Vulnerabilidades exploráveis hoje
4,380na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,650
- Alta21,880
- Média21,271
- Baixa2,179
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2022-21145—99.6%
——30——CVE-2023-49103—99.6%
KEV—80ownCloud graphapi Information Disclosure Vulnerability—CVE-2023-295259.9 CRÍ99.6%
——30XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Affected versions of xwiki are subject to code injection in the `since` parameter of the `/xwiki/bin/view/XWiki/Notifications/Code/LegacyNotificationAdministration` endpoint. This provides an XWiki syntax injection attack via the since-parameter, allowing privilege escalation from view to programming rights and subsequent code execution privilege. The vulnerability has been patched in XWiki 15.0-rc-1, 14.10.3, 14.4.8 and 14.10.3. Users are advised to upgrade. Users unable to upgrade may modify the page `XWiki.Notifications.Code.LegacyNotificationAdministration` to add the missing escaping. For versions < 14.6-rc-1 a workaround is to modify the file `<xwikiwebapp>/templates/distribution/eventmigration.wiki` to add the missing escaping.14dCVE-2020-13562—99.6%
——30——CVE-2008-3466—99.6%
——30——CVE-2013-1347—99.6%
KEV—80Microsoft Internet Explorer Remote Code Execution Vulnerability—CVE-2014-1761—99.6%
KEV—80Microsoft Word Memory Corruption Vulnerability—CVE-2024-1512—99.6%
——30——CVE-2018-0127—99.6%
——30——CVE-2010-0842—99.6%
——30——CVE-2008-2639—99.6%
——30——CVE-2002-1123—99.6%
——30——CVE-2015-2797—99.6%
——30——CVE-2018-10823—99.6%
——30——CVE-2023-26801—99.6%
——30——CVE-2022-2560—99.6%
——30——CVE-2024-55947—99.6%
——30——CVE-2017-113579.8 CRÍ99.6%
KEVR80Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability85dCVE-2020-0609—99.6%
——30——CVE-2021-26914—99.6%
——30——CVE-2007-1748—99.6%
——30——CVE-2007-2446—99.6%
——30——CVE-2023-35150—99.6%
——30——CVE-2019-12840—99.6%
——30——CVE-2010-1549—99.6%
——30——CVE-2025-26794—99.6%
——30——CVE-2020-13166—99.6%
——30——CVE-2003-0714—99.6%
——30——CVE-2013-0634—99.6%
——30——CVE-2006-5745—99.6%
——30——CVE-2016-4054—99.6%
——30——CVE-2020-15148—99.6%
——30——CVE-2022-34176—99.6%
——30——CVE-2020-10808—99.6%
——30——CVE-2016-0709—99.6%
——30——CVE-2014-6352—99.6%
KEV—80Microsoft Windows Code Injection Vulnerability—CVE-2020-11532—99.6%
——30——CVE-2018-12709.8 CRÍ99.6%
——30Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack.29dCVE-2008-2499—99.6%
——30——CVE-2022-25149—99.6%
——30——