29——CVE-2025-633874.3 MÉD97.3%
——29Dify 1.9.1 and 1.17.0 exposes the /console/api/system-features endpoint to unauthenticated HTTP GET requests that return system feature and configuration information. NOTE: The maintainer states that the endpoint is unauthenticated by design and serves as a bootstrap mechanism required for the dashboard initialization. They also state that the data is non-sensitive and required for client-side rendering. No PII, credentials, or secrets are exposed.10dCVE-2006-3990—97.3%
——29——CVE-2025-147079.8 CRÍ97.3%
——29A security flaw has been discovered in Shiguangwu sgwbox N3 2.0.25. Affected is an unknown function of the file /usr/sbin/http_eshell_server of the component DOCKER Feature. Performing manipulation of the argument params results in command injection. The attack may be initiated remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.35d