Vulnerabilidades exploráveis hoje
414,772na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,781
Novos KEV · 24H0
Exploit Today ≥ 701,709
Distribuição · última janela
- Crítica5,285
- Alta20,849
- Média19,529
- Baixa2,047
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-584559.8 CRÍ94.9%
——28Dockwatch through 0.6.567 contains an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary shell commands by exploiting a missing exit() after an authentication redirect in loader.php combined with unsanitized input passed to shell_exec() in ajax/compose.php. Attackers can seed the required session flag through the incomplete auth check, then inject arbitrary commands via the composePath POST parameter in the composePull action to achieve full host compromise, facilitated by the standard deployment mounting of the Docker socket.20dCVE-2016-67977.5 ALT94.9%
——28The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not limit web application access to global JNDI resources to those resources explicitly linked to the web application. Therefore, it was possible for a web application to access any global JNDI resource whether an explicit ResourceLink had been configured or not.37dCVE-2024-21437—94.9%
——28——CVE-2018-7124—94.9%
——28——CVE-2008-5062—94.9%
——28——CVE-2006-3532—94.9%
——28——CVE-2022-29361—94.9%
——28——CVE-2002-1656—94.9%
——28——CVE-2000-0133—94.9%
——28——CVE-2019-1001—94.9%
——28——CVE-2019-143799.8 CRÍ94.9%
——28SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), leading to remote code execution.37dCVE-2013-3344—94.9%
——28——CVE-2017-11813—94.9%
——28——CVE-2008-0763—94.9%
——28——CVE-2020-28037—94.9%
——28——CVE-2022-40967—94.9%
——28——CVE-2009-4635—94.9%
——28——CVE-2025-5695—94.9%
——28——CVE-2013-6271—94.9%
——28——CVE-2017-76744.3 MÉD94.9%
——28The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did not add an HTTP Vary header indicating that the response varies depending on Origin. This permitted client and server side cache poisoning in some circumstances.30dCVE-2022-1057—94.9%
——28——CVE-2004-2519—94.9%
——28——CVE-2007-2891—94.9%
——28——CVE-2012-4964—94.9%
——28——CVE-2018-7316—94.9%
——28——CVE-2007-5156—94.9%
——28——CVE-2025-53786—94.9%
——28——CVE-2019-9766—94.9%
——28——CVE-2024-8128—94.9%
——28——CVE-2021-41833—94.9%
——28——CVE-2006-2059—94.9%
——28——CVE-2008-2888—94.9%
——28——CVE-2007-2317—94.9%
——28——CVE-2018-0924—94.9%
——28——CVE-2022-43606—94.9%
——28——CVE-2022-41953—94.9%
——28——CVE-2008-3317—94.9%
——28——CVE-2014-4912—94.9%
——28——CVE-2009-1570—94.9%
——28——CVE-2020-17510—94.9%
——28——