Vulnerabilidades explotables hoy
406,215en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,576
- Alto21,709
- Medio20,211
- Bajo2,100
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2019-18217—97.5%
——29——CVE-2012-2546—97.5%
——29——CVE-2010-2573—97.5%
——29——CVE-2017-3167—97.5%
——29——CVE-2018-17199—97.5%
——29——CVE-2014-0303—97.5%
——29——CVE-2008-6825—97.5%
——29——CVE-2024-24576—97.5%
——29——CVE-2025-80858.6 ALT97.5%
——29The Ditty WordPress plugin before 3.1.58 lacks authorization and authentication for requests to its displayItems endpoint, allowing unauthenticated visitors to make requests to arbitrary URLs.31dCVE-2014-1751—97.5%
——29——CVE-2010-0816—97.5%
——29——CVE-2022-31125—97.5%
——29——CVE-2017-8725—97.5%
——29——CVE-2013-3853—97.5%
——29——CVE-2012-0207—97.5%
——29——CVE-2024-29021—97.5%
——29——CVE-2020-11450—97.5%
——29——CVE-2021-27828—97.5%
——29——CVE-2019-11730—97.5%
——29——CVE-2026-363569.1 CRÍ97.5%
——29The GoAhead web server on MeiG Smart FORGE_SLT711 devices (firmware MDM9607.LE.1.0-00110-STD.PROD-1) allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint.118dCVE-2015-4664—97.5%
——29——CVE-2018-5733—97.5%
——29——CVE-2012-25249.3 SIN97.5%
——29Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Computer Graphics Metafile (CGM) file, aka "CGM File Format Memory Corruption Vulnerability."22dCVE-2017-3068—97.5%
——29——CVE-2013-3856—97.5%
——29——CVE-2002-0698—97.5%
——29——CVE-2005-0049—97.5%
——29——CVE-2013-3892—97.5%
——29——CVE-2014-0309—97.5%
——29——CVE-2010-0740—97.5%
——29——CVE-2019-12526—97.5%
——29——CVE-2026-25512—97.5%
——29——CVE-2013-3855—97.5%
——29——CVE-2001-0096—97.5%
——29——CVE-2021-44261—97.5%
——29——CVE-2008-2439—97.5%
——29——CVE-2024-21345—97.5%
——29——CVE-2024-22651—97.5%
——29——CVE-2004-0502—97.5%
——29——CVE-2018-10008029.8 CRÍ97.5%
——29Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in shutil module (make_archive function) that can result in Denial of service, Information gain via injection of arbitrary files on the system or entire drive. This attack appear to be exploitable via Passage of unfiltered user input to the function. This vulnerability appears to have been fixed in after commit add531a1e55b0a739b0f42582f1c9747e5649ace.23d