Vulnerabilidades exploráveis hoje
414,772na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,781
Novos KEV · 24H0
Exploit Today ≥ 701,709
Distribuição · última janela
- Crítica5,285
- Alta20,846
- Média19,528
- Baixa2,047
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2024-5655—94.6%
——28——CVE-2007-6021—94.6%
——28——CVE-2010-3276—94.6%
——28——CVE-2001-1339—94.6%
——28——CVE-2000-10025.0 SEM94.6%
——28POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to determine valid email addresses on the server for SPAM attacks.53dCVE-2023-5301—94.6%
——28——CVE-2005-2033—94.6%
——28——CVE-2007-0511—94.6%
——28——CVE-2007-1074—94.6%
——28——CVE-2020-29599—94.6%
——28——CVE-2001-0780—94.5%
——28——CVE-2019-0884—94.6%
——28——CVE-2010-1281—94.6%
——28——CVE-2002-1991—94.6%
——28——CVE-2016-3986—94.6%
——28——CVE-2011-4450—94.6%
——28——CVE-2011-2109—94.6%
——28——CVE-2014-8949—94.6%
——28——CVE-2000-1092—94.6%
——28——CVE-2008-2326—94.6%
——28——CVE-2026-54069—94.6%
——28SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, SiYuan Note's kernel HTTP server unconditionally trusts all chrome-extension:// origins, granting RoleAdministrator access to every installed browser extension without any authentication. Combined with the default empty AccessAuthCode on desktop installs, any Chrome/Chromium extension -- including a compromised legitimate extension via supply chain attack -- can make fully authenticated admin API calls to the SiYuan kernel at 127.0.0.1:6806, enabling data exfiltration, stored XSS injection, and configuration tampering. This vulnerability is fixed in 3.7.0.20dCVE-2018-71617.5 ALT94.6%
——28All versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of service (DoS) by causing a node server providing an http2 server to crash. This can be accomplished by interacting with the http2 server in a manner that triggers a cleanup bug where objects are used in native code after they are no longer available. This has been addressed by updating the http2 implementation.37dCVE-2024-28025—94.5%
——28——CVE-2000-0183—94.6%
——28——CVE-2011-3143—94.6%
——28——CVE-2015-5074—94.6%
——28——CVE-2004-1643—94.6%
——28——CVE-2016-3607—94.6%
——28——CVE-2004-0979—94.6%
——28——CVE-2021-369368.8 ALT94.6%
——28Windows Print Spooler Remote Code Execution Vulnerability97dCVE-2006-0263—94.6%
——28——CVE-2016-5766—94.6%
——28——CVE-2021-43116—94.6%
——28——CVE-2014-9262—94.6%
——28——CVE-2017-17761—94.6%
——28——CVE-2014-8485—94.6%
——28——CVE-2016-10191—94.6%
——28——CVE-2024-8210—94.6%
——28——CVE-2011-4221—94.6%
——28——CVE-2006-7236—94.6%
——28——