Vulnerabilidades exploráveis hoje
4,383na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,768
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,799
- Alta22,636
- Média22,025
- Baixa2,187
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2021-26085—100.0%
KEVR80Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability—CVE-2023-34362—100.0%
KEVR80Progress MOVEit Transfer SQL Injection Vulnerability—CVE-2021-39226—100.0%
KEV—80Grafana Authentication Bypass Vulnerability—CVE-2021-386479.8 CRÍ100.0%
KEVR80Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability87dCVE-2022-42889—100.0%
——30——CVE-2022-24816—100.0%
KEV—80OSGeo GeoServer JAI-EXT Code Injection Vulnerability—CVE-2025-4427—100.0%
KEV—80Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability—CVE-2019-02328.1 ALT100.0%
——30When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way the JRE passes command line arguments to Windows. The CGI Servlet is disabled by default. The CGI option enableCmdLineArguments is disable by default in Tomcat 9.0.x (and will be disabled by default in all versions in response to this vulnerability). For a detailed explanation of the JRE behaviour, see Markus Wulftange's blog (https://codewhitesec.blogspot.com/2016/02/java-and-command-line-injections-in-windows.html) and this archived MSDN blog (https://web.archive.org/web/20161228144344/https://blogs.msdn.microsoft.com/twistylittlepassagesallalike/2011/04/23/everyone-quotes-command-line-arguments-the-wrong-way/).3dCVE-2021-1497—100.0%
KEV—80Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability—CVE-2025-25257—100.0%
KEV—80Fortinet FortiWeb SQL Injection Vulnerability—CVE-2024-32113—100.0%
KEV—80Apache OFBiz Path Traversal Vulnerability—CVE-2019-3396—100.0%
KEVR80Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability—CVE-2019-0604—100.0%
KEVR80Microsoft SharePoint Remote Code Execution Vulnerability—CVE-2021-20038—100.0%
KEVR80SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability—CVE-2012-1456—100.0%
——30——CVE-2024-45519—100.0%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability—CVE-2019-74817.5 ALT100.0%
KEVR80SonicWall SMA100 SQL Injection Vulnerability86dCVE-2015-1427—100.0%
KEV—80Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability—CVE-2020-7961—100.0%
KEV—80Liferay Portal Deserialization of Untrusted Data Vulnerability—CVE-2026-1052010.0 CRÍ100.0%
KEV—80Ivanti Sentry OS Command Injection Vulnerability29dCVE-2023-21839—100.0%
KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2021-22986—100.0%
KEVR80F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability—CVE-2018-02967.5 ALT100.0%
KEV—80Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability86dCVE-2025-53771—100.0%
——30——CVE-2014-0497—100.0%
KEV—80Adobe Flash Player Integer Underflow Vulnerablity—CVE-2021-35394—100.0%
KEV—80Realtek Jungle SDK Remote Code Execution Vulnerability—CVE-2024-29825—100.0%
——30——CVE-2024-29826—100.0%
——30——CVE-2021-270657.8 ALT100.0%
KEVR80Microsoft Exchange Server Remote Code Execution Vulnerability35dCVE-2019-1653—100.0%
KEV—80Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability—CVE-2022-35405—100.0%
KEV—80Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability—CVE-2021-44515—100.0%
KEV—80Zoho Desktop Central Authentication Bypass Vulnerability—CVE-2021-36260—100.0%
KEV—80Hikvision Improper Input Validation—CVE-2021-31166—100.0%
KEV—80Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability—CVE-2021-219729.8 CRÍ100.0%
KEVR80VMware vCenter Server Remote Code Execution Vulnerability86dCVE-2024-29823—100.0%
——30——CVE-2015-4000—100.0%
——30——CVE-2020-13379—100.0%
——30——CVE-2012-1457—100.0%
——30——CVE-2022-35914—100.0%
KEV—80Teclib GLPI Remote Code Execution Vulnerability—