Vulnerabilidades exploráveis hoje
413,805na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,594
- Alta22,456
- Média20,780
- Baixa2,126
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2018-11133—95.1%
——29——CVE-2021-24849—95.0%
——29——CVE-2006-4029—95.1%
——29——CVE-2014-8454—95.1%
——29——CVE-2008-2292—95.1%
——29——CVE-2010-1723—95.1%
——29——CVE-2002-1792—95.1%
——29——CVE-2015-4491—95.1%
——29——CVE-2019-5419—95.1%
——29——CVE-2011-2702—95.1%
——29——CVE-2006-3102—95.1%
——29——CVE-2018-11769—95.1%
——29——CVE-2013-3353—95.1%
——29——CVE-2007-1001—95.1%
——29——CVE-2013-4743—95.1%
——29——CVE-2022-257628.6 ALT95.1%
——29If a web application sends a WebSocket message concurrently with the WebSocket connection closing when running on Apache Tomcat 8.5.0 to 8.5.75 or Apache Tomcat 9.0.0.M1 to 9.0.20, it is possible that the application will continue to use the socket after it has been closed. The error handling triggered in this case could cause the a pooled object to be placed in the pool twice. This could result in subsequent connections using the same object concurrently which could result in data being returned to the wrong use and/or other errors.35dCVE-2009-1636—95.1%
——29——CVE-1999-1557—95.1%
——29——CVE-2002-1004—95.0%
——29——CVE-2014-4112—95.0%
——29——CVE-2000-1054—95.0%
——29——CVE-2008-0069—95.0%
——29——CVE-2019-8622—95.0%
——29——CVE-2019-8623—95.0%
——29——CVE-2009-0649—95.0%
——29——CVE-2016-1097—95.0%
——29——CVE-2010-3213—95.0%
——29——CVE-2005-1268—95.0%
——29——CVE-2016-1107—95.0%
——29——CVE-2000-051510.0 SEM95.0%
——29The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain privileges.34dCVE-2023-1545—95.0%
——29——CVE-2016-4116—95.0%
——29——CVE-2016-4110—95.0%
——29——CVE-2015-8357—95.0%
——29——CVE-2020-15623—95.0%
——29——CVE-2017-11858—95.0%
——29——CVE-2017-150959.8 CRÍ95.0%
——29A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously.35dCVE-2011-2895—95.0%
——29——CVE-2015-3313—95.0%
——29——CVE-2018-6951—95.0%
——29——