Vulnerabilidades exploráveis hoje
409,857na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,527
- Alta21,042
- Média20,196
- Baixa2,086
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2018-7358—99.8%
——30——CVE-2016-2776—99.8%
——30——CVE-2018-1000600—99.8%
——30——CVE-2014-2623—99.8%
——30——CVE-2023-21547—99.8%
——30——CVE-2023-27253—99.8%
——30——CVE-2020-8654—99.8%
——30——CVE-2020-13851—99.8%
——30——CVE-2019-5420—99.8%
——30——CVE-2009-0545—99.8%
——30——CVE-2016-3510—99.8%
——30——CVE-2023-2947—99.8%
——30——CVE-2019-20501—99.8%
——30——CVE-2024-25600—99.8%
——30——CVE-2024-5276—99.8%
——30——CVE-2023-6875—99.8%
——30——CVE-2014-0054—99.8%
——30——CVE-2023-45288—99.8%
——30——CVE-2018-11759—99.8%
——30——CVE-2000-0402—99.8%
——30——CVE-2023-37582—99.8%
——30——CVE-2018-1207—99.8%
——30——CVE-2024-11320—99.8%
——30——CVE-2022-31137—99.8%
——30——CVE-2021-25921—99.8%
——30——CVE-2014-0569—99.8%
——30——CVE-2017-56459.8 CRÍ99.8%
——30In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.30dCVE-2013-1359—99.8%
——30——CVE-2010-0219—99.8%
——30——CVE-2024-299729.8 CRÍ99.8%
——30** UNSUPPORTED WHEN ASSIGNED **
The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a crafted HTTP POST request.4dCVE-2023-47218—99.8%
——30——CVE-2012-1426—99.8%
——30——CVE-2020-17132—99.8%
——30——CVE-2025-10948.1 ALT99.8%
——30Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the function result to construct input to psql, the PostgreSQL interactive terminal. Similarly, improper neutralization of quoting syntax in PostgreSQL command line utility programs allows a source of command line arguments to achieve SQL injection when client_encoding is BIG5 and server_encoding is one of EUC_TW or MULE_INTERNAL. Versions before PostgreSQL 17.3, 16.7, 15.11, 14.16, and 13.19 are affected.4dCVE-2023-37462—99.8%
——30——CVE-2008-0226—99.8%
——30——CVE-2011-3923—99.8%
——30——CVE-2019-11479—99.8%
——30——CVE-2016-6600—99.8%
——30——CVE-2020-27871—99.8%
——30——