Vulnerabilidades exploráveis hoje
413,655na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,630
- Alta22,498
- Média20,973
- Baixa2,140
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2020-15500—96.2%
——29——CVE-2003-0478—96.2%
——29——CVE-2018-15767—96.2%
——29——CVE-2018-11538—96.2%
——29——CVE-2001-0171—96.2%
——29——CVE-2016-3369—96.2%
——29——CVE-2007-2161—96.2%
——29——CVE-2015-3050—96.2%
——29——CVE-2020-8641—96.2%
——29——CVE-2008-3703—96.2%
——29——CVE-2024-32152—96.2%
——29——CVE-2016-6174—96.2%
——29——CVE-2022-322079.8 CRÍ96.2%
——29When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.29dCVE-2014-2617—96.2%
——29——CVE-2010-3856—96.2%
——29——CVE-2004-1299—96.2%
——29——CVE-2022-46650—96.2%
——29——CVE-2016-6599—96.2%
——29——CVE-2022-2552—96.2%
——29——CVE-2018-5406—96.2%
——29——CVE-2003-1337—96.2%
——29——CVE-2010-3683—96.2%
——29——CVE-2025-150487.3 ALT96.2%
——29A vulnerability was determined in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/CheckTools of the component HTTP Request Handler. Executing a manipulation of the argument ipaddress can lead to command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.24dCVE-2002-1188—96.2%
——29——CVE-2005-0360—96.2%
——29——CVE-2025-2172—96.2%
——29——CVE-2007-2165—96.2%
——29——CVE-2018-10942—96.2%
——29——CVE-2021-21799—96.2%
——29——CVE-2022-24436—96.2%
——29——CVE-2001-0092—96.2%
——29——CVE-2007-3655—96.2%
——29——CVE-2026-444928.6 ALT96.2%
——29Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios does not normalise IPv4-mapped IPv6 addresses. When NO_PROXY lists an IPv4 address such as 127.0.0.1 or 169.254.169.254, a request URL using the IPv4-mapped IPv6 form (::ffff:7f00:1, ::ffff:a9fe:a9fe) still routes through the configured proxy. Node.js resolves these addresses to the underlying IPv4 host, so the request reaches the internal service via the proxy rather than being blocked. This vulnerability is fixed in 0.32.0 and 1.16.0.62dCVE-2018-4902—96.2%
——29——CVE-2022-1574—96.2%
——29——CVE-2024-13973—96.2%
——29——CVE-2019-0605—96.2%
——29——CVE-2021-45068—96.2%
——29——CVE-2016-6308—96.2%
——29——CVE-2014-6368—96.2%
——29——