Vulnerabilidades exploráveis hoje
413,612na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,728
- Alta22,707
- Média21,208
- Baixa2,163
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2020-18568—96.8%
——29——CVE-2021-28149—96.8%
——29——CVE-2020-11188.6 ALT96.8%
——29A denial of service vulnerability exists in the Windows implementation of Transport Layer Security (TLS) when it improperly handles certain key exchanges. An attacker who successfully exploited the vulnerability could cause a target system to stop responding.
To exploit this vulnerability, a remote unauthenticated attacker could send a specially crafted request to a target system utilizing TLS 1.2 or lower, triggering the system to automatically reboot.
The update addresses the vulnerability by changing the way TLS key exchange messages are validated.85dCVE-2014-7857—96.8%
——29——CVE-2007-0464—96.8%
——29——CVE-2007-5257—96.8%
——29——CVE-2008-3790—96.8%
——29——CVE-2005-2665—96.8%
——29——CVE-2010-4977—96.8%
——29——CVE-2017-0132—96.8%
——29——CVE-2011-3310—96.8%
——29——CVE-2019-3833—96.8%
——29——CVE-2023-2640—96.8%
——29——CVE-2012-3575—96.8%
——29——CVE-2017-18638—96.8%
——29——CVE-2014-2913—96.8%
——29——CVE-2016-3378—96.8%
——29——CVE-2020-27467—96.8%
——29——CVE-2024-0930—96.8%
——29——CVE-2011-3190—96.8%
——29——CVE-2004-2532—96.8%
——29——CVE-2017-0067—96.8%
——29——CVE-2010-4328—96.8%
——29——CVE-2007-1530—96.8%
——29——CVE-2014-4065—96.8%
——29——CVE-2015-3456—96.8%
——29——CVE-2017-0068—96.8%
——29——CVE-2008-3010—96.8%
——29——CVE-2026-6144710.0 CRÍ96.8%
——29PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execute_python() that executes LLM-generated Python code without AST validation, import restrictions, or sandbox enforcement. Attackers can influence LLM output through prompt injection to exfiltrate all environment secrets and execute arbitrary code on the host system.18dCVE-2023-41998—96.8%
——29——CVE-2023-5154—96.8%
——29——CVE-2005-1477—96.8%
——29——CVE-2016-3389—96.8%
——29——CVE-2014-4107—96.8%
——29——CVE-2014-4106—96.8%
——29——CVE-2011-1263—96.8%
——29——CVE-2006-00339.3 SEM96.8%
——29Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted PNG image that triggers memory corruption when it is parsed.50dCVE-2011-1257—96.8%
——29——CVE-2024-488847.5 ALT96.8%
——29A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, FortiOS 7.2.0 through 7.2.9, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4.0 through 6.4.15, FortiProxy 7.4.0 through 7.4.5, FortiProxy 7.2.0 through 7.2.11, FortiProxy 7.0.0 through 7.0.18, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions may allow a remote authenticated attacker with access to the security fabric interface and port to write arbitrary files or a remote unauthenticated attacker to delete an arbitrary folder21dCVE-2025-9424—96.8%
——29——