Vulnerabilidades exploráveis hoje
414,784na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,781
Novos KEV · 24H0
Exploit Today ≥ 701,709
Distribuição · última janela
- Crítica5,286
- Alta20,850
- Média19,532
- Baixa2,048
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2008-6843—94.0%
——28——CVE-2010-3758—94.0%
——28——CVE-2018-6889—94.0%
——28——CVE-2025-14879—94.0%
——28——CVE-2018-8941—94.0%
——28——CVE-2008-7012—94.0%
——28——CVE-2025-14558—94.0%
——28——CVE-2019-7231—94.0%
——28——CVE-2011-0558—94.0%
——28——CVE-2010-2006—94.0%
——28——CVE-2021-377147.5 ALT94.0%
——28jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinitely until cancelled), to complete more slowly than usual, or to throw an unexpected exception. This effect may support a denial of service attack. The issue is patched in version 1.14.2. There are a few available workarounds. Users may rate limit input parsing, limit the size of inputs based on system resources, and/or implement thread watchdogs to cap and timeout parse runtimes.38dCVE-2020-25705—94.0%
——28——CVE-2006-6661—94.0%
——28——CVE-2021-27247—94.0%
——28——CVE-2020-10948—94.0%
——28——CVE-2019-50188.1 ALT94.0%
——28An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0. A specially crafted SQL command can cause a use after free vulnerability, potentially resulting in remote code execution. An attacker can send a malicious SQL command to trigger this vulnerability.32dCVE-2008-0014—94.0%
——28——CVE-2025-10324—94.0%
——28——CVE-2007-5636—94.0%
——28——CVE-2017-12581—94.0%
——28——CVE-2020-10893—94.0%
——28——CVE-2018-71677.5 ALT94.0%
——28Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could result in a Denial of Service. In order to address this vulnerability, the implementations of Buffer.alloc() and Buffer.fill() were updated so that they zero fill instead of hanging in these cases. All versions of Node.js 6.x (LTS "Boron"), 8.x (LTS "Carbon"), and 9.x are vulnerable. All versions of Node.js 10.x (Current) are NOT vulnerable.37dCVE-2016-10081—94.0%
——28——CVE-2000-0825—94.0%
——28——CVE-1999-0285—94.0%
——28——CVE-2007-1851—94.0%
——28——CVE-2002-1986—94.0%
——28——CVE-2002-1885—94.0%
——28——CVE-2016-1997—94.0%
——28——CVE-2009-4665—94.0%
——28——CVE-2008-0013—94.0%
——28——CVE-2015-8740—94.0%
——28——CVE-2022-42040—94.0%
——28——CVE-2009-0385—94.0%
——28——CVE-2015-8309—94.0%
——28——CVE-2015-8435—94.0%
——28——CVE-2008-2437—94.0%
——28——CVE-2010-1405—94.0%
——28——CVE-2019-9638—94.0%
——28——CVE-2013-0429—94.0%
——28——