Arsenal public
Exploits
868 CVE indexées ont un exploit public prêt à l'emploi, dont 108 au KEV CISA et 326 touchant une app suivie.
- CVE avec exploit
- 868
- Exploits recensés
- 1 031
- Au KEV CISA
- 108
- Sur le parc suivi
- 326
| CVE | Sévérité | Sources | EPSS | Apps |
|---|---|---|---|---|
|
CVE-2019-0708
KEV
Remote Desktop Services Remote Code Execution Vulnerability |
CRITICAL | ExploitDB | 100% | — |
|
CVE-2021-44228
KEV
Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuratio… |
CRITICAL | ExploitDB Nuclei | 100% | 
|
|
CVE-2025-53770
KEV
Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over… |
CRITICAL | ExploitDB Nuclei | 100% | — |
|
CVE-2021-26855
KEV
Microsoft Exchange Server Remote Code Execution Vulnerability |
CRITICAL | ExploitDB Nuclei | 100% | — |
|
CVE-2024-4577
KEV
Argument Injection in PHP-CGI |
CRITICAL | ExploitDB Nuclei | 100% | — |
|
CVE-2017-0199
KEV
Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows |
CRITICAL | ExploitDB | 100% | — |
|
CVE-2019-0604
KEV
Microsoft SharePoint Remote Code Execution Vulnerability |
CRITICAL | ExploitDB | 100% | — |
|
CVE-2014-0497
KEV
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, a… |
CRITICAL | ExploitDB | 100% | 
|
|
CVE-2020-0796
KEV
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles ce… |
CRITICAL | ExploitDB Nuclei | 100% | |
|
CVE-2025-1974
A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod … |
CRITICAL | ExploitDB Nuclei | 100% | — |
|
CVE-2020-1472
KEV
Netlogon Elevation of Privilege Vulnerability |
CRITICAL | ExploitDB | 99% | |
|
CVE-2017-0148
KEV
Windows SMB Remote Code Execution Vulnerability |
CRITICAL | ExploitDB | 99% | |
|
CVE-2020-0646
KEV
.NET Framework Remote Code Execution Injection Vulnerability |
CRITICAL | ExploitDB | 99% | — |
|
CVE-2021-44790
Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier |
CRITICAL | ExploitDB | 97% | — |
|
CVE-2015-0313
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X … |
CRITICAL | ExploitDB | 95% | 
|
|
CVE-2020-1147
KEV
.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability |
CRITICAL | ExploitDB | 94% | — |
|
CVE-2017-0143
KEV
Windows SMB Remote Code Execution Vulnerability |
CRITICAL | ExploitDB | 93% | |
|
CVE-2018-17456
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19… |
CRITICAL | ExploitDB | 93% | — |
|
CVE-2022-21907
HTTP Protocol Stack Remote Code Execution Vulnerability |
CRITICAL | ExploitDB | 93% | |
|
CVE-2017-8464
KEV
LNK Remote Code Execution Vulnerability |
CRITICAL | ExploitDB | 90% | |
|
CVE-2017-0146
KEV
Windows SMB Remote Code Execution Vulnerability |
CRITICAL | ExploitDB | 90% | |
|
CVE-2020-0674
KEV
Scripting Engine Memory Corruption Vulnerability |
CRITICAL | ExploitDB | 87% | — |
|
CVE-2015-0311
Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS … |
CRITICAL | ExploitDB | 86% |
|
|
CVE-2014-1511
Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attack… |
CRITICAL | ExploitDB | 84% | 
|
|
CVE-2016-5195
KEV
Indexed via Android Security Bulletin — full NVD metadata pending. |
CRITICAL | ExploitDB | 84% | |
|
CVE-2010-3765
KEV
Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMon… |
CRITICAL | ExploitDB | 83% |
|
|
CVE-2014-1510
The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey b… |
CRITICAL | ExploitDB | 82% |
|
|
CVE-2020-13160
AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution. |
CRITICAL | ExploitDB | 81% | — |
|
CVE-2019-1429
KEV
Scripting Engine Memory Corruption Vulnerability |
CRITICAL | ExploitDB | 77% | — |
|
CVE-2020-0609
Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability |
CRITICAL | ExploitDB | 75% | |
|
CVE-2018-8298
KEV
Scripting Engine Memory Corruption Vulnerability |
CRITICAL | ExploitDB | 75% | — |
|
CVE-2017-0290
Microsoft Malware Protection Engine Remote Code Execution Vulnerability |
CRITICAL | ExploitDB | 73% | — |
|
CVE-2017-8540
KEV
Microsoft Malware Protection Engine Remote Code Execution Vulnerability |
CRITICAL | ExploitDB | 72% | — |
|
CVE-2020-0610
Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability |
CRITICAL | ExploitDB | 68% | |
|
CVE-2018-8631
Internet Explorer Memory Corruption Vulnerability |
CRITICAL | ExploitDB | 66% | — |
|
CVE-2018-0986
Microsoft Malware Protection Engine Remote Code Execution Vulnerability |
CRITICAL | ExploitDB | 63% | — |
|
CVE-2025-32463
KEV
Sudo before 1.9.17p1 allows local users to obtain root access |
CRITICAL | ExploitDB | 61% | — |
|
CVE-2017-0108
Windows Graphics Component Remote Code Execution Vulnerability |
CRITICAL | ExploitDB | 59% | — |
|
CVE-2008-0081
Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted… |
CRITICAL | ExploitDB | 58% | 
|
|
CVE-2017-0089
Windows Uniscribe Remote Code Execution Vulnerability |
CRITICAL | ExploitDB | 57% | — |
|
CVE-2018-8384
Scripting Engine Memory Corruption Vulnerability |
CRITICAL | ExploitDB | 56% | — |
|
CVE-2019-11708
KEV
Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the n… |
CRITICAL | ExploitDB | 56% |
|
|
CVE-2017-9417
Broadcom BCM43xx Remote Code Execution Vulnerability |
CRITICAL | ExploitDB | 55% | |
|
CVE-2017-11907
Scripting Engine Memory Corruption Vulnerability |
CRITICAL | ExploitDB | 50% | — |
|
CVE-2017-8618
Scripting Engine Memory Corruption Vulnerability |
CRITICAL | ExploitDB | 49% | — |
|
CVE-2016-3288
Internet Explorer Memory Corruption Vulnerability |
CRITICAL | ExploitDB | 46% | — |
|
CVE-2017-11810
Scripting Engine Memory Corruption Vulnerability |
CRITICAL | ExploitDB | 45% | — |
|
CVE-2017-0072
Windows Uniscribe Remote Code Execution Vulnerability |
CRITICAL | ExploitDB | 44% | — |
|
CVE-2017-0083
Windows Uniscribe Remote Code Execution Vulnerability |
CRITICAL | ExploitDB | 44% | — |
|
CVE-2017-0086
Windows Uniscribe Remote Code Execution Vulnerability |
CRITICAL | ExploitDB | 44% | — |
Exploits agrégés depuis ExploitDB, Nuclei, Metasploit et les PoC GitHub, mappés aux CVE que Scout indexe. À des fins de recherche défensive et de test d'exposition uniquement.