Vulnerabilidades exploráveis hoje
4,380na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,650
- Alta21,880
- Média21,271
- Baixa2,179
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2017-12478—99.6%
——30——CVE-2021-31813—99.6%
——30——CVE-2020-11108—99.6%
——30——CVE-2021-28799—99.6%
KEVR80QNAP NAS Improper Authorization Vulnerability—CVE-2015-0936—99.6%
——30——CVE-2019-0192—99.6%
——30——CVE-2026-21858—99.6%
——30——CVE-2009-3068—99.6%
——30——CVE-2024-28741—99.6%
——30——CVE-2022-26318—99.6%
KEV—80WatchGuard Firebox and XTM Appliances Arbitrary Code Execution—CVE-2011-3402—99.6%
KEV—80Microsoft Windows Remote Code Execution Vulnerability—CVE-2017-0261—99.6%
KEV—80Microsoft Office Use-After-Free Vulnerability—CVE-2003-0466—99.6%
——30——CVE-2019-16113—99.6%
——30——CVE-2013-3183—99.6%
——30——CVE-2011-3587—99.6%
——30——CVE-2023-273517.5 ALT99.6%
KEVR80PaperCut NG/MF Improper Authentication Vulnerability36dCVE-2022-38772—99.6%
——30——CVE-2020-27223—99.6%
——30——CVE-2024-28075—99.6%
——30——CVE-2010-1587—99.6%
——30——CVE-2018-10583—99.6%
——30——CVE-2023-24880—99.6%
KEVR80Microsoft Windows SmartScreen Security Feature Bypass Vulnerability—CVE-2021-219757.5 ALT99.6%
KEVR80VMware Server Side Request Forgery in vRealize Operations Manager API35dCVE-2007-2139—99.6%
——30——CVE-2026-1027649.8 CRÍ99.6%
KEV—80BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability21dCVE-2017-5982—99.6%
——30——CVE-2024-3408—99.6%
——30——CVE-2002-0079—99.6%
——30——CVE-2021-39312—99.6%
——30——CVE-2013-6221—99.6%
——30——CVE-2004-1561—99.6%
——30——CVE-2016-2108—99.6%
——30——CVE-2021-41951—99.6%
——30——CVE-2020-28653—99.6%
——30——CVE-2014-5005—99.6%
——30——CVE-2019-9851—99.6%
——30——CVE-2022-24734—99.6%
——30——CVE-2017-1000117—99.6%
——30——CVE-2021-213417.5 ALT99.6%
——30XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulating the processed input stream. No user is affected who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.30d