Vulnerabilidades exploráveis hoje
414,784na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,781
Novos KEV · 24H0
Exploit Today ≥ 701,709
Distribuição · última janela
- Crítica5,286
- Alta20,850
- Média19,532
- Baixa2,048
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2006-3893—93.9%
——28——CVE-2019-7766—93.9%
——28——CVE-2022-3254—93.9%
——28——CVE-2021-28312—93.9%
——28——CVE-2020-12651—93.9%
——28——CVE-2019-3996—93.9%
——28——CVE-2022-21849—93.9%
——28——CVE-2015-8445—93.9%
——28——CVE-2009-0113—93.9%
——28——CVE-2017-0045—93.9%
——28——CVE-2015-8388—93.9%
——28——CVE-2018-16224—93.9%
——28——CVE-2023-28227—93.9%
——28——CVE-2016-4436—93.9%
——28——CVE-2014-6040—93.9%
——28——CVE-2005-1992—93.9%
——28——CVE-2017-11332—93.9%
——28——CVE-2010-0846—93.9%
——28——CVE-2015-3187—93.9%
——28——CVE-2004-1125—93.9%
——28——CVE-2017-12545—93.9%
——28——CVE-2021-46315—93.9%
——28——CVE-2015-1779—93.9%
——28——CVE-2019-7806—93.9%
——28——CVE-2009-0071—93.9%
——28——CVE-2002-1621—93.9%
——28——CVE-2025-435398.8 ALT93.9%
——28The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing a file may lead to memory corruption.39dCVE-2015-1352—93.9%
——28——CVE-2022-4047—93.9%
——28——CVE-2009-4089—93.9%
——28——CVE-2019-130574.9 MÉD93.9%
——28An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g., for multi-tenant deployments), slapd does not properly stop a rootDN from requesting authorization as an identity from another database during a SASL bind or with a proxyAuthz (RFC 4370) control. (It is not a common configuration to deploy a system where the server administrator and a DB administrator enjoy different levels of trust.)32dCVE-2010-1690—93.9%
——28——CVE-2026-556388.6 ALT93.9%
——289Router is an AI router & token saver. Prior to 0.5.2, 9router protects /v1, /v1beta, /api/v1, and /api/v1beta in src/dashboardGuard.js but omits /codex before next.config.mjs rewrites /codex/* to /api/v1/responses. A remote unauthenticated attacker can send requests to /codex/* to bypass the API-key gate and cause the server to make upstream provider calls using operator-stored LLM provider credentials. This issue is fixed in version 0.5.2.21dCVE-2018-1000832—93.9%
——28——CVE-2014-0999—93.9%
——28——CVE-2004-1441—93.9%
——28——CVE-2006-5762—93.9%
——28——CVE-2006-2806—93.9%
——28——CVE-2018-1000632—93.9%
——28——CVE-1999-0235—93.9%
——28——