Vulnerabilidades exploráveis hoje
413,805na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,596
- Alta22,468
- Média20,787
- Baixa2,126
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-29058—95.3%
——29——CVE-2002-0737—95.3%
——29——CVE-2021-34859—95.3%
——29——CVE-2008-5642—95.3%
——29——CVE-2021-41382—95.3%
——29——CVE-2012-2399—95.3%
——29——CVE-2026-2956—95.3%
——29——CVE-2014-8445—95.3%
——29——CVE-2008-3286—95.3%
——29——CVE-2015-1630—95.3%
——29——CVE-2012-4750—95.3%
——29——CVE-2026-672768.1 ALT95.3%
——29RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the exponent. Because signature verification uses the client-supplied key, an attacker knowing an authorized RSA modulus can supply a key with exponent one, forge a valid signature, and open an SSH command channel as the target user without the private key.This issue affects only 7.x branch was fixed in versions: 7.23.4 (Long-term) and 7.24.2 (Stable)48dCVE-2024-279039.8 CRÍ95.3%
——29OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used to interact with the privileged OpenVPN interactive service.9dCVE-2025-644478.1 ALT95.3%
——29A reliance on cookies without validation and integrity checking vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an unauthenticated attacker to execute arbitrary operations on the system via crafted HTTP or HTTPS request via forged cookies, requiring prior knowledge of the FortiWeb serial number.48dCVE-2008-3293—95.3%
——29——CVE-2026-81886.3 MÉD95.3%
——29A vulnerability has been found in Wavlink NU516U1 M16U1_V240425. Affected is the function change_wifi_password of the file /cgi-bin/adm.cgi. The manipulation of the argument wl_channel/wl_Pass/EncrypType leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.112dCVE-2024-43639—95.3%
——29——CVE-2013-3541—95.3%
——29——CVE-2014-8459—95.3%
——29——CVE-2017-6341—95.3%
——29——CVE-2006-5278—95.3%
——29——CVE-2013-6890—95.3%
——29——CVE-2006-2349—95.3%
——29——CVE-2001-1291—95.3%
——29——CVE-2007-2363—95.3%
——29——CVE-2011-0761—95.3%
——29——CVE-2017-8672—95.3%
——29——CVE-2017-15644—95.3%
——29——CVE-2018-5954—95.3%
——29——CVE-2020-27733—95.3%
——29——CVE-2007-2872—95.3%
——29——CVE-2011-2465—95.3%
——29——CVE-2012-4982—95.3%
——29——CVE-2011-0603—95.3%
——29——CVE-2008-0485—95.3%
——29——CVE-2010-0313—95.3%
——29——CVE-2021-24527—95.3%
——29——CVE-2017-3118—95.3%
——29——CVE-2012-6637—95.3%
——29——CVE-2006-6504—95.3%
——29——