Vulnerabilidades exploráveis hoje
413,805na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,615
- Alta22,524
- Média20,887
- Baixa2,135
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2018-20019—95.6%
——29——CVE-2019-7814—95.6%
——29——CVE-2009-0781—95.6%
——29——CVE-2023-37979—95.6%
——29——CVE-2016-3542—95.6%
——29——CVE-2012-4172—95.6%
——29——CVE-2018-5723—95.6%
——29——CVE-2021-33912—95.6%
——29——CVE-2018-4013—95.6%
——29——CVE-2016-6802—95.6%
——29——CVE-2026-222186.5 MÉD95.6%
——29Chainlit versions prior to 2.9.4 contain an arbitrary file read vulnerability in the /project/element update flow. An authenticated client can send a custom Element with a user-controlled path value, causing the server to copy the referenced file into the attacker’s session. The resulting element identifier (chainlitKey) can then be used to retrieve the file contents via /project/file/<chainlitKey>, allowing disclosure of any file readable by the Chainlit service.121dCVE-2008-2006—95.6%
——29——CVE-2000-0775—95.6%
——29——CVE-2009-0410—95.6%
——29——CVE-2018-9010—95.6%
——29——CVE-2008-6998—95.6%
——29——CVE-2002-2272—95.6%
——29——CVE-2015-4047—95.6%
——29——CVE-2022-22588—95.6%
——29——CVE-2017-8695—95.6%
——29——CVE-2026-87118.1 ALT95.6%
——29NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled NGINX variable (for example, $http_*, $arg_*, $cookie_*) and a location invoking the ngx.fetch() operation from NGINX JavaScript. An unauthenticated attacker can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.112dCVE-2004-0486—95.6%
——29——CVE-1999-1431—95.6%
——29——CVE-2014-0567—95.6%
——29——CVE-2017-7922—95.6%
——29——CVE-2022-30512—95.6%
——29——CVE-2008-3702—95.6%
——29——CVE-2014-9158—95.6%
——29——CVE-2019-7830—95.6%
——29——CVE-2007-2079—95.6%
——29——CVE-2023-26876—95.6%
——29——CVE-2023-46977—95.6%
——29——CVE-2014-9159—95.6%
——29——CVE-2019-7786—95.6%
——29——CVE-2014-9116—95.6%
——29——CVE-2009-2693—95.5%
——29——CVE-2000-09917.5 SEM95.6%
——29Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute arbitrary commands via a long telnet URL, aka the "HyperTerminal Buffer Overflow" vulnerability.50dCVE-2000-0179—95.6%
——29——CVE-2025-40599—95.6%
——29——CVE-2010-2415—95.6%
——29——