Vulnerabilidades exploráveis hoje
413,655na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,615
- Alta22,424
- Média20,905
- Baixa2,130
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2016-00124.3 MÉD95.9%
——29Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Visio 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Office 2016, Excel 2016, PowerPoint 2016, Visio 2016, Word 2016, and Visual Basic 6.0 Runtime allow remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka "Microsoft Office ASLR Bypass."28dCVE-2010-0049—95.9%
——29——CVE-2006-3995—95.9%
——29——CVE-2008-2433—95.9%
——29——CVE-2000-0059—95.9%
——29——CVE-2018-4981—95.9%
——29——CVE-2006-5152—95.9%
——29——CVE-2009-0347—95.9%
——29——CVE-2014-3802—95.9%
——29——CVE-2002-0516—95.9%
——29——CVE-2007-1528—95.9%
——29——CVE-2009-0512—95.9%
——29——CVE-2008-0599—95.9%
——29——CVE-2014-0536—95.9%
——29——CVE-2012-5280—95.9%
——29——CVE-2019-1346—95.9%
——29——CVE-2009-5156—95.9%
——29——CVE-2016-7867—95.9%
——29——CVE-2016-7870—95.9%
——29——CVE-2020-1407—95.9%
——29——CVE-2018-4957—95.9%
——29——CVE-2014-7221—95.9%
——29——CVE-2019-14813—95.9%
——29——CVE-2018-4955—95.9%
——29——CVE-2001-0277—95.9%
——29——CVE-2018-4970—95.9%
——29——CVE-2011-1761—95.9%
——29——CVE-2008-1100—95.9%
——29——CVE-2007-1643—95.9%
——29——CVE-2007-1527—95.9%
——29——CVE-2007-1532—95.9%
——29——CVE-2026-352169.0 CRÍ95.9%
——29Budibase is an open-source low-code platform. Prior to version 3.33.4, an unauthenticated attacker can achieve Remote Code Execution (RCE) on the Budibase server by triggering an automation that contains a Bash step via the public webhook endpoint. No authentication is required to trigger the exploit. The process executes as root inside the container. This issue has been patched in version 3.33.4.37dCVE-2009-1285—95.9%
——29——CVE-2011-4926—95.9%
——29——CVE-2015-1155—95.9%
——29——CVE-2002-0977—95.9%
——29——CVE-2018-4960—95.9%
——29——CVE-2018-4963—95.9%
——29——CVE-2021-256817.5 ALT95.9%
——29AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. This could allow for exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary data over DNS. NOTE: The affected appliances NetVanta 7060 and NetVanta 7100 are considered End of Life and as such this issue will not be patched.127dCVE-2004-0777—95.9%
——29——