Vulnerabilidades explotables hoy
4,375en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,756
Nuevos KEV · 24H0
Exploit Today ≥ 701,689
Distribución · última ventana
- Crítico4,727
- Alto18,786
- Medio17,139
- Bajo1,727
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2010-0483—99.7%
——30——CVE-2020-10915—99.7%
——30——CVE-2020-139357.5 ALT99.7%
——30The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lead to a denial of service.17dCVE-2026-24858—99.7%
KEV—80Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability—CVE-2023-36035—99.7%
——30——CVE-2018-17153—99.7%
——30——CVE-2018-1999002—99.7%
——30——CVE-2015-2426—99.7%
KEV—80Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability—CVE-2015-2996—99.7%
——30——CVE-2018-1160—99.7%
——30——CVE-2021-31755—99.7%
KEV—80Tenda AC11 Router Stack Buffer Overflow Vulnerability—CVE-2018-10661—99.7%
——30——CVE-2019-16057—99.7%
KEVR80D-Link DNS-320 Remote Code Execution Vulnerability—CVE-2017-14491—99.7%
——30——CVE-2024-3721—99.7%
——30——CVE-2006-5444—99.7%
——30——CVE-2019-4716—99.7%
KEV—80IBM Planning Analytics Remote Code Execution Vulnerability—CVE-2003-0085—99.7%
——30——CVE-2011-2110—99.7%
——30——CVE-2021-27907—99.7%
——30——CVE-2005-0773—99.7%
——30——CVE-2023-5360—99.7%
——30——CVE-2021-45232—99.7%
——30——CVE-2021-21017—99.7%
KEV—80Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability—CVE-2012-0152—99.7%
——30——CVE-2013-7091—99.7%
——30——CVE-2024-25641—99.7%
——30——CVE-2026-10513410.0 CRÍ99.7%
KEV—80Ahsay AhsayCBS Command Injection Vulnerability11dCVE-2018-15379—99.7%
——30——CVE-2025-5952810.0 CRÍ99.7%
——30Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vulnerable to remote code execution. The CustomMCP node allows users to input configuration settings for connecting to an external MCP server. This node parses the user-provided mcpServerConfig string to build the MCP server configuration. However, during this process, it executes JavaScript code without any security validation. Specifically, inside the convertToValidJSONString function, user input is directly passed to the Function() constructor, which evaluates and executes the input as JavaScript code. Since this runs with full Node.js runtime privileges, it can access dangerous modules such as child_process and fs. This issue has been patched in version 3.0.6.7dCVE-2024-29973—99.7%
——30——CVE-2017-5816—99.7%
——30——CVE-2020-2038—99.7%
——30——CVE-2022-2992—99.7%
——30——CVE-2016-20016—99.7%
——30——CVE-2020-11652—99.7%
KEV—80SaltStack Salt Path Traversal Vulnerability—CVE-2022-28730—99.7%
——30——CVE-2022-27166—99.7%
——30——CVE-2013-1493—99.7%
——30——CVE-2025-1098—99.7%
——30——