Vulnerabilidades exploráveis hoje
414,804na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,781
Novos KEV · 24H0
Exploit Today ≥ 701,709
Distribuição · última janela
- Crítica5,287
- Alta20,832
- Média19,517
- Baixa2,047
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2016-1039—93.7%
——28——CVE-2020-354908.1 ALT93.7%
——28FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource.38dCVE-2023-42820—93.7%
——28——CVE-2018-13110—93.7%
——28——CVE-2026-3611—93.7%
——28——CVE-2010-0129—93.7%
——28——CVE-2021-23926—93.7%
——28——CVE-2010-2519—93.7%
——28——CVE-2008-6537—93.7%
——28——CVE-2022-478797.5 ALT93.7%
——28A Remote Code Execution (RCE) vulnerability in /be/rpc.php in Jedox 2020.2.5 allows remote authenticated users to load arbitrary PHP classes from the 'rtn' directory and execute its methods. NOTE: The vendor states that the vulnerability affects installations running version 22.5 or earlier. The issue was resolved with version 23.2 and later versions are not affected.129dCVE-2012-0768—93.7%
——28——CVE-2019-11196—93.7%
——28——CVE-2005-1006—93.7%
——28——CVE-2024-45711—93.7%
——28——CVE-2013-10060—93.7%
——28——CVE-2016-6296—93.7%
——28——CVE-2020-35616—93.7%
——28——CVE-2014-4018—93.7%
——28——CVE-2024-48455—93.7%
——28——CVE-2017-3159—93.7%
——28——CVE-2017-5344—93.7%
——28——CVE-1999-0582—93.7%
——28——CVE-2016-2173—93.7%
——28——CVE-2001-14577.5 SEM93.7%
——28Buffer overflow in CrazyWWWBoard 2000p4 and 2000LEp5 allows remote attackers to execute arbitrary code via a long HTTP_USER_AGENT CGI environment variable.4dCVE-2013-5817—93.7%
——28——CVE-2020-15718—93.7%
——28——CVE-2012-5324—93.7%
——28——CVE-2011-0628—93.7%
——28——CVE-2015-0326—93.7%
——28——CVE-2016-4522—93.7%
——28——CVE-2011-0814—93.7%
——28——CVE-2026-425338.1 ALT93.7%
——28A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable in a string expression under certain conditions. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.
Impact:
This vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX system or to possibly trigger a code execution. There is no control plane exposure; this is a data plane issue only.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.12dCVE-2016-1595—93.7%
——28——CVE-2017-2470—93.7%
——28——CVE-2013-5782—93.7%
——28——CVE-2023-0527—93.7%
——28——CVE-2011-0802—93.7%
——28——CVE-2026-111229—93.7%
——28Rejected reason: This CVE ID has been rejected because it does not describe a security vulnerability.9dCVE-2009-0645—93.7%
——28——CVE-2025-60724—93.7%
——28——