Vulnerabilidades exploráveis hoje
413,805na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,595
- Alta22,463
- Média20,783
- Baixa2,126
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2018-8305—95.1%
——29——CVE-2009-4501—95.1%
——29——CVE-2017-2987—95.1%
——29——CVE-1999-0670—95.1%
——29——CVE-2019-10989—95.1%
——29——CVE-2014-9144—95.1%
——29——CVE-2009-1830—95.1%
——29——CVE-2008-6833—95.1%
——29——CVE-2008-4323—95.1%
——29——CVE-2002-2314—95.1%
——29——CVE-2014-6389—95.1%
——29——CVE-2020-8858—95.1%
——29——CVE-2008-0379—95.1%
——29——CVE-2026-408717.2 ALT95.1%
——29mailcow: dockerized is an open source groupware/email suite based on docker. Versions prior to 2026-03b have a second-order SQL injection vulnerability in the quarantine_category field via the Mailcow API. The /api/v1/add/mailbox endpoint stores quarantine_category without validation or sanitization. This value is later used by quarantine_notify.py, which constructs SQL queries using unsafe % string formatting instead of parameterized queries. This results in a delayed (second-order) SQL injection when the quarantine notification job executes, allowing an attacker to inject arbitrary SQL. Using a UNION SELECT, sensitive data (e.g., admin credentials) can be exfiltrated and rendered inside quarantine notification emails. Version 2026-03b fixes the vulnerability.17dCVE-2012-5209—95.1%
——29——CVE-2012-5680—95.1%
——29——CVE-2013-0649—95.1%
——29——CVE-2019-12401—95.1%
——29——CVE-2019-7798—95.1%
——29——CVE-2019-12170—95.1%
——29——CVE-2020-10564—95.1%
——29——CVE-2012-3263—95.1%
——29——CVE-2008-0396—95.1%
——29——CVE-2002-0058—95.1%
——29——CVE-2018-11505—95.1%
——29——CVE-2010-1132—95.1%
——29——CVE-2010-1176—95.1%
——29——CVE-2014-7981—95.1%
——29——CVE-2017-11838—95.1%
——29——CVE-2016-8863—95.1%
——29——CVE-2003-0564—95.1%
——29——CVE-2018-12812—95.1%
——29——CVE-2011-4536—95.1%
——29——CVE-2014-0242—95.1%
——29——CVE-2022-25106—95.1%
——29——CVE-2000-09065.0 SEM95.1%
——29Directory traversal vulnerability in Moreover.com cached_feed.cgi script version 4.July.00 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the category or format parameters.51dCVE-2003-0651—95.1%
——29——CVE-2000-0508—95.1%
——29——CVE-2015-1482—95.1%
——29——CVE-2017-11837—95.1%
——29——