Vulnerabilidades exploráveis hoje
413,655na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,605
- Alta22,394
- Média20,862
- Baixa2,124
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2015-81267.5 SEM95.8%
——29Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.29dCVE-2013-1370—95.8%
——29——CVE-2018-20221—95.8%
——29——CVE-2026-95336.3 MÉD95.8%
——29A vulnerability was detected in Totolink CA750-PoE 6.2c.510. The impacted element is the function recvUpgradeNewFw of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. Performing a manipulation of the argument fwUrl/magicid results in os command injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.112dCVE-2011-1552—95.8%
——29——CVE-2011-1928—95.8%
——29——CVE-2021-31535—95.8%
——29——CVE-2012-4032—95.8%
——29——CVE-2005-2250—95.8%
——29——CVE-2015-5129—95.8%
——29——CVE-2026-95146.3 MÉD95.8%
——29A security vulnerability has been detected in Totolink CA750-PoE 6.2c.510. Impacted is the function setNetworkDiag of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. The manipulation of the argument NetDiagHost/NetDiagPingNum/NetDiagPingSize/NetDiagPingTimeOut/NetDiagTracertHop is directly passed by the attacker/so we can control the NetDiagHost/NetDiagPingNum/NetDiagPingSize/NetDiagPingTimeOut/NetDiagTracertHop leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.112dCVE-2014-7888—95.8%
——29——CVE-2006-2906—95.8%
——29——CVE-2021-22048—95.8%
——29——CVE-2026-95156.3 MÉD95.8%
——29A vulnerability was detected in Totolink CA750-PoE 6.2c.510. The affected element is the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. The manipulation of the argument plugin_version results in os command injection. The attack may be launched remotely. The exploit is now public and may be used.112dCVE-2014-7893—95.8%
——29——CVE-2019-16692—95.8%
——29——CVE-2008-4910—95.8%
——29——CVE-2021-24287—95.8%
——29——CVE-2002-0748—95.8%
——29——CVE-2025-33070—95.8%
——29——CVE-2018-7116—95.8%
——29——CVE-2021-38389—95.8%
——29——CVE-2023-20078—95.8%
——29——CVE-2010-3454—95.8%
——29——CVE-2018-4314—95.8%
——29——CVE-2005-0129—95.8%
——29——CVE-2005-0643—95.8%
——29——CVE-2016-1100—95.8%
——29——CVE-2014-7878—95.8%
——29——CVE-2019-15993—95.8%
——29——CVE-2018-12833—95.8%
——29——CVE-2008-1110—95.8%
——29——CVE-2017-8700—95.8%
——29——CVE-2008-4479—95.8%
——29——CVE-2019-8661—95.8%
——29——CVE-2003-0995—95.8%
——29——CVE-2014-7895—95.8%
——29——CVE-2008-6063—95.8%
——29——CVE-2014-3007—95.8%
——29——