Vulnerabilidades exploráveis hoje
4,380na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,660
- Alta21,894
- Média21,304
- Baixa2,180
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2021-2394—99.5%
——30——CVE-2021-213466.1 MÉD99.5%
——30XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.30dCVE-2009-1979—99.5%
——30——CVE-2022-36099—99.5%
——30——CVE-2023-5631—99.5%
KEV—80Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability—CVE-2013-0081—99.5%
——30——CVE-2020-35951—99.5%
——30——CVE-2010-4417—99.5%
——30——CVE-2018-15811—99.5%
KEV—80DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability—CVE-2014-5073—99.5%
——30——CVE-2018-14728—99.5%
——30——CVE-2023-44221—99.5%
KEV—80SonicWall SMA100 Appliances OS Command Injection Vulnerability—CVE-2021-22145—99.5%
——30——CVE-2022-34721—99.5%
——30——CVE-2025-3102—99.5%
——30——CVE-2021-21616—99.5%
——30——CVE-2024-8504—99.5%
——30——CVE-2025-63899.8 CRÍ99.5%
——30The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeit_articles_pagination_callback() function. This is due to the function accepting user input and then passing that through call_user_func(). This makes it possible for unauthenticated attackers to execute code on the server which can be leveraged to inject backdoors or, for example, create new administrative user accounts.19dCVE-2023-29509—99.5%
——30——CVE-2022-2884—99.5%
——30——CVE-2010-2156—99.5%
——30——CVE-2023-36745—99.5%
——30——CVE-2007-0042—99.5%
——30——CVE-2022-42424—99.5%
——30——CVE-2022-42427—99.5%
——30——CVE-2022-42429—99.5%
——30——CVE-2022-42425—99.5%
——30——CVE-2021-41303—99.5%
——30——CVE-2026-250899.8 CRÍ99.5%
KEV—80Fortinet FortiSandbox OS Command Injection Vulnerability107dCVE-2013-1391—99.5%
——30——CVE-2025-29891—99.5%
——30——CVE-2023-4220—99.5%
——30——CVE-2024-36404—99.5%
——30——CVE-2014-7141—99.5%
——30——CVE-2021-416539.8 CRÍ99.5%
——30The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to remote code execution via a crafted payload in an IP address input field.121dCVE-2020-14179—99.5%
——30——CVE-2023-388368.8 ALT99.5%
——30File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header to bypass MIME type checks.121dCVE-2021-21668—99.5%
——30——CVE-2002-1142—99.5%
——30——CVE-2025-9491—99.5%
——30——