Vulnerabilidades exploráveis hoje
4,383na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,768
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,690
- Alta22,136
- Média21,547
- Baixa2,155
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2024-5156710.0 CRÍ99.7%
KEVR80CyberPanel Incorrect Default Permissions Vulnerability95dCVE-2021-22123—99.7%
——30——CVE-2020-12641—99.7%
KEV—80Roundcube Webmail Remote Code Execution Vulnerability—CVE-2013-72859.8 CRÍ99.7%
——30Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. e.g. JSON.29dCVE-2023-3388—99.7%
——30——CVE-2025-47916—99.7%
——30——CVE-2019-12257—99.7%
——30——CVE-2018-17246—99.7%
——30——CVE-2020-5722—99.7%
KEV—80Grandstream Networks UCM6200 Series SQL Injection Vulnerability—CVE-2024-43451—99.7%
KEV—80Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability—CVE-2017-0213—99.7%
KEVR80Microsoft Windows Privilege Escalation Vulnerability—CVE-2010-3563—99.7%
——30——CVE-2024-38077—99.7%
——30——CVE-2024-38112—99.7%
KEV—80Microsoft Windows MSHTML Platform Spoofing Vulnerability—CVE-2021-25080—99.7%
——30——CVE-2014-6037—99.7%
——30——CVE-2025-40551—99.7%
KEV—80SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability—CVE-2015-2857—99.7%
——30——CVE-2017-11317—99.7%
KEV—80Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability—CVE-2021-21224—99.7%
KEV—80Google Chromium V8 Type Confusion Vulnerability—CVE-2024-12856—99.7%
——30——CVE-2024-6782—99.7%
——30——CVE-2021-24155—99.7%
——30——CVE-2020-25681—99.7%
——30——CVE-2018-17552—99.7%
——30——CVE-2009-3129—99.7%
KEV—80Microsoft Excel Featheader Record Memory Corruption Vulnerability—CVE-2023-28128—99.7%
——30——CVE-2023-28432—99.7%
KEV—80MinIO Information Disclosure Vulnerability—CVE-2015-3035—99.7%
KEV—80TP-Link Multiple Archer Devices Directory Traversal Vulnerability—CVE-2022-28368—99.7%
——30——CVE-2023-48022—99.7%
——30——CVE-2022-30690—99.7%
——30——CVE-2021-3781—99.7%
——30——CVE-2018-17431—99.7%
——30——CVE-2005-3252—99.7%
——30——CVE-2024-27919—99.7%
——30——CVE-2023-29325—99.7%
——30——CVE-2009-2265—99.7%
——30——CVE-2020-10879—99.7%
——30——CVE-2020-3161—99.7%
KEV—80Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability—