Vulnerabilidades exploráveis hoje
413,805na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,615
- Alta22,524
- Média20,884
- Baixa2,135
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2018-4323—95.5%
——29——CVE-2013-0606—95.5%
——29——CVE-2013-7282—95.5%
——29——CVE-2022-1713—95.5%
——29——CVE-2012-4175—95.5%
——29——CVE-2022-46475—95.5%
——29——CVE-2001-1083—95.5%
——29——CVE-2022-28917—95.5%
——29——CVE-2005-2274—95.5%
——29——CVE-2020-27191—95.5%
——29——CVE-2018-12706—95.5%
——29——CVE-2009-0193—95.5%
——29——CVE-2013-0615—95.5%
——29——CVE-2018-15576—95.5%
——29——CVE-2019-7809—95.5%
——29——CVE-2014-7860—95.5%
——29——CVE-2008-3995—95.5%
——29——CVE-2019-0565—95.5%
——29——CVE-2026-5184—95.5%
——29——CVE-2021-29625—95.5%
——29——CVE-2015-5213—95.5%
——29——CVE-2001-0476—95.5%
——29——CVE-2010-3731—95.5%
——29——CVE-2019-8820—95.5%
——29——CVE-2009-1586—95.5%
——29——CVE-2021-43339—95.5%
——29——CVE-2021-37928—95.5%
——29——CVE-2018-19475—95.5%
——29——CVE-2018-71608.8 ALT95.5%
——29The Node.js inspector, in 6.x and later is vulnerable to a DNS rebinding attack which could be exploited to perform remote code execution. An attack is possible from malicious websites open in a web browser on the same computer, or another computer with network access to the computer running the Node.js process. A malicious website could use a DNS rebinding attack to trick the web browser to bypass same-origin-policy checks and to allow HTTP connections to localhost or to hosts on the local network. If a Node.js process with the debug port active is running on localhost or on a host on the local network, the malicious website could connect to it as a debugger, and get full code execution access.35dCVE-2007-3383—95.5%
——29——CVE-2002-0484—95.5%
——29——CVE-2007-1415—95.5%
——29——CVE-2017-8797—95.5%
——29——CVE-2018-1311—95.5%
——29——CVE-2005-1532—95.5%
——29——CVE-2017-8585—95.5%
——29——CVE-2005-0838—95.5%
——29——CVE-2005-3934—95.5%
——29——CVE-2013-45904.3 SEM95.5%
——29Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 allows attackers to obtain "Tomcat internals" information by leveraging the presence of an untrusted web application with a context.xml, web.xml, *.jspx, *.tagx, or *.tld XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.34dCVE-2002-2015—95.5%
——29——