Vulnerabilidades explotables hoy
4,375en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,756
Nuevos KEV · 24H0
Exploit Today ≥ 701,689
Distribución · última ventana
- Crítico4,444
- Alto18,058
- Medio16,641
- Bajo1,668
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2017-7921—100.0%
KEV—80Hikvision Multiple Products Improper Authentication Vulnerability—CVE-2022-22954—100.0%
KEVR80VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability—CVE-2013-2251—100.0%
KEV—80Apache Struts Improper Input Validation Vulnerability—CVE-2026-1096198.1 ALT100.0%
——30PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).2dCVE-2020-14882—100.0%
KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—CVE-2021-268559.1 CRÍ100.0%
KEVR80Microsoft Exchange Server Remote Code Execution Vulnerability67dCVE-2019-16920—100.0%
KEV—80D-Link Multiple Routers Command Injection Vulnerability—CVE-2022-44877—100.0%
KEV—80CWP Control Web Panel OS Command Injection Vulnerability—CVE-2024-3273—100.0%
KEV—80D-Link Multiple NAS Devices Command Injection Vulnerability—CVE-2025-49704—100.0%
KEVR80Microsoft SharePoint Code Injection Vulnerability—CVE-2018-11776—100.0%
KEV—80Apache Struts Remote Code Execution Vulnerability—CVE-2024-34102—100.0%
KEV—80Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability—CVE-2017-102717.5 ALT100.0%
KEVR80Oracle Corporation WebLogic Server Remote Code Execution Vulnerability73dCVE-2025-32489.8 CRÍ100.0%
KEVR80Langflow Missing Authentication Vulnerability17dCVE-2024-13159—100.0%
KEV—80Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability—CVE-2020-8515—100.0%
KEV—80Multiple DrayTek Vigor Routers Web Management Page Vulnerability—CVE-2020-34527.5 ALT100.0%
KEV—80Cisco ASA and FTD Read-Only Path Traversal Vulnerability75dCVE-2021-41773—100.0%
KEVR80Apache HTTP Server Path Traversal Vulnerability—CVE-2018-7600—100.0%
KEVR80Drupal Core Remote Code Execution Vulnerability—CVE-2023-29300—100.0%
KEVR80Adobe ColdFusion Deserialization of Untrusted Data Vulnerability—CVE-2024-27199—100.0%
KEVR80JetBrains TeamCity Relative Path Traversal Vulnerability—CVE-2021-345239.0 CRÍ100.0%
KEVR80Microsoft Exchange Server Privilege Escalation Vulnerability76dCVE-2023-50387—100.0%
——30——CVE-2021-33044—100.0%
KEV—80Dahua IP Camera Authentication Bypass Vulnerability—CVE-2020-90549.8 CRÍ100.0%
KEV—80Zyxel Multiple NAS Devices OS Command Injection Vulnerability17dCVE-2024-4577—100.0%
KEVR80PHP-CGI OS Command Injection Vulnerability—CVE-2023-42793—100.0%
KEVR80JetBrains TeamCity Authentication Bypass Vulnerability—CVE-2019-9670—100.0%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference—CVE-2023-29357—100.0%
KEVR80Microsoft SharePoint Server Privilege Escalation Vulnerability—CVE-2023-468058.2 ALT100.0%
KEVR80Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability24dCVE-2022-406849.8 CRÍ100.0%
KEVR80Fortinet Multiple Products Authentication Bypass Vulnerability80dCVE-2023-22527—100.0%
KEVR80Atlassian Confluence Data Center and Server Template Injection Vulnerability—CVE-2024-45195—100.0%
KEV—80Apache OFBiz Forced Browsing Vulnerability—CVE-2021-20090—100.0%
KEV—80Arcadyan Buffalo Firmware Path Traversal Vulnerability—CVE-2025-02829.0 CRÍ100.0%
KEVR80Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability24dCVE-2025-224579.0 CRÍ100.0%
KEVR80Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability82dCVE-2026-1096189.8 CRÍ100.0%
——30PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).2dCVE-2021-22204—100.0%
KEV—80ExifTool Remote Code Execution Vulnerability—CVE-2025-59287—100.0%
KEV—80Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability—CVE-2024-1709—100.0%
KEVR80ConnectWise ScreenConnect Authentication Bypass Vulnerability—