Vulnerabilidades exploráveis hoje
414,772na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,781
Novos KEV · 24H0
Exploit Today ≥ 701,709
Distribuição · última janela
- Crítica5,285
- Alta20,849
- Média19,529
- Baixa2,047
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2008-5541—94.6%
——28——CVE-1999-0561—94.6%
——28——CVE-2026-1457—94.6%
——28——CVE-2024-2991—94.6%
——28——CVE-2017-11265—94.6%
——28——CVE-2020-9631—94.6%
——28——CVE-2006-1688—94.6%
——28——CVE-2021-27708—94.6%
——28——CVE-2020-11034—94.6%
——28——CVE-2009-1372—94.6%
——28——CVE-2022-23935—94.6%
——28——CVE-2010-2785—94.6%
——28——CVE-2021-201908.1 ALT94.6%
——28A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.114dCVE-2017-15921—94.6%
——28——CVE-2014-01194.3 SEM94.6%
——28Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to (1) read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, or (2) read files associated with different web applications on a single Tomcat instance via a crafted web application.31dCVE-2004-0811—94.6%
——28——CVE-2008-3869—94.6%
——28——CVE-2017-11246—94.6%
——28——CVE-1999-1199—94.6%
——28——CVE-2006-0328—94.6%
——28——CVE-2017-11248—94.6%
——28——CVE-2019-15505—94.6%
——28——CVE-2017-11256—94.6%
——28——CVE-2007-2930—94.6%
——28——CVE-2010-1214—94.6%
——28——CVE-2018-0315—94.6%
——28——CVE-2016-4361—94.6%
——28——CVE-2016-10159—94.6%
——28——CVE-2025-53475—94.6%
——28——CVE-2023-23737.2 ALT94.6%
——28A vulnerability was identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This vulnerability affects unknown code of the component Web Management Interface. Such manipulation of the argument ecn-up leads to command injection. The attack may be performed from remote. The exploit is publicly available and might be used. The actual existence of this vulnerability is currently in question. The vendor position is that post-authentication issues are not accepted as vulnerabilities.129dCVE-2017-11243—94.6%
——28——CVE-2017-11245—94.6%
——28——CVE-2017-11258—94.6%
——28——CVE-2021-40469—94.6%
——28——CVE-2022-0783—94.6%
——28——CVE-2013-6435—94.6%
——28——CVE-2025-50688—94.6%
——28——CVE-2016-0859—94.6%
——28——CVE-2017-12163—94.6%
——28——CVE-2013-1807—94.6%
——28——