Vulnerabilidades exploráveis hoje
413,805na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,595
- Alta22,463
- Média20,783
- Baixa2,126
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2008-0418—95.2%
——29——CVE-2000-10237.5 SEM95.2%
——29The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name information via the nsManager.cgi CGI program.50dCVE-2024-0920—95.2%
——29——CVE-2022-46604—95.2%
——29——CVE-2014-2783—95.2%
——29——CVE-2009-2688—95.2%
——29——CVE-2018-0768—95.2%
——29——CVE-2017-8499—95.2%
——29——CVE-2025-510885.3 MÉD95.2%
——29Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/WifiGuestSet. The manipulation of the argument `shareSpeed` leads to stack-based buffer overflow.131dCVE-2005-1740—95.2%
——29——CVE-2017-0069—95.2%
——29——CVE-2004-0480—95.2%
——29——CVE-2017-11930—95.2%
——29——CVE-2018-8840—95.2%
——29——CVE-2018-7184—95.2%
——29——CVE-2007-2776—95.2%
——29——CVE-2017-11913—95.2%
——29——CVE-2024-33603—95.2%
——29——CVE-2010-2307—95.2%
——29——CVE-2017-11905—95.2%
——29——CVE-2012-0788—95.2%
——29——CVE-2021-23138—95.2%
——29——CVE-2000-09775.0 SEM95.2%
——29mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file name in the "filename" parameter in a POST request, which is then sent by email to the address specified in the "email" parameter.51dCVE-2018-7318—95.2%
——29——CVE-2017-11908—95.2%
——29——CVE-2010-3039—95.2%
——29——CVE-2017-15088—95.2%
——29——CVE-2005-4135—95.2%
——29——CVE-2010-3133—95.2%
——29——CVE-2000-0612—95.2%
——29——CVE-2008-1833—95.2%
——29——CVE-2005-0094—95.2%
——29——CVE-2011-2894—95.2%
——29——CVE-2007-4737—95.2%
——29——CVE-2017-1000471—95.2%
——29——CVE-2008-6953—95.2%
——29——CVE-2017-8520—95.2%
——29——CVE-2020-253689.8 CRÍ95.2%
——29A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbitrary web scripts via shell metacharacters in the PrivateLogin field to Login.127dCVE-2007-2768—95.2%
——29——CVE-2020-5786—95.2%
——29——