Vulnerabilidades exploráveis hoje
414,772na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,781
Novos KEV · 24H0
Exploit Today ≥ 701,709
Distribuição · última janela
- Crítica5,285
- Alta20,849
- Média19,529
- Baixa2,047
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2006-0881—94.7%
——28——CVE-2026-6204—94.7%
——28——CVE-2006-4424—94.7%
——28——CVE-2019-96369.8 CRÍ94.7%
——28Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (credentials, cookies, etc. that are cached against a given hostname). The components are: urllib.parse.urlsplit, urllib.parse.urlparse. The attack vector is: A specially crafted URL could be incorrectly parsed to locate cookies or authentication data and send that information to a different host than when parsed correctly. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.7, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.3, v3.7.3rc1, v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.32dCVE-2015-6750—94.7%
——28——CVE-2009-3637—94.7%
——28——CVE-2017-15990—94.7%
——28——CVE-2005-3353—94.7%
——28——CVE-2001-0011—94.7%
——28——CVE-2026-428246.5 MÉD94.7%
——28Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.115dCVE-2007-3606—94.7%
——28——CVE-2013-1489—94.7%
——28——CVE-2004-0040—94.7%
——28——CVE-2018-15353—94.7%
——28——CVE-2012-0937—94.7%
——28——CVE-2009-5067—94.7%
——28——CVE-2006-3376—94.7%
——28——CVE-2011-2963—94.7%
——28——CVE-2014-10010—94.7%
——28——CVE-2013-3615—94.7%
——28——CVE-2010-0642—94.7%
——28——CVE-2018-7532—94.7%
——28——CVE-2017-3060—94.7%
——28——CVE-2015-8821—94.7%
——28——CVE-2022-25869—94.7%
——28——CVE-2008-0017—94.7%
——28——CVE-2018-6126—94.7%
——28——CVE-2011-4694—94.7%
——28——CVE-2007-2519—94.7%
——28——CVE-2002-1581—94.7%
——28——CVE-2000-09305.0 SEM94.7%
——28Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch.53dCVE-2013-2619—94.7%
——28——CVE-2003-1181—94.7%
——28——CVE-2017-0569—94.7%
——28——CVE-2017-8804—94.7%
——28——CVE-2008-4134—94.7%
——28——CVE-2022-36923—94.7%
——28——CVE-2025-3328—94.7%
——28——CVE-2005-3294—94.7%
——28——CVE-2019-11509—94.7%
——28——