Vulnerabilidades exploráveis hoje
413,612na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,728
- Alta22,707
- Média21,208
- Baixa2,163
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2017-0150—96.8%
——29——CVE-2014-2674—96.8%
——29——CVE-2017-18638—96.8%
——29——CVE-2016-8511—96.8%
——29——CVE-2025-5432210.0 CRÍ96.8%
——29Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py. The title and oIP parameters are also used.36dCVE-2014-2786—96.8%
——29——CVE-2010-1185—96.8%
——29——CVE-2025-9424—96.8%
——29——CVE-2020-11188.6 ALT96.8%
——29A denial of service vulnerability exists in the Windows implementation of Transport Layer Security (TLS) when it improperly handles certain key exchanges. An attacker who successfully exploited the vulnerability could cause a target system to stop responding.
To exploit this vulnerability, a remote unauthenticated attacker could send a specially crafted request to a target system utilizing TLS 1.2 or lower, triggering the system to automatically reboot.
The update addresses the vulnerability by changing the way TLS key exchange messages are validated.85dCVE-2017-0132—96.8%
——29——CVE-2012-3575—96.8%
——29——CVE-2014-2785—96.8%
——29——CVE-2017-0032—96.8%
——29——CVE-2023-5154—96.8%
——29——CVE-2017-0067—96.8%
——29——CVE-2014-4065—96.8%
——29——CVE-2025-474118.1 ALT96.8%
——29A user with a legitimate non-administrator account can exploit a vulnerability in the user ID creation mechanism in Apache StreamPipes that allows them to swap the username of an existing user with that of an administrator.
This vulnerability allows an attacker to gain administrative control over the application by manipulating JWT tokens, which can lead to data tampering, unauthorized access and other security issues.
This issue affects Apache StreamPipes: through 0.97.0.
Users are recommended to upgrade to version 0.98.0, which fixes the issue.36dCVE-2016-7243—96.8%
——29——CVE-2017-0138—96.8%
——29——CVE-2006-4253—96.8%
——29——CVE-2007-5257—96.8%
——29——CVE-2014-7858—96.8%
——29——CVE-2016-3389—96.8%
——29——CVE-2016-7208—96.8%
——29——CVE-2006-00339.3 SEM96.8%
——29Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted PNG image that triggers memory corruption when it is parsed.50dCVE-2006-7027—96.8%
——29——CVE-2013-6924—96.8%
——29——CVE-2018-5234—96.8%
——29——CVE-2007-1530—96.8%
——29——CVE-2018-14028—96.8%
——29——CVE-2019-3833—96.8%
——29——CVE-2011-3310—96.8%
——29——CVE-2011-1280—96.8%
——29——CVE-2017-0131—96.8%
——29——CVE-2022-1565—96.8%
——29——CVE-2026-6144710.0 CRÍ96.8%
——29PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execute_python() that executes LLM-generated Python code without AST validation, import restrictions, or sandbox enforcement. Attackers can influence LLM output through prompt injection to exfiltrate all environment secrets and execute arbitrary code on the host system.18dCVE-2015-2514—96.8%
——29——CVE-2002-0368—96.8%
——29——CVE-2005-2665—96.8%
——29——CVE-2004-2532—96.8%
——29——