Vulnerabilidades exploráveis hoje
413,805na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,595
- Alta22,463
- Média20,783
- Baixa2,126
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2017-11766—95.2%
——29——CVE-2021-23138—95.2%
——29——CVE-2020-5786—95.2%
——29——CVE-2018-3693—95.2%
——29——CVE-2017-11905—95.2%
——29——CVE-2001-0852—95.2%
——29——CVE-2007-4737—95.2%
——29——CVE-2017-11154—95.2%
——29——CVE-2008-6953—95.2%
——29——CVE-2017-8639—95.2%
——29——CVE-2009-2620—95.2%
——29——CVE-2005-1740—95.2%
——29——CVE-2016-0734—95.2%
——29——CVE-2019-1010155—95.2%
——29——CVE-2015-1860—95.2%
——29——CVE-2003-0328—95.2%
——29——CVE-2017-0069—95.2%
——29——CVE-2017-11910—95.2%
——29——CVE-2017-8647—95.2%
——29——CVE-2026-403435.8 MÉD95.2%
——29free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.2, a fail-open request handling flaw in the UDR service causes the `/nudr-dr/v2/policy-data/subs-to-notify` POST handler to continue processing requests even after request body retrieval or deserialization errors. This may allow unintended creation of Policy Data notification subscriptions with invalid, empty, or partially processed input, depending on downstream processor behavior. As of time of publication, a patched version is not available.17dCVE-2022-26042—95.2%
——29——CVE-2026-1112187.2 ALT95.2%
——29Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Traffic Shaper Limiters privileges to execute root commands by tampering with the limiter number field. Attackers can submit a malicious hidden 'number' value when editing a limiter, then delete it so delete_queue() passes the unquoted value to dnctl via /bin/sh as root.23dCVE-2009-1684—95.2%
——29——CVE-2017-16924—95.2%
——29——CVE-2020-140608.1 ALT95.2%
——29FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache/drill).35dCVE-2022-21705—95.2%
——29——CVE-2023-6634—95.2%
——29——CVE-2017-10989—95.2%
——29——CVE-2011-2894—95.2%
——29——CVE-2022-46604—95.2%
——29——CVE-2013-2724—95.2%
——29——CVE-2017-3108—95.2%
——29——CVE-2009-1861—95.2%
——29——CVE-2024-20698—95.2%
——29——CVE-2020-9372—95.2%
——29——CVE-2018-5061—95.2%
——29——CVE-2015-1000005—95.2%
——29——CVE-2024-120857.5 ALT95.2%
——29A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.3dCVE-2008-4216—95.2%
——29——CVE-2017-11889—95.2%
——29——