Vulnerabilidades exploráveis hoje
4,383na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,768
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,642
- Alta21,929
- Média21,128
- Baixa2,126
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2019-10092—99.6%
——30——CVE-2023-32031—99.6%
——30——CVE-2016-2098—99.6%
——30——CVE-2021-21628—99.6%
——30——CVE-2017-0290—99.6%
——30——CVE-2021-35216—99.6%
——30——CVE-2010-2883—99.6%
KEV—80Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability—CVE-2021-2456—99.6%
——30——CVE-2021-33543—99.6%
——30——CVE-2017-11826—99.6%
KEV—80Microsoft Office Remote Code Execution Vulnerability—CVE-2022-40770—99.6%
——30——CVE-2003-0344—99.6%
——30——CVE-2025-34300—99.6%
——30——CVE-2024-2054—99.6%
——30——CVE-2017-8779—99.6%
——30——CVE-2021-30128—99.6%
——30——CVE-2003-0719—99.6%
——30——CVE-2024-54003—99.6%
——30——CVE-2023-24488—99.6%
——30——CVE-2015-3827—99.6%
——30——CVE-2016-8870—99.6%
——30——CVE-2014-9195—99.6%
——30——CVE-2021-31955—99.6%
KEV—80Microsoft Windows Kernel Information Disclosure Vulnerability—CVE-2019-1003002—99.6%
——30——CVE-2023-36932—99.6%
——30——CVE-2011-0923—99.6%
——30——CVE-2019-17602—99.6%
——30——CVE-2013-4212—99.6%
——30——CVE-2014-7862—99.6%
——30——CVE-2024-43468—99.6%
KEV—80Microsoft Configuration Manager SQL Injection Vulnerability—CVE-2019-9621—99.6%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability—CVE-2017-10974—99.6%
——30——CVE-2024-53675—99.6%
——30——CVE-2022-31704—99.6%
——30——CVE-2017-0262—99.6%
KEV—80Microsoft Office Remote Code Execution Vulnerability—CVE-2016-72557.8 ALT99.6%
KEVR80Microsoft Win32k Privilege Escalation Vulnerability58dCVE-2016-5734—99.6%
——30——CVE-2021-38540—99.6%
——30——CVE-2022-25148—99.6%
——30——CVE-2024-2041910.0 CRÍ99.6%
——30A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including administrative users.
This vulnerability is due to improper implementation of the password-change process. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow an attacker to access the web UI or API with the privileges of the compromised user.3d