Vulnerabilidades exploráveis hoje
413,805na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,615
- Alta22,524
- Média20,886
- Baixa2,135
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2022-0734—95.6%
——29——CVE-2025-57773—95.6%
——29——CVE-2015-3209—95.6%
——29——CVE-2018-4328—95.6%
——29——CVE-2018-4013—95.6%
——29——CVE-2009-0410—95.6%
——29——CVE-2017-13715—95.6%
——29——CVE-2017-9140—95.6%
——29——CVE-2014-0567—95.6%
——29——CVE-2008-6998—95.6%
——29——CVE-2019-11706—95.6%
——29——CVE-2010-1813—95.6%
——29——CVE-2000-0179—95.6%
——29——CVE-2007-2142—95.6%
——29——CVE-2003-0169—95.6%
——29——CVE-2021-40352—95.6%
——29——CVE-2014-9159—95.6%
——29——CVE-2002-0616—95.6%
——29——CVE-1999-1431—95.6%
——29——CVE-2017-0259—95.6%
——29——CVE-2006-0547—95.6%
——29——CVE-1999-0913—95.6%
——29——CVE-2018-5723—95.6%
——29——CVE-2021-33913—95.6%
——29——CVE-2018-20019—95.6%
——29——CVE-2026-87118.1 ALT95.6%
——29NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled NGINX variable (for example, $http_*, $arg_*, $cookie_*) and a location invoking the ngx.fetch() operation from NGINX JavaScript. An unauthenticated attacker can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.112dCVE-2007-2079—95.6%
——29——CVE-2019-6716—95.6%
——29——CVE-2014-0561—95.6%
——29——CVE-2026-222186.5 MÉD95.6%
——29Chainlit versions prior to 2.9.4 contain an arbitrary file read vulnerability in the /project/element update flow. An authenticated client can send a custom Element with a user-controlled path value, causing the server to copy the referenced file into the attacker’s session. The resulting element identifier (chainlitKey) can then be used to retrieve the file contents via /project/file/<chainlitKey>, allowing disclosure of any file readable by the Chainlit service.121dCVE-2006-2134—95.6%
——29——CVE-2001-1246—95.6%
——29——CVE-2007-2762—95.6%
——29——CVE-2019-16902—95.6%
——29——CVE-2013-2368—95.5%
——29——CVE-2008-3066—95.6%
——29——CVE-2022-30512—95.6%
——29——CVE-2019-6250—95.6%
——29——CVE-2017-2958—95.6%
——29——CVE-2023-46977—95.6%
——29——