Vulnerabilidades exploráveis hoje
4,383na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,768
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,642
- Alta21,930
- Média21,129
- Baixa2,126
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2023-20888—99.7%
——30——CVE-2009-2521—99.7%
——30——CVE-2023-27992—99.7%
KEV—80Zyxel Multiple NAS Devices Command Injection Vulnerability—CVE-2021-34996—99.7%
——30——CVE-2011-2140—99.7%
——30——CVE-2007-1036—99.7%
——30——CVE-2003-0818—99.7%
——30——CVE-2017-0038—99.7%
——30——CVE-2024-10924—99.7%
——30——CVE-2014-1510—99.7%
——30——CVE-2012-0053—99.7%
——30——CVE-2017-17090—99.7%
——30——CVE-2023-48646—99.7%
——30——CVE-2018-6789—99.7%
KEVR80Exim Buffer Overflow Vulnerability—CVE-2021-213515.4 MÉD99.7%
——30XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.30dCVE-2023-25762—99.7%
——30——CVE-2010-0806—99.7%
KEV—80Microsoft Internet Explorer Use-After-Free Vulnerability—CVE-2016-0800—99.7%
——30——CVE-2021-35392—99.7%
——30——CVE-2015-6922—99.7%
——30——CVE-2023-30253—99.7%
——30——CVE-2022-44690—99.7%
——30——CVE-2003-0812—99.7%
——30——CVE-2023-38096—99.7%
——30——CVE-2023-36469—99.7%
——30——CVE-2022-1175—99.7%
——30——CVE-2024-281825.3 MÉD99.7%
——30nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync. This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.23dCVE-2018-0886—99.7%
——30——CVE-2023-40492—99.7%
——30——CVE-2023-40494—99.7%
——30——CVE-2014-8440—99.7%
——30——CVE-2021-40449—99.7%
KEVR80Microsoft Windows Win32k Privilege Escalation Vulnerability—CVE-2020-35578—99.7%
——30——CVE-2023-1698—99.7%
——30——CVE-2016-10372—99.7%
——30——CVE-2026-887719.8 CRÍ99.7%
KEV—80Citrix NetScaler Improper Input Validation Vulnerability39dCVE-2009-2526—99.7%
——30——CVE-2020-7200—99.7%
——30——CVE-2015-6128—99.7%
——30——CVE-2023-46263—99.7%
——30——