PULSE
FEED
CVE Watch409.857 no arquivo completo

Vulnerabilidades exploráveis hoje

409,857na visualização atual

Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.

No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700

Distribuição · última janela

  • Crítica
    5,527
  • Alta
    21,042
  • Média
    20,196
  • Baixa
    2,086
Filtros
Filtros

Janela

Severidade

Filtros

Vulnerabilidades2,441–2,480 · 409,857
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2007-1036—
99.7%
——30——
CVE-2009-2526—
99.7%
——30——
CVE-2019-14470—
99.7%
——30——
CVE-2009-2521—
99.7%
——30——
CVE-2021-29441—
99.7%
——30——
CVE-2019-13372—
99.7%
——30——
CVE-2023-21931—
99.7%
——30——
CVE-2024-10400—
99.7%
——30——
CVE-2020-7980—
99.7%
——30——
CVE-2023-1698—
99.7%
——30——
CVE-2023-48646—
99.7%
——30——
CVE-2009-2765—
99.7%
——30——
CVE-2014-00507.5 ALT
99.7%
——30MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.31d
CVE-2020-27955—
99.7%
——30——
CVE-2023-46262—
99.7%
——30——
CVE-2015-3090—
99.7%
——30——
CVE-2021-34996—
99.7%
——30——
CVE-2016-0800—
99.7%
——30——
CVE-2021-20034—
99.7%
——30——
CVE-2014-4511—
99.7%
——30——
CVE-2020-2230—
99.7%
——30——
CVE-2019-7254—
99.7%
——30——
CVE-2023-38096—
99.7%
——30——
CVE-2023-44412—
99.7%
——30——
CVE-2018-0886—
99.7%
——30——
CVE-2012-5958—
99.7%
——30——
CVE-2023-25762—
99.7%
——30——
CVE-2022-36980—
99.7%
——30——
CVE-2018-16763—
99.7%
——30——
CVE-2021-213515.4 MÉD
99.7%
——30XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.31d
CVE-2017-9828—
99.7%
——30——
CVE-2015-8605—
99.7%
——30——
CVE-2017-5817—
99.7%
——30——
CVE-2006-0003—
99.7%
——30——
CVE-2011-4885—
99.7%
——30——
CVE-2024-281825.3 MÉD
99.7%
——30nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync. This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.24d
CVE-2015-6128—
99.7%
——30——
CVE-2023-26469—
99.7%
——30——
CVE-2021-26030—
99.7%
——30——
CVE-2024-10915—
99.7%
——30——