Vulnerabilidades exploráveis hoje
414,784na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,781
Novos KEV · 24H0
Exploit Today ≥ 701,709
Distribuição · última janela
- Crítica5,286
- Alta20,850
- Média19,532
- Baixa2,048
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2020-7167—94.2%
——28——CVE-2008-4729—94.2%
——28——CVE-2015-61176.1 MÉD94.2%
——28Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct cross-site scripting (XSS) attacks by modifying a webpart, aka "Microsoft SharePoint Security Feature Bypass," a different vulnerability than CVE-2016-0011.31dCVE-2017-3086—94.2%
——28——CVE-2017-16384—94.2%
——28——CVE-2011-2201—94.2%
——28——CVE-2021-30639—94.2%
——28——CVE-2025-4999—94.2%
——28——CVE-2021-30355—94.2%
——28——CVE-2009-3812—94.2%
——28——CVE-2014-9436—94.2%
——28——CVE-2005-1693—94.2%
——28——CVE-2007-2396—94.2%
——28——CVE-2021-20588—94.2%
——28——CVE-2018-2603—94.2%
——28——CVE-2010-2932—94.2%
——28——CVE-2016-8017—94.2%
——28——CVE-2004-1381—94.2%
——28——CVE-2009-0135—94.2%
——28——CVE-2020-36705—94.2%
——28——CVE-2017-16363—94.2%
——28——CVE-2016-0704—94.2%
——28——CVE-2020-7171—94.2%
——28——CVE-2017-14596—94.2%
——28——CVE-2015-8855—94.2%
——28——CVE-2024-30034—94.2%
——28——CVE-2025-342679.9 CRÍ94.2%
——28Flowise v3.0.1 < 3.0.8 and all versions after with 'ALLOW_BUILTIN_DEP' enabled contain an authenticated remote code execution vulnerability and node VM sandbox escape due to insecure use of integrated modules (Puppeteer and Playwright) within the nodevm execution environment. An authenticated attacker able to create or run a tool that leverages Puppeteer/Playwright can specify attacker-controlled browser binary paths and parameters. When the tool executes, the attacker-controlled executable/parameters are run on the host and circumvent the intended nodevm sandbox restrictions, resulting in execution of arbitrary code in the context of the host. This vulnerability was incorrectly assigned as a duplicate CVE-2025-26319 by the developers and should be considered distinct from that identifier.38dCVE-2012-0231—94.2%
——28——CVE-2002-2368—94.2%
——28——CVE-2006-1724—94.2%
——28——CVE-2006-0658—94.2%
——28——CVE-2026-412769.8 CRÍ94.2%
——28Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, this vulnerability allows remote attackers to bypass authentication on affected installations of FlowiseAI Flowise. Authentication is not required to exploit this vulnerability. The specific flaw exists within the resetPassword method of the AccountService class. There is no check performed to ensure that a password reset token has actually been generated for a user account. By default the value of the reset token stored in a users account is null, or an empty string if they've reset their password before. An attacker with knowledge of the user's email address can submit a request to the "/api/v1/account/reset-password" endpoint containing a null or empty string reset token value and reset that user's password to a value of their choosing. This vulnerability is fixed in 3.1.0.19dCVE-2018-13980—94.2%
——28——CVE-2013-4093—94.2%
——28——CVE-2005-1792—94.2%
——28——CVE-2006-6445—94.2%
——28——CVE-2019-1361—94.2%
——28——CVE-2010-4025—94.2%
——28——CVE-2020-7142—94.2%
——28——CVE-2014-1478—94.2%
——28——