Vulnerabilidades explotables hoy
405,327en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,762
Nuevos KEV · 24H0
Exploit Today ≥ 701,694
Distribución · última ventana
- Crítico5,648
- Alto21,801
- Medio20,239
- Bajo2,110
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-107037——
———Insecure permissions in the NotificationHelper component of NoNonsense Notes versionCode 72600 allows unauthorized attackers to write in another user's notes via supplying a note id.2hCVE-2026-1180837.5 ALT—
———Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions.2hCVE-2026-426915.4 MED—
———Authorization Bypass Through User-Controlled Key vulnerability in EventPrime EventPrime eventprime-event-calendar-management allows Privilege Abuse.This issue affects EventPrime: from n/a through 4.3.6.0.4hCVE-2026-1180828.8 ALT—
———Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions.2hCVE-2026-1180818.8 ALT—
———Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions.2hCVE-2026-107036——
———Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized attackers to invoke an exported component, impacting the tracker blocker mechanism of the application.2hCVE-2026-1180808.8 ALT—
———Contributor PHP Object Injection in Social Snap <= 1.5.4 versions.2h