Vulnerabilidades exploráveis hoje
4,383na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,768
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,784
- Alta22,605
- Média22,024
- Baixa2,187
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2024-50603—99.9%
KEV—80Aviatrix Controllers OS Command Injection Vulnerability—CVE-2024-20767—99.9%
KEV—80Adobe ColdFusion Improper Access Control Vulnerability—CVE-2019-5418—99.9%
KEV—80Rails Ruby on Rails Path Traversal Vulnerability—CVE-2026-344867.5 ALT99.9%
KEV—80Apache Tomcat Missing Encryption of Sensitive Data Vulnerability10dCVE-2003-0352—99.9%
——30——CVE-2021-21311—99.9%
KEV—80Adminer Server-Side Request Forgery Vulnerability—CVE-2025-01089.1 CRÍ99.9%
KEV—80Palo Alto Networks PAN-OS Authentication Bypass Vulnerability43dCVE-2019-5736—99.9%
——30——CVE-2009-1122—99.9%
——30——CVE-2023-48788—99.9%
KEVR80Fortinet FortiClient EMS SQL Injection Vulnerability—CVE-2013-47867.5 ALT99.9%
——30The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC.27dCVE-2019-1003000—99.9%
——30——CVE-2016-3088—99.9%
KEV—80Apache ActiveMQ Improper Input Validation Vulnerability—CVE-2018-12613—99.9%
——30——CVE-2022-21587—99.9%
KEVR80Oracle E-Business Suite Unspecified Vulnerability—CVE-2017-15944—99.9%
KEV—80Palo Alto Networks PAN-OS Remote Code Execution Vulnerability—CVE-2018-1000861—99.9%
KEV—80Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability—CVE-2016-1555—99.9%
KEV—80NETGEAR Multiple WAP Devices Command Injection Vulnerability—CVE-2023-20887—99.9%
KEV—80Vmware Aria Operations for Networks Command Injection Vulnerability—CVE-2026-341978.8 ALT99.9%
KEV—80Apache ActiveMQ Improper Input Validation Vulnerability10dCVE-2022-22947—99.9%
KEV—80VMware Spring Cloud Gateway Code Injection Vulnerability—CVE-2022-26138—99.9%
KEV—80Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability—CVE-2020-15920—99.9%
——30——CVE-2018-11409—99.9%
——30——CVE-2012-3153—99.9%
——30——CVE-2015-8562—99.9%
——30——CVE-2012-05079.8 CRÍ99.9%
KEVR80Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability84dCVE-2021-337667.3 ALT99.9%
KEV—80Microsoft Exchange Server Information Disclosure87dCVE-2020-35847—99.9%
——30——CVE-2024-12987—99.9%
KEV—80DrayTek Vigor Routers OS Command Injection Vulnerability—CVE-2012-1461—99.9%
——30——CVE-2023-27524—99.9%
KEV—80Apache Superset Insecure Default Initialization of Resource Vulnerability—CVE-2020-6207—99.9%
KEV—80SAP Solution Manager Missing Authentication for Critical Function Vulnerability—CVE-2019-5544—99.9%
KEVR80VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability—CVE-2021-39144—99.9%
KEV—80XStream Remote Code Execution Vulnerability—CVE-2009-1535—99.9%
——30——CVE-2026-314317.8 ALT99.9%
KEV—80Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability59dCVE-2024-3272—99.9%
KEV—80D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability—CVE-2021-35395—99.9%
KEV—80Realtek AP-Router SDK Buffer Overflow Vulnerability—CVE-2023-25717—99.9%
KEV—80Multiple Ruckus Wireless Products CSRF and RCE Vulnerability—