Vulnerabilidades explotables hoy
404,989en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,762
Nuevos KEV · 24H0
Exploit Today ≥ 701,694
Distribución · última ventana
- Crítico5,617
- Alto21,776
- Medio20,166
- Bajo2,116
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2015-5562—98.8%
——30——CVE-2007-0494—98.8%
——30——CVE-2025-616229.8 CRÍ98.8%
——30Deserialization of untrusted data in python in pyfory versions 0.12.0 through 0.12.2, or the legacy pyfury versions from 0.1.0 through 0.10.3: allows arbitrary code execution. An application is vulnerable if it reads pyfory serialized data from untrusted sources. An attacker can craft a data stream that selects pickle-fallback serializer during deserialization, leading to the execution of `pickle.loads`, which is vulnerable to remote code execution.
Users are recommended to upgrade to pyfory version 0.12.3 or later, which has removed pickle fallback serializer and thus fixes this issue.20dCVE-2023-32564—98.8%
——30——CVE-2005-2678—98.8%
——30——CVE-2015-0231—98.8%
——30——CVE-2022-33980—98.8%
——30——CVE-2006-6134—98.8%
——30——CVE-2004-0201—98.8%
——30——CVE-2015-5557—98.8%
——30——CVE-2022-38422—98.8%
——30——CVE-2004-1043—98.8%
——30——CVE-2011-0661—98.8%
——30——CVE-2019-18952—98.8%
——30——CVE-2018-11510—98.8%
——30——CVE-2008-3479—98.8%
——30——CVE-2007-0927—98.8%
——30——CVE-2022-41903—98.8%
——30——CVE-2019-7089—98.8%
——30——CVE-2004-0595—98.8%
——30——CVE-2015-47487.6 SIN98.8%
——30Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.15dCVE-2022-0666—98.8%
——30——CVE-2018-15839—98.8%
——30——CVE-2012-1775—98.8%
——30——CVE-2015-5561—98.8%
——30——CVE-2006-5559—98.7%
——30——CVE-2023-33133—98.7%
——30——CVE-2007-2228—98.7%
——30——CVE-2015-5554—98.7%
——30——CVE-2022-35710—98.7%
——30——CVE-2015-24689.3 SIN98.7%
——30Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Word Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."15dCVE-2013-3629—98.7%
——30——CVE-2024-0939—98.7%
——30——CVE-2020-1301—98.7%
——30——CVE-2007-0065—98.7%
——30——CVE-2022-0773—98.7%
——30——CVE-2015-8424—98.7%
——30——CVE-2022-0482—98.7%
——30——CVE-2015-8430—98.7%
——30——CVE-2015-8427—98.7%
——30——