Vulnerabilidades explotables hoy
4,375en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,756
Nuevos KEV · 24H0
Exploit Today ≥ 701,689
Distribución · última ventana
- Crítico4,544
- Alto18,438
- Medio17,030
- Bajo1,708
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2017-6090—99.9%
——30——CVE-2024-45507—99.9%
——30——CVE-2020-12259—99.9%
——30——CVE-2010-0840—99.9%
KEV—80Oracle JRE Unspecified Vulnerability—CVE-2025-54068—99.9%
KEV—80Laravel Livewire Code Injection Vulnerability—CVE-2021-35587—99.9%
KEV—80Oracle Fusion Middleware Unspecified Vulnerability—CVE-2020-17530—99.9%
KEV—80Apache Struts Remote Code Execution Vulnerability—CVE-2000-0573—99.9%
——30——CVE-2011-2523—99.9%
——30——CVE-2026-33017—99.9%
KEV—80Langflow Code Injection Vulnerability—CVE-2025-34037—99.9%
——30An OS command injection vulnerability exists in various models of E-Series Linksys routers via the /tmUnblock.cgi and /hndUnblock.cgi endpoints over HTTP on port 8080. The CGI scripts improperly process user-supplied input passed to the ttcp_ip parameter without sanitization, allowing unauthenticated attackers to inject shell commands. This vulnerability was reported to be exploited in the wild by the "TheMoon" worm in 2014 to deploy a MIPS ELF payload, enabling arbitrary code execution on the router. Additionally, this vulnerability may affect other Linksys products to include, but not limited to, WAG/WAP/WES/WET/WRT-series router models and Wireless-N access points and routers. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-06 UTC.95dCVE-2018-19518—99.9%
——30——CVE-2019-20085—99.9%
KEV—80TVT NVMS-1000 Directory Traversal Vulnerability—CVE-2022-24112—99.9%
KEV—80Apache APISIX Authentication Bypass Vulnerability—CVE-2023-2442—99.9%
——30——CVE-2018-202507.8 ALT99.9%
KEVR80WinRAR Absolute Path Traversal Vulnerability74dCVE-2023-51467—99.9%
——30——CVE-2012-1431—99.9%
——30——CVE-2012-1430—99.9%
——30——CVE-2017-3506—99.9%
KEV—80Oracle WebLogic Server OS Command Injection Vulnerability—CVE-2014-6321—99.9%
——30——CVE-2018-14847—99.9%
KEV—80MikroTik Router OS Directory Traversal Vulnerability—CVE-2022-36446—99.9%
——30——CVE-2020-12256—99.9%
——30——CVE-2019-1652—99.9%
KEV—80Cisco Small Business Routers Improper Input Validation Vulnerability—CVE-2021-20124—99.9%
KEV—80Draytek VigorConnect Path Traversal Vulnerability —CVE-2023-0297—99.9%
——30——CVE-2025-618847.5 ALT99.9%
KEVR80Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability17dCVE-2020-5847—99.9%
KEV—80Unraid Remote Code Execution Vulnerability—CVE-2022-2733—99.9%
——30——CVE-2023-25194—99.9%
——30——CVE-2026-879028.1 ALT99.9%
KEV—80WordPress Core Remote File Inclusion Vulnerability27dCVE-2021-33544—99.9%
——30——CVE-2021-268577.8 ALT99.9%
KEVR80Microsoft Exchange Server Remote Code Execution Vulnerability67dCVE-2025-124809.1 CRÍ99.9%
KEV—80Gladinet Triofox Improper Access Control Vulnerability6dCVE-2019-1663—99.9%
——30——CVE-2022-23131—99.9%
KEV—80Zabbix Frontend Authentication Bypass Vulnerability—CVE-1999-0016—99.9%
——30——CVE-2021-34833—99.9%
——30——CVE-2020-5410—99.9%
KEV—80VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability—