Vulnerabilidades exploráveis hoje
413,612na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,712
- Alta22,677
- Média21,178
- Baixa2,161
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2025-27210—96.7%
——29——CVE-2005-3912—96.7%
——29——CVE-2021-41578—96.7%
——29——CVE-2020-10619—96.7%
——29——CVE-2010-4562—96.7%
——29——CVE-2019-0885—96.7%
——29——CVE-2018-13056.5 MÉD96.7%
——29Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied once a Servlet had been loaded. Because security constraints defined in this way apply to the URL pattern and any URLs below that point, it was possible - depending on the order Servlets were loaded - for some security constraints not to be applied. This could have exposed resources to users who were not authorised to access them.28dCVE-2015-5377—96.7%
——29——CVE-2023-4596—96.7%
——29——CVE-2022-43605—96.7%
——29——CVE-2017-16352—96.7%
——29——CVE-2010-0019—96.7%
——29——CVE-2022-43604—96.7%
——29——CVE-2002-1290—96.7%
——29——CVE-2017-11781—96.7%
——29——CVE-2018-8551—96.7%
——29——CVE-2014-4158—96.7%
——29——CVE-2007-2434—96.7%
——29——CVE-2016-3322—96.7%
——29——CVE-2019-8044—96.7%
——29——CVE-1999-1241—96.7%
——29——CVE-2021-213476.1 MÉD96.7%
——29XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.36dCVE-2016-3974—96.7%
——29——CVE-2006-1868—96.7%
——29——CVE-2013-6801—96.7%
——29——CVE-2011-1868—96.7%
——29——CVE-2022-22835—96.7%
——29——CVE-2009-2350—96.7%
——29——CVE-2006-26567.5 SEM96.7%
——29Stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execute arbitrary code via a long filename. NOTE: tiffsplit is not setuid. If there is not a common scenario under which tiffsplit is called with attacker-controlled command line arguments, then perhaps this issue should not be included in CVE.50dCVE-2023-44693—96.7%
——29——CVE-2013-2558—96.7%
——29——CVE-2011-1081—96.7%
——29——CVE-2016-7196—96.7%
——29——CVE-2008-3175—96.7%
——29——CVE-2020-14005—96.7%
——29——CVE-2006-2557—96.7%
——29——CVE-2024-39225—96.7%
——29——CVE-2013-2552—96.7%
——29——CVE-2011-0917—96.7%
——29——CVE-2025-0317—96.7%
——29——