Vulnerabilidades exploráveis hoje
413,525na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,739
- Alta22,705
- Média21,204
- Baixa2,175
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2001-0237—97.3%
——29——CVE-2025-606895.4 MÉD97.3%
——29An unauthenticated command injection vulnerability exists in the Start_EPI function of the httpd binary on Linksys E1200 v2 routers (Firmware E1200_v2.0.11.001_us.tar.gz). The vulnerability occurs because user-supplied CGI parameters (wl_ant, wl_ssid, wl_rate, ttcp_num, ttcp_ip, ttcp_size) are concatenated into system command strings without proper sanitization and executed via wl_exec_cmd. Successful exploitation allows remote attackers to execute arbitrary commands on the device without authentication.7dCVE-1999-1478—97.3%
——29——CVE-2018-8500—97.3%
——29——CVE-2012-5204—97.3%
——29——CVE-2022-3842—97.3%
——29——CVE-2025-121977.5 ALT97.3%
——29The The Events Calendar plugin for WordPress is vulnerable to blind SQL Injection via the 's' parameter in versions 6.15.1.1 to 6.15.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.24dCVE-2015-53455.3 MÉD97.3%
——29The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects before considering security constraints and Filters, which allows remote attackers to determine the existence of a directory via a URL that lacks a trailing / (slash) character.28dCVE-2025-43565—97.3%
——29——CVE-2022-40624—97.3%
——29——CVE-2014-6041—97.3%
——29——CVE-2016-4051—97.3%
——29——CVE-2021-22875—97.3%
——29——CVE-2019-1124—97.3%
——29——CVE-2015-6149—97.3%
——29——CVE-2013-0087—97.3%
——29——CVE-2013-1288—97.3%
——29——CVE-2016-3368—97.3%
——29——CVE-2022-250899.8 CRÍ97.3%
——29Printix Secure Cloud Print Management through 1.3.1106.0 incorrectly uses Privileged APIs to modify values in HKEY_LOCAL_MACHINE via UITasks.PersistentRegistryData.126dCVE-2015-6147—97.3%
——29——CVE-2015-6160—97.3%
——29——CVE-2010-5312—97.3%
——29——CVE-2021-22874—97.3%
——29——CVE-2015-6150—97.3%
——29——CVE-2006-7031—97.3%
——29——CVE-2016-0954—97.3%
——29——CVE-1999-0225—97.3%
——29——CVE-2012-0168—97.3%
——29——CVE-2006-3660—97.3%
——29——CVE-2005-0709—97.3%
——29——CVE-2021-27178—97.3%
——29——CVE-2023-40289—97.3%
——29——CVE-2002-0639—97.3%
——29——CVE-2007-1858—97.3%
——29——CVE-2020-95479.8 CRÍ97.3%
——29FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).35dCVE-2015-2505—97.3%
——29——CVE-2008-3862—97.3%
——29——CVE-2023-46370—97.3%
——29——CVE-2024-2879—97.3%
——29——CVE-2012-0016—97.3%
——29——