Vulnerabilidades exploráveis hoje
413,655na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,615
- Alta22,424
- Média20,905
- Baixa2,130
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2012-5280—95.9%
——29——CVE-2007-1643—95.9%
——29——CVE-2018-4981—95.9%
——29——CVE-2025-54123—95.9%
——29——CVE-2019-1332—95.9%
——29——CVE-2003-0849—95.9%
——29——CVE-2020-11514—95.9%
——29——CVE-2006-3995—95.9%
——29——CVE-2001-0590—95.9%
——29——CVE-2011-4926—95.9%
——29——CVE-2025-30161—95.9%
——29——CVE-2020-13144—95.9%
——29——CVE-2019-17566—95.9%
——29——CVE-2000-0191—95.9%
——29——CVE-2002-2380—95.9%
——29——CVE-2021-256817.5 ALT95.9%
——29AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. This could allow for exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary data over DNS. NOTE: The affected appliances NetVanta 7060 and NetVanta 7100 are considered End of Life and as such this issue will not be patched.127dCVE-2015-2532—95.9%
——29——CVE-2020-1458—95.9%
——29——CVE-2011-1761—95.9%
——29——CVE-2018-4957—95.9%
——29——CVE-2013-2557—95.9%
——29——CVE-2015-2531—95.9%
——29——CVE-2026-352169.0 CRÍ95.9%
——29Budibase is an open-source low-code platform. Prior to version 3.33.4, an unauthenticated attacker can achieve Remote Code Execution (RCE) on the Budibase server by triggering an automation that contains a Bash step via the public webhook endpoint. No authentication is required to trigger the exploit. The process executes as root inside the container. This issue has been patched in version 3.33.4.37dCVE-2006-5152—95.9%
——29——CVE-2025-53832—95.9%
——29——CVE-2022-28243—95.9%
——29——CVE-2016-7867—95.9%
——29——CVE-2008-1100—95.9%
——29——CVE-2009-5018—95.9%
——29——CVE-2010-1550—95.9%
——29——CVE-2012-1541—95.9%
——29——CVE-2016-7870—95.9%
——29——CVE-2019-147506.1 MÉD95.9%
——29An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It was observed that no input sanitization was provided in the firstname and lastname fields of the application. The insertion of malicious queries in those fields leads to the execution of those queries. This can further lead to cookie stealing or other malicious actions.125dCVE-2004-0777—95.9%
——29——CVE-2018-5924—95.9%
——29——CVE-2019-14813—95.9%
——29——CVE-2009-4181—95.9%
——29——CVE-2009-1285—95.9%
——29——CVE-2014-0536—95.9%
——29——CVE-2007-3406—95.9%
——29——