Vulnerabilidades explotables hoy
404,907en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,760
Nuevos KEV · 24H0
Exploit Today ≥ 701,693
Distribución · última ventana
- Crítico5,619
- Alto21,800
- Medio20,176
- Bajo2,113
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2015-3089—98.8%
——30——CVE-2021-27964—98.8%
——30——CVE-2008-4032—98.8%
——30——CVE-2018-07327.5 ALT98.8%
——30During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o).20dCVE-2019-17181—98.8%
——30——CVE-2022-46768—98.8%
——30——CVE-2008-2551—98.8%
——30——CVE-2010-4701—98.8%
——30——CVE-2022-35748—98.8%
——30——CVE-2004-0121—98.8%
——30——CVE-2014-2962—98.8%
——30——CVE-2007-3456—98.8%
——30——CVE-2020-12029—98.8%
——30——CVE-2020-14645—98.8%
——30——CVE-2009-0932—98.8%
——30——CVE-2018-15812—98.8%
——30——CVE-2020-15299—98.8%
——30——CVE-2007-4983—98.8%
——30——CVE-2014-2299—98.8%
——30——CVE-2018-5767—98.8%
——30——CVE-2005-2118—98.8%
——30——CVE-2023-28709—98.8%
——30——CVE-2012-2110—98.8%
——30——CVE-2023-50919—98.8%
——30——CVE-2024-25065—98.8%
——30——CVE-2017-6079—98.8%
——30——CVE-2024-23759—98.8%
——30——CVE-2007-4677—98.8%
——30——CVE-2024-5725—98.8%
——30——CVE-2005-0063—98.8%
——30——CVE-2006-2842—98.8%
——30——CVE-2009-2514—98.8%
——30——CVE-2005-0688—98.8%
——30——CVE-2021-213435.3 MED98.8%
——30XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on these type information. An attacker can manipulate the processed input stream and replace or inject objects, that result in the deletion of a file on the local host. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.22dCVE-2018-7662—98.8%
——30——CVE-2023-4357—98.8%
——30——CVE-2005-1208—98.8%
——30——CVE-2023-43187—98.8%
——30——CVE-2023-46229—98.8%
——30——CVE-2022-35411—98.8%
——30——