Vulnerabilidades exploráveis hoje
413,805na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,601
- Alta22,481
- Média20,829
- Baixa2,126
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2007-2540—95.4%
——29——CVE-2004-0129—95.4%
——29——CVE-2018-4954—95.4%
——29——CVE-2018-1002206—95.4%
——29——CVE-2012-4180—95.4%
——29——CVE-2026-7567—95.4%
——29——CVE-2011-0599—95.4%
——29——CVE-2020-1425—95.4%
——29——CVE-2013-3986—95.4%
——29——CVE-2020-0910—95.4%
——29——CVE-2019-1107—95.4%
——29——CVE-2012-0298—95.4%
——29——CVE-2015-1000012—95.4%
——29——CVE-2023-23757.2 ALT95.4%
——29A weakness has been identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. Impacted is an unknown function of the component Web Management Interface. Executing a manipulation of the argument src can lead to command injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The presence of this vulnerability remains uncertain at this time. The vendor position is that post-authentication issues are not accepted as vulnerabilities.126dCVE-2001-0009—95.4%
——29——CVE-2021-1543—95.4%
——29——CVE-2009-1392—95.4%
——29——CVE-2020-13159—95.4%
——29——CVE-2025-20702—95.4%
——29——CVE-2009-2344—95.4%
——29——CVE-2018-9038—95.4%
——29——CVE-2022-26149—95.4%
——29——CVE-2019-12461—95.4%
——29——CVE-2015-3075—95.4%
——29——CVE-2007-4821—95.4%
——29——CVE-2026-28287—95.4%
——29——CVE-2024-45440—95.4%
——29——CVE-2010-5028—95.4%
——29——CVE-2021-26937—95.4%
——29——CVE-2017-2464—95.4%
——29——CVE-2004-0039—95.4%
——29——CVE-2007-0635—95.4%
——29——CVE-2016-1328—95.4%
——29——CVE-2020-11457—95.4%
——29——CVE-2008-6922—95.4%
——29——CVE-2025-343227.2 ALT95.4%
——29Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability in the experimental 'Natural Language Queries' feature. When this feature is configured, certain user-controlled settings—including model selection and connection parameters—are read from the global configuration and concatenated into a shell command that is executed via shell_exec() without proper input handling or command-line argument sanitation. An authenticated user with access to the 'Global Settings' page can supply crafted values in these fields to inject additional shell commands, resulting in arbitrary command execution as the 'www-data' user and compromise of the Log Server host.36dCVE-2009-4219—95.4%
——29——CVE-2011-3357—95.4%
——29——CVE-2024-1670—95.4%
——29——CVE-2010-4301—95.4%
——29——