Vulnerabilidades exploráveis hoje
4,383na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,768
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,784
- Alta22,605
- Média22,024
- Baixa2,187
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2023-32560—99.9%
——30——CVE-2025-1974—99.9%
——30——CVE-2017-9805—99.9%
KEV—80Apache Struts Deserialization of Untrusted Data Vulnerability—CVE-2021-32030—99.9%
KEV—80ASUS Routers Improper Authentication Vulnerability—CVE-2020-1472—99.9%
KEVR80Microsoft Netlogon Privilege Escalation Vulnerability—CVE-2014-0094—99.9%
——30——CVE-2017-0148—99.9%
KEVR80Microsoft SMBv1 Server Remote Code Execution Vulnerability—CVE-2020-36289—99.9%
——30——CVE-2022-0543—99.9%
KEV—80Debian-specific Redis Server Lua Sandbox Escape Vulnerability—CVE-2021-34429—99.9%
——30——CVE-2023-349609.8 CRÍ99.9%
——30A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name.120dCVE-2014-6287—99.9%
KEV—80Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability—CVE-2017-12542—99.9%
——30——CVE-2023-23333—99.9%
——30——CVE-2024-4885—99.9%
KEV—80Progress WhatsUp Gold Path Traversal Vulnerability—CVE-2023-28771—99.9%
KEV—80Zyxel Multiple Firewalls OS Command Injection Vulnerability—CVE-2020-19389.8 CRÍ99.9%
KEV—80Apache Tomcat Improper Privilege Management Vulnerability73dCVE-2020-14750—99.9%
KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—CVE-2023-34048—99.9%
KEV—80VMware vCenter Server Out-of-Bounds Write Vulnerability—CVE-2022-303337.5 ALT99.9%
KEVR80RARLAB UnRAR Directory Traversal Vulnerability35dCVE-2017-01448.8 ALT99.9%
KEVR80Microsoft SMBv1 Remote Code Execution Vulnerability84dCVE-2025-29927—99.9%
——30——CVE-2023-22515—99.9%
KEVR80Atlassian Confluence Data Center and Server Broken Access Control Vulnerability—CVE-2020-0646—99.9%
KEV—80Microsoft .NET Framework Remote Code Execution Vulnerability—CVE-2020-110226.9 MÉD99.9%
——30In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.3dCVE-2024-27348—99.9%
KEV—80Apache HugeGraph-Server Improper Access Control Vulnerability—CVE-2018-12998—99.9%
——30——CVE-2022-24086—99.9%
KEV—80Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability—CVE-2020-11978—99.9%
KEV—80Apache Airflow Command Injection—CVE-2018-76029.8 CRÍ99.9%
KEVR80Drupal Core Remote Code Execution Vulnerability35dCVE-2022-301907.8 ALT99.9%
KEVR80Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability92dCVE-2022-40300—99.9%
——30——CVE-2021-445299.8 CRÍ99.9%
KEVR80Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability 94dCVE-2022-36804—99.9%
KEV—80Atlassian Bitbucket Server and Data Center Command Injection Vulnerability—CVE-2020-10199—99.9%
KEV—80Sonatype Nexus Repository Remote Code Execution Vulnerability—CVE-2015-1538—99.9%
——30——CVE-2021-25646—99.9%
——30——CVE-2022-39986—99.9%
——30——CVE-2025-497066.5 MÉD99.9%
KEVR80Microsoft SharePoint Improper Authentication Vulnerability94dCVE-2022-24637—99.9%
——30——