Vulnerabilidades explotables hoy
405,425en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,762
Nuevos KEV · 24H0
Exploit Today ≥ 701,694
Distribución · última ventana
- Crítico5,601
- Alto21,718
- Medio20,101
- Bajo2,110
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2020-13921—98.4%
——30——CVE-2006-2218—98.4%
——30——CVE-2019-18889—98.4%
——30——CVE-2011-1213—98.4%
——30——CVE-2002-0193—98.4%
——30——CVE-2008-4025—98.4%
——30——CVE-2026-277608.1 ALT98.4%
——30OpenCATS prior to commit 3002a29 contains a PHP code injection vulnerability in the installer AJAX endpoint that allows unauthenticated attackers to execute arbitrary code by injecting PHP statements into the databaseConnectivity action parameter. Attackers can break out of the define() string context in config.php using a single quote and statement separator to inject malicious PHP code that persists and executes on every subsequent page load when the installation wizard remains incomplete.107dCVE-2017-5815—98.4%
——30——CVE-2021-264129.1 CRÍ98.4%
——30Microsoft Exchange Server Remote Code Execution Vulnerability72dCVE-2007-2919—98.4%
——30——CVE-2013-3111—98.4%
——30——CVE-2022-31680—98.4%
——30——CVE-2018-11690—98.4%
——30——CVE-2026-499757.5 ALT98.4%
——30Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests.
This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.72dCVE-2024-2454—98.4%
——30——CVE-2022-24491—98.4%
——30——CVE-2025-64409.8 CRÍ98.4%
——30The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress theme, is vulnerable to arbitrary file uploads due to missing file type validation in the 'wcdp_save_canvas_design_ajax' function in all versions up to, and including, 1.9.26. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.22dCVE-2010-1262—98.4%
——30——CVE-2013-1306—98.4%
——30——CVE-2021-40531—98.4%
——30——CVE-2021-45043—98.4%
——30——CVE-2024-13181—98.4%
——30——CVE-2022-27665—98.4%
——30——CVE-2020-16947—98.4%
——30——CVE-2021-36300—98.4%
——30——CVE-2005-0044—98.4%
——30——CVE-2001-1319—98.4%
——30——CVE-2011-1772—98.4%
——30——CVE-2007-3068—98.4%
——30——CVE-2006-0010—98.4%
——30——CVE-2012-5946—98.4%
——30——CVE-2015-2995—98.4%
——30——CVE-2020-35713—98.4%
——30——CVE-2009-1394—98.4%
——30——CVE-2024-12828—98.4%
——30——CVE-2020-7457—98.4%
——30——CVE-2013-4878—98.4%
——30——CVE-2017-7588—98.4%
——30——CVE-2017-16885—98.4%
——30——CVE-2007-4515—98.4%
——30——