Vulnerabilidades explotables hoy
4,375en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,756
Nuevos KEV · 24H0
Exploit Today ≥ 701,689
Distribución · última ventana
- Crítico4,546
- Alto18,448
- Medio17,035
- Bajo1,709
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2022-29303—99.9%
KEV—80SolarView Compact Command Injection Vulnerability—CVE-2022-43781—99.9%
——30——CVE-2014-5445—99.9%
——30——CVE-2023-29084—99.9%
——30——CVE-2022-22536—99.9%
KEV—80SAP Multiple Products HTTP Request Smuggling Vulnerability—CVE-2018-19410—99.9%
KEV—80Paessler PRTG Network Monitor Local File Inclusion Vulnerability—CVE-2021-44832—99.9%
——30——CVE-2023-25280—99.9%
KEV—80D-Link DIR-820 Router OS Command Injection Vulnerability—CVE-2018-1111—99.9%
——30——CVE-2023-6553—99.9%
——30——CVE-2012-1462—99.9%
——30——CVE-2021-404448.8 ALT99.9%
KEVR80Microsoft MSHTML Remote Code Execution Vulnerability76dCVE-2022-2024—99.9%
——30——CVE-2021-45382—99.9%
KEV—80D-Link Multiple Routers Remote Code Execution Vulnerability—CVE-2021-36380—99.9%
KEV—80Sunhillo SureLine OS Command Injection Vulnerablity—CVE-2020-11738—99.9%
KEV—80WordPress Snap Creek Duplicator Plugin File Download Vulnerability—CVE-2021-26295—99.9%
——30——CVE-2016-10108—99.9%
——30——CVE-2020-17519—99.9%
KEV—80Apache Flink Improper Access Control Vulnerability—CVE-2022-21661—99.9%
——30——CVE-2015-7450—99.9%
KEV—80IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.—CVE-2021-252996.1 MED99.9%
——30Nagios XI version xi-5.7.5 is affected by cross-site scripting (XSS). The vulnerability exists in the file /usr/local/nagiosxi/html/admin/sshterm.php due to improper sanitization of user-controlled input. A maliciously crafted URL, when clicked by an admin user, can be used to steal his/her session cookies or it can be chained with the previous bugs to get one-click remote command execution (RCE) on the Nagios XI server.109dCVE-2016-10045—99.9%
——30——CVE-2026-21643—99.9%
KEV—80Fortinet FortiClient EMS SQL Injection Vulnerability—CVE-2020-14883—99.9%
KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2012-1453—99.9%
——30——CVE-2018-15745—99.9%
——30——CVE-2019-16662—99.9%
——30——CVE-2018-117844.3 MED99.9%
——30When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.10dCVE-2022-43769—99.9%
KEV—80Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability—CVE-2023-0315—99.9%
——30——CVE-2019-18818—99.9%
——30——CVE-2025-34028—99.9%
KEV—80Commvault Command Center Path Traversal Vulnerability—CVE-2025-20281—99.9%
KEV—80Cisco Identity Services Engine Injection Vulnerability—CVE-2021-422379.8 CRÍ99.9%
KEVR80Sitecore XP Remote Command Execution Vulnerability108dCVE-2024-9264—99.9%
——30——CVE-2013-5211—99.9%
——30——CVE-2024-10914—99.9%
——30——CVE-2012-0392—99.9%
——30——CVE-2016-6601—99.9%
——30——