Vulnerabilidades exploráveis hoje
409,857na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,527
- Alta21,042
- Média20,196
- Baixa2,086
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2007-1036—99.7%
——30——CVE-2009-2526—99.7%
——30——CVE-2019-14470—99.7%
——30——CVE-2009-2521—99.7%
——30——CVE-2021-29441—99.7%
——30——CVE-2019-13372—99.7%
——30——CVE-2023-21931—99.7%
——30——CVE-2024-10400—99.7%
——30——CVE-2020-7980—99.7%
——30——CVE-2023-1698—99.7%
——30——CVE-2023-48646—99.7%
——30——CVE-2009-2765—99.7%
——30——CVE-2014-00507.5 ALT99.7%
——30MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.31dCVE-2020-27955—99.7%
——30——CVE-2023-46262—99.7%
——30——CVE-2015-3090—99.7%
——30——CVE-2021-34996—99.7%
——30——CVE-2016-0800—99.7%
——30——CVE-2021-20034—99.7%
——30——CVE-2014-4511—99.7%
——30——CVE-2020-2230—99.7%
——30——CVE-2019-7254—99.7%
——30——CVE-2023-38096—99.7%
——30——CVE-2023-44412—99.7%
——30——CVE-2018-0886—99.7%
——30——CVE-2012-5958—99.7%
——30——CVE-2023-25762—99.7%
——30——CVE-2022-36980—99.7%
——30——CVE-2018-16763—99.7%
——30——CVE-2021-213515.4 MÉD99.7%
——30XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.31dCVE-2017-9828—99.7%
——30——CVE-2015-8605—99.7%
——30——CVE-2017-5817—99.7%
——30——CVE-2006-0003—99.7%
——30——CVE-2011-4885—99.7%
——30——CVE-2024-281825.3 MÉD99.7%
——30nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync. This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.24dCVE-2015-6128—99.7%
——30——CVE-2023-26469—99.7%
——30——CVE-2021-26030—99.7%
——30——CVE-2024-10915—99.7%
——30——