Vulnerabilidades exploráveis hoje
410,117na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,503
- Alta20,886
- Média20,029
- Baixa2,062
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2024-384727.5 ALT99.4%
——30SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content
Users are recommended to upgrade to version 2.4.60 which fixes this issue. Note: Existing configurations that access UNC paths will have to configure new directive "UNCList" to allow access during request processing.5dCVE-2005-0560—99.4%
——30——CVE-2021-34621—99.4%
——30——CVE-2021-39836—99.4%
——30——CVE-2020-1181—99.4%
——30——CVE-2021-22908—99.4%
——30——CVE-2015-3628—99.4%
——30——CVE-2002-0661—99.4%
——30——CVE-2003-1192—99.4%
——30——CVE-2014-8517—99.4%
——30——CVE-2022-34258—99.4%
——30——CVE-2024-54676—99.4%
——30——CVE-2001-0506—99.4%
——30——CVE-2005-0241—99.4%
——30——CVE-2025-29971—99.3%
——30——CVE-2000-0630—99.3%
——30——CVE-2009-2990—99.3%
——30——CVE-2017-11893—99.3%
——30——CVE-2017-17736—99.3%
——30——CVE-2007-3057—99.3%
——30——CVE-2010-3332—99.3%
——30——CVE-2014-9614—99.3%
——30——CVE-2021-219836.5 MÉD99.3%
——30Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system.89dCVE-2012-5687—99.3%
——30——CVE-2011-4051—99.3%
——30——CVE-2024-24994—99.3%
——30——CVE-2000-0284—99.3%
——30——CVE-2022-48428—99.3%
——30——CVE-2007-4313—99.3%
——30——CVE-2005-0803—99.3%
——30——CVE-2025-220377.5 ALT99.3%
——30In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix null pointer dereference in alloc_preauth_hash()
The Client send malformed smb2 negotiate request. ksmbd return error
response. Subsequently, the client can send smb2 session setup even
thought conn->preauth_info is not allocated.
This patch add KSMBD_SESS_NEED_SETUP status of connection to ignore
session setup request if smb2 negotiate phase is not complete.10dCVE-2004-0297—99.3%
——30——CVE-2023-48123—99.3%
——30——CVE-2014-8799—99.3%
——30——CVE-2007-3230—99.3%
——30——CVE-2009-2227—99.3%
——30——CVE-2001-0537—99.3%
——30——CVE-2000-08867.5 SEM99.3%
——30IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the "Web Server File Request Parsing" vulnerability.47dCVE-2005-0684—99.3%
——30——CVE-2015-7611—99.3%
——30——