Vulnerabilidades exploráveis hoje
413,805na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,599
- Alta22,477
- Média20,790
- Baixa2,126
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2020-8265—95.4%
——29——CVE-2016-2381—95.4%
——29——CVE-2007-5476—95.4%
——29——CVE-2018-5057—95.4%
——29——CVE-2015-3047—95.4%
——29——CVE-2012-5285—95.4%
——29——CVE-2019-12422—95.4%
——29——CVE-2015-3301—95.4%
——29——CVE-2016-0755—95.4%
——29——CVE-2008-4788—95.4%
——29——CVE-2026-581389.8 CRÍ95.4%
——29Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS commands by submitting inline workflow definitions containing malicious JavaScript or Python expressions to the workflow API endpoint prior to authentication. Attackers can exploit unsandboxed GraalVM evaluators configured with HostAccess.ALL or allowAllAccess(true) through INLINE, LAMBDA, DO_WHILE, and SWITCH task types to invoke arbitrary system commands via Java reflection or direct subprocess calls.18dCVE-2002-0801—95.4%
——29——CVE-2017-11120—95.4%
——29——CVE-2005-4211—95.4%
——29——CVE-2009-0813—95.4%
——29——CVE-2015-5209—95.4%
——29——CVE-2009-0839—95.3%
——29——CVE-2016-6301—95.3%
——29——CVE-2012-1011—95.3%
——29——CVE-2025-53143—95.3%
——29——CVE-2013-4475—95.3%
——29——CVE-2016-9369—95.3%
——29——CVE-2009-1382—95.3%
——29——CVE-2019-2107—95.3%
——29——CVE-2023-49007—95.3%
——29——CVE-2009-0677—95.3%
——29——CVE-2010-2088—95.3%
——29——CVE-2010-2521—95.3%
——29——CVE-2013-1450—95.3%
——29——CVE-2010-2008—95.3%
——29——CVE-2011-2457—95.3%
——29——CVE-2020-25495—95.3%
——29——CVE-2024-56337—95.3%
——29——CVE-2013-3977—95.3%
——29——CVE-2006-4126—95.3%
——29——CVE-2009-2989—95.3%
——29——CVE-2014-8680—95.3%
——29——CVE-2016-10043—95.3%
——29——CVE-2012-0775—95.3%
——29——CVE-2005-4272—95.3%
——29——