Vulnerabilidades exploráveis hoje
409,857na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,526
- Alta21,042
- Média20,195
- Baixa2,086
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2017-14494—99.4%
——30——CVE-2016-7288—99.4%
——30——CVE-2007-2676—99.4%
——30——CVE-2013-4835—99.4%
——30——CVE-2023-20864—99.4%
——30——CVE-2024-37404—99.4%
——30——CVE-2003-0213—99.4%
——30——CVE-2022-44456—99.4%
——30——CVE-2005-0308—99.4%
——30——CVE-2018-7490—99.4%
——30——CVE-2019-17571—99.4%
——30——CVE-2018-10094—99.4%
——30——CVE-1999-0532—99.4%
——30——CVE-2016-7286—99.4%
——30——CVE-2014-8517—99.4%
——30——CVE-2003-0220—99.4%
——30——CVE-2014-6039—99.4%
——30——CVE-2013-3215—99.4%
——30——CVE-2013-0075—99.4%
——30——CVE-2010-3654—99.4%
——30——CVE-2010-2703—99.4%
——30——CVE-2023-02867.4 ALT99.4%
——30There is a type confusion vulnerability relating to X.400 address processing
inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but
the public structure definition for GENERAL_NAME incorrectly specified the type
of the x400Address field as ASN1_TYPE. This field is subsequently interpreted by
the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an
ASN1_STRING.
When CRL checking is enabled (i.e. the application sets the
X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass
arbitrary pointers to a memcmp call, enabling them to read memory contents or
enact a denial of service. In most cases, the attack requires the attacker to
provide both the certificate chain and CRL, neither of which need to have a
valid signature. If the attacker only controls one of these inputs, the other
input must already contain an X.400 address as a CRL distribution point, which
is uncommon. As such, this vulnerability is most likely to only affect
applications which have implemented their own functionality for retrieving CRLs
over a network.25dCVE-2012-1441—99.4%
——30——CVE-2017-126167.5 ALT99.4%
——30When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request.24dCVE-2008-1491—99.4%
——30——CVE-2021-42132—99.4%
——30——CVE-2007-3614—99.4%
——30——CVE-2017-8640—99.4%
——30——CVE-2021-22908—99.4%
——30——CVE-2001-0506—99.4%
——30——CVE-2021-33690—99.4%
——30——CVE-2008-4556—99.4%
——30——CVE-2017-8671—99.4%
——30——CVE-2023-5074—99.4%
——30——CVE-2013-2367—99.4%
——30——CVE-2016-7287—99.4%
——30——CVE-2005-0241—99.4%
——30——CVE-2019-8900—99.4%
——30——CVE-2012-0003—99.4%
——30——CVE-2012-4284—99.4%
——30——