Vulnerabilidades exploráveis hoje
4,380na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,660
- Alta21,894
- Média21,304
- Baixa2,180
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2021-30860—99.5%
KEV—80Apple Multiple Products Integer Overflow Vulnerability—CVE-2021-213445.3 MÉD99.5%
——30XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.30dCVE-2020-2140—99.5%
——30——CVE-2022-26937—99.5%
——30——CVE-2013-5486—99.5%
——30——CVE-2023-32007—99.5%
——30——CVE-2007-4880—99.5%
——30——CVE-2019-1358—99.5%
——30——CVE-2007-6388—99.5%
——30——CVE-2018-8065—99.5%
——30——CVE-2024-417309.8 CRÍ99.5%
——30In SAP BusinessObjects Business Intelligence
Platform, if Single Signed On is enabled on Enterprise authentication, an
unauthorized user can get a logon token using a REST endpoint. The attacker can
fully compromise the system resulting in High impact on confidentiality,
integrity and availability.3dCVE-2008-1232—99.5%
——30——CVE-2019-1937—99.5%
——30——CVE-2020-13563—99.5%
——30——CVE-2020-13564—99.5%
——30——CVE-2022-32429—99.5%
——30——CVE-2023-48085—99.5%
——30——CVE-2009-4140—99.5%
——30——CVE-2006-2447—99.5%
——30——CVE-2012-5959—99.5%
——30——CVE-2009-0837—99.5%
——30——CVE-2015-0016—99.5%
KEV—80Microsoft Windows TS WebProxy Directory Traversal Vulnerability—CVE-2017-1092—99.5%
——30——CVE-2021-21667—99.5%
——30——CVE-2015-1789—99.5%
——30——CVE-2010-2550—99.5%
——30——CVE-2006-4688—99.5%
——30——CVE-2004-0847—99.5%
——30——CVE-2023-29524—99.5%
——30——CVE-2011-2371—99.5%
——30——CVE-2007-0940—99.5%
——30——CVE-2023-40495—99.5%
——30——CVE-2016-3718—99.5%
KEV—80ImageMagick Server-Side Request Forgery (SSRF) Vulnerability—CVE-2025-48827—99.5%
——30——CVE-2022-1162—99.5%
——30——CVE-2010-2729—99.5%
——30——CVE-2016-3236—99.5%
——30——CVE-2018-9160—99.5%
——30——CVE-2026-7646010.0 CRÍ99.5%
KEV—80Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability30dCVE-2012-0391—99.5%
KEV—80Apache Struts 2 Improper Input Validation Vulnerability—