Vulnerabilidades exploráveis hoje
413,655na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,700
- Alta22,645
- Média21,140
- Baixa2,150
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2015-1732—96.4%
——29——CVE-2005-4466—96.4%
——29——CVE-2014-8453—96.4%
——29——CVE-2018-8461—96.4%
——29——CVE-2016-6483—96.4%
——29——CVE-2023-4249—96.4%
——29——CVE-2018-8447—96.4%
——29——CVE-2024-27746—96.4%
——29——CVE-2002-1694—96.4%
——29——CVE-2009-2511—96.4%
——29——CVE-2007-3576—96.4%
——29——CVE-2002-0845—96.4%
——29——CVE-2014-2609—96.4%
——29——CVE-2015-2406—96.4%
——29——CVE-2021-463547.5 ALT96.4%
——29Thinfinity VirtualUI 2.1.28.0, 2.1.32.1 and 2.5.26.2, fixed in version 3.0 is affected by an information disclosure vulnerability in the parameter "Addr" in cmd site. The ability to send requests to other systems can allow the vulnerable server to filtrate the real IP of the web server or increase the attack surface.127dCVE-2008-1802—96.4%
——29——CVE-2014-9293—96.4%
——29——CVE-2015-1738—96.4%
——29——CVE-2015-2384—96.4%
——29——CVE-2014-9294—96.4%
——29——CVE-2026-107277.2 ALT96.4%
——29An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root112dCVE-2015-1666—96.4%
——29——CVE-2019-7259—96.4%
——29——CVE-2024-26218—96.4%
——29——CVE-2022-49068.8 ALT96.4%
——29Inappropriate implementation in Blink in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)2dCVE-2024-3156—96.4%
——29——CVE-2025-712594.3 MÉD96.4%
——29BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the externalfeed/RSS API component that allows authenticated attackers to trigger arbitrary outbound requests from the server. Attackers can exploit insufficient validation of externally supplied resource references to interact with internal services or cause resource exhaustion impacting availability. The following hotfixes remediate the vulnerability: 20.20.02, 20.20.03.002, 20.21.01.001, 20.21.02.002, 20.22.01, 20.22.01.001, 20.23.01, 20.23.01.002, and 20.24.01.98dCVE-2012-2619—96.4%
——29——CVE-2024-2449—96.4%
——29——CVE-2010-1952—96.4%
——29——CVE-2014-3509—96.4%
——29——CVE-2006-6121—96.4%
——29——CVE-2012-3571—96.4%
——29——CVE-2018-8424—96.4%
——29——CVE-2002-0289—96.4%
——29——CVE-2016-10229—96.4%
——29——CVE-2013-2227—96.4%
——29——CVE-2016-4052—96.4%
——29——CVE-2015-1667—96.4%
——29——CVE-2017-7462—96.4%
——29——