Vulnerabilidades explotables hoy
4,375en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,756
Nuevos KEV · 24H0
Exploit Today ≥ 701,689
Distribución · última ventana
- Crítico4,727
- Alto18,790
- Medio17,140
- Bajo1,727
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2013-2333—99.8%
——30——CVE-2024-13161—99.8%
KEV—80Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability—CVE-2023-251366.5 MED99.8%
——30OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to jump to any location in the sshd address space. One third-party report states "remote code execution is theoretically possible."11dCVE-2020-8604—99.8%
——30——CVE-2019-20501—99.8%
——30——CVE-2017-0146—99.8%
KEVR80Microsoft Windows SMB Remote Code Execution Vulnerability—CVE-2023-6909—99.8%
——30——CVE-2012-1423—99.8%
——30——CVE-2020-17463—99.8%
KEV—80Fuel CMS SQL Injection Vulnerability—CVE-2019-7195—99.8%
KEVR80QNAP Photo Station Path Traversal Vulnerability—CVE-2021-20123—99.8%
KEV—80Draytek VigorConnect Path Traversal Vulnerability —CVE-2018-7358—99.8%
——30——CVE-2024-37032—99.8%
——30——CVE-2010-2568—99.8%
KEV—80Microsoft Windows Remote Code Execution Vulnerability—CVE-2018-159827.8 ALT99.8%
KEVR80Adobe Flash Player Use-After-Free Vulnerability24dCVE-2022-30522—99.8%
——30——CVE-2023-27253—99.8%
——30——CVE-2011-3923—99.8%
——30——CVE-2016-2776—99.8%
——30——CVE-2024-1071—99.8%
——30——CVE-2026-422089.8 CRÍ99.8%
KEV—80BerriAI LiteLLM SQL Injection Vulnerability103dCVE-2018-14417—99.8%
——30——CVE-2013-1359—99.8%
——30——CVE-2010-3333—99.8%
KEV—80Microsoft Office Stack-based Buffer Overflow Vulnerability—CVE-2026-90829.8 CRÍ99.8%
KEV—80Drupal Core SQL Injection Vulnerability18dCVE-2022-24716—99.8%
——30——CVE-2018-15708—99.8%
——30——CVE-2017-56459.8 CRÍ99.8%
——30In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.17dCVE-2017-5521—99.8%
KEV—80NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability—CVE-2019-5420—99.8%
——30——CVE-2026-20127—99.8%
KEV—80Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability—CVE-2020-25687—99.8%
——30——CVE-2020-35489—99.8%
——30——CVE-2023-21547—99.8%
——30——CVE-2022-1707—99.8%
——30——CVE-2006-0026—99.8%
——30——CVE-2018-14839—99.8%
KEV—80LG N1A1 NAS Remote Command Execution Vulnerability—CVE-2021-21307—99.8%
——30——CVE-2012-1421—99.8%
——30——CVE-2023-46214—99.8%
——30——