Vulnerabilidades exploráveis hoje
4,380na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,650
- Alta21,880
- Média21,271
- Baixa2,179
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2014-8601—99.4%
——30——CVE-2019-10867—99.4%
——30——CVE-2021-34995—99.4%
——30——CVE-2021-34621—99.4%
——30——CVE-2003-0050—99.4%
——30——CVE-2005-0308—99.4%
——30——CVE-2013-3215—99.4%
——30——CVE-2002-0149—99.4%
——30——CVE-2012-1441—99.4%
——30——CVE-2023-43622—99.4%
——30——CVE-2022-44635—99.4%
——30——CVE-2008-0960—99.3%
——30——CVE-2014-6039—99.3%
——30——CVE-2024-54676—99.3%
——30——CVE-2005-0095—99.3%
——30——CVE-2021-219836.5 MÉD99.3%
——30Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system.87dCVE-2006-1255—99.3%
——30——CVE-2025-220377.5 ALT99.3%
——30In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix null pointer dereference in alloc_preauth_hash()
The Client send malformed smb2 negotiate request. ksmbd return error
response. Subsequently, the client can send smb2 session setup even
thought conn->preauth_info is not allocated.
This patch add KSMBD_SESS_NEED_SETUP status of connection to ignore
session setup request if smb2 negotiate phase is not complete.8dCVE-2007-2545—99.3%
——30——CVE-2017-9829—99.3%
——30——CVE-2000-08867.5 SEM99.3%
——30IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the "Web Server File Request Parsing" vulnerability.45dCVE-2017-18044—99.3%
——30——CVE-2017-8670—99.3%
——30——CVE-2012-5687—99.3%
——30——CVE-2017-6077—99.3%
KEV—80NETGEAR DGN2200 Remote Code Execution Vulnerability—CVE-2007-4313—99.3%
——30——CVE-2014-9614—99.3%
——30——CVE-2004-0567—99.3%
——30——CVE-2012-5896—99.3%
——30——CVE-2007-3057—99.3%
——30——CVE-2021-40324—99.3%
——30——CVE-2019-0626—99.3%
——30——CVE-2015-7611—99.3%
——30——CVE-2025-134869.8 CRÍ99.3%
——30The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Remote Code Execution in versions 0.9.0.5 through 0.9.1.1 via the prepare_form() function. This is due to the function accepting user input and then passing that through call_user_func_array(). This makes it possible for unauthenticated attackers to execute arbitrary code on the server, which can be leveraged to inject backdoors or create new administrative user accounts.19dCVE-2009-0695—99.3%
——30——CVE-2019-9053—99.3%
——30——CVE-2009-2227—99.3%
——30——CVE-2020-13951—99.3%
——30——CVE-2020-13117—99.3%
——30——CVE-2009-2990—99.3%
——30——