Vulnerabilidades exploráveis hoje
4,380na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,659
- Alta21,892
- Média21,295
- Baixa2,178
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2014-3804—99.4%
——30——CVE-2021-4045—99.4%
——30——CVE-2013-3623—99.4%
——30——CVE-2004-0204—99.4%
——30——CVE-2024-536779.8 CRÍ99.4%
——30File upload logic in Apache Struts is flawed. An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution.
This issue affects Apache Struts: from 2.0.0 before 6.4.0.
Users are recommended to upgrade to version 6.4.0 at least and migrate to the new file upload mechanism https://struts.apache.org/core-developers/file-upload . If you are not using an old file upload logic based on FileuploadInterceptor your application is safe.
You can find more details in https://cwiki.apache.org/confluence/display/WW/S2-0673dCVE-2023-32985—99.4%
——30——CVE-2004-1134—99.4%
——30——CVE-2021-213455.8 MÉD99.4%
——30XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker who has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.30dCVE-2024-0637—99.4%
——30——CVE-2004-0751—99.4%
——30——CVE-2023-3460—99.4%
——30——CVE-2006-6076—99.4%
——30——CVE-2016-1560—99.4%
——30——CVE-2023-36933—99.4%
——30——CVE-2019-12169—99.4%
——30——CVE-2009-1943—99.4%
——30——CVE-2021-24917—99.4%
——30——CVE-2024-491129.8 CRÍ99.4%
——30Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability3dCVE-2023-2917—99.4%
——30——CVE-2017-8729—99.4%
——30——CVE-2017-8740—99.4%
——30——CVE-2006-7196—99.4%
——30——CVE-2023-27482—99.4%
——30——CVE-2024-20697—99.4%
——30——CVE-2014-8684—99.4%
——30——CVE-2019-16724—99.4%
——30——CVE-2021-33564—99.4%
——30——CVE-2014-9727—99.4%
——30——CVE-2017-8636—99.4%
——30——CVE-2019-2215—99.4%
KEV—80Android Kernel Use-After-Free Vulnerability—CVE-2014-0514—99.4%
——30——CVE-2004-2271—99.4%
——30——CVE-2025-300668.6 ALT99.4%
KEV—80tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability44dCVE-2019-8903—99.4%
——30——CVE-2021-30117—99.4%
——30——CVE-2025-203339.9 CRÍ99.4%
KEV—80Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability19dCVE-2001-0236—99.4%
——30——CVE-2012-1856—99.4%
KEV—80Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability—CVE-2021-1472—99.4%
——30——CVE-2007-4320—99.4%
——30——