Vulnerabilidades explotables hoy
406,215en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,576
- Alto21,709
- Medio20,211
- Bajo2,100
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2024-32480—97.5%
——29——CVE-2019-12526—97.5%
——29——CVE-2014-0314—97.5%
——29——CVE-2010-0740—97.5%
——29——CVE-2024-29021—97.5%
——29——CVE-2022-1556—97.5%
——29——CVE-2014-4075—97.5%
——29——CVE-2014-0324—97.5%
——29——CVE-2019-0891—97.5%
——29——CVE-2018-17199—97.5%
——29——CVE-2010-0816—97.5%
——29——CVE-2004-0985—97.5%
——29——CVE-2024-22651—97.5%
——29——CVE-2017-3167—97.5%
——29——CVE-2021-44261—97.5%
——29——CVE-2002-0698—97.5%
——29——CVE-2014-1755—97.5%
——29——CVE-2024-72646.5 MED97.5%
——29libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an
ASN.1 Generalized Time field. If given an syntactically incorrect field, the
parser might end up using -1 for the length of the *time fraction*, leading to
a `strlen()` getting performed on a pointer to a heap buffer area that is not
(purposely) null terminated.
This flaw most likely leads to a crash, but can also lead to heap contents
getting returned to the application when
[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.17dCVE-2019-0573—97.5%
——29——CVE-2004-0502—97.5%
——29——CVE-2014-2497—97.5%
——29——CVE-2024-8191—97.5%
——29——CVE-2019-8600—97.5%
——29——CVE-2016-9361—97.5%
——29——CVE-2024-39309—97.5%
——29——CVE-2007-0247—97.5%
——29——CVE-2021-27154—97.5%
——29——CVE-2019-0598—97.5%
——29——CVE-2020-29453—97.5%
——29——CVE-2018-1336—97.5%
——29——CVE-2021-41355—97.5%
——29——CVE-2008-2439—97.5%
——29——CVE-2018-10008029.8 CRÍ97.5%
——29Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in shutil module (make_archive function) that can result in Denial of service, Information gain via injection of arbitrary files on the system or entire drive. This attack appear to be exploitable via Passage of unfiltered user input to the function. This vulnerability appears to have been fixed in after commit add531a1e55b0a739b0f42582f1c9747e5649ace.23dCVE-2025-80858.6 ALT97.5%
——29The Ditty WordPress plugin before 3.1.58 lacks authorization and authentication for requests to its displayItems endpoint, allowing unauthenticated visitors to make requests to arbitrary URLs.31dCVE-2010-3234—97.5%
——29——CVE-2025-32583—97.5%
——29——CVE-2010-1879—97.5%
——29——CVE-2010-2573—97.5%
——29——CVE-2019-0599—97.5%
——29——CVE-2023-20890—97.5%
——29——