Vulnerabilidades exploráveis hoje
4,383na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,768
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,784
- Alta22,605
- Média22,024
- Baixa2,187
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2020-06188.8 ALT99.9%
KEVR80Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability83dCVE-2019-16278—99.9%
KEV—80Nostromo nhttpd Directory Traversal Vulnerability—CVE-2014-01147.5 SEM99.9%
——30Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via the class parameter, as demonstrated by the passing of this parameter to the getClass method of the ActionForm object in Struts 1.23dCVE-2021-21978—99.9%
——30——CVE-2025-686139.9 CRÍ99.9%
KEV—80n8n Improper Control of Dynamically-Managed Code Resources Vulnerability24dCVE-2026-240619.8 CRÍ99.9%
KEV—80GNU InetUtils Argument Injection Vulnerability37dCVE-2017-3881—99.9%
KEV—80Cisco IOS and IOS XE Remote Code Execution Vulnerability—CVE-2020-7247—99.9%
KEV—80OpenSMTPD Remote Code Execution Vulnerability—CVE-2021-40539—99.9%
KEVR80Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability—CVE-2019-3929—99.9%
KEV—80Crestron Multiple Products Command Injection Vulnerability—CVE-2011-3192—99.9%
——30——CVE-2020-9496—99.9%
——30——CVE-2025-32433—99.9%
KEV—80Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability—CVE-2017-9791—99.9%
KEV—80Apache Struts 1 Improper Input Validation Vulnerability—CVE-2022-3236—99.9%
KEV—80Sophos Firewall Code Injection Vulnerability—CVE-2023-472469.8 CRÍ99.9%
KEVR80SysAid Server Path Traversal Vulnerability98dCVE-2024-29895—99.9%
——30——CVE-2026-7289810.0 CRÍ99.9%
KEV—80Metabase SQL Injection Vulnerability86dCVE-2012-1442—99.9%
——30——CVE-2012-3152—99.9%
KEV—80Oracle Fusion Middleware Unspecified Vulnerability—CVE-2013-2465—99.9%
KEVR80Oracle Java SE Unspecified Vulnerability—CVE-2020-7209—99.9%
——30——CVE-2008-4250—99.9%
KEV—80Microsoft Windows Buffer Overflow Vulnerability—CVE-2019-11477—99.9%
——30——CVE-2018-19276—99.9%
——30——CVE-2023-28341—99.9%
——30——CVE-2026-1281—99.9%
KEV—80Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability—CVE-2015-02044.3 SEM99.9%
——30The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the "FREAK" issue. NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.22dCVE-2022-279257.2 ALT99.9%
KEVR80Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability35dCVE-2018-15473—99.9%
——30——CVE-2026-1340—99.9%
KEV—80Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability—CVE-2024-29059—99.9%
KEV—80Microsoft .NET Framework Information Disclosure Vulnerability—CVE-2015-5119—99.9%
KEV—80Adobe Flash Player Use-After-Free Vulnerability—CVE-2024-8963—99.9%
KEV—80Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability—CVE-2024-506239.8 CRÍ99.9%
KEVR80Cleo Multiple Products Unrestricted File Upload Vulnerability29dCVE-2019-17558—99.9%
KEV—80Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability—CVE-2024-9463—99.9%
KEV—80Palo Alto Networks Expedition OS Command Injection Vulnerability—CVE-2019-11539—99.9%
KEVR80Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability—CVE-2012-46819.8 CRÍ99.9%
KEVR80Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability92dCVE-2026-419409.8 CRÍ99.9%
KEVR80WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability10d