Vulnerabilidades explotables hoy
4,375en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,756
Nuevos KEV · 24H0
Exploit Today ≥ 701,689
Distribución · última ventana
- Crítico4,444
- Alto18,058
- Medio16,641
- Bajo1,668
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2023-4863—100.0%
KEV—80Google Chromium WebP Heap-Based Buffer Overflow Vulnerability—CVE-2024-249198.6 ALT100.0%
KEVR80Check Point Quantum Security Gateways Information Disclosure Vulnerability81dCVE-2019-27259.8 CRÍ100.0%
KEVR80Oracle WebLogic Server, Injection24dCVE-2021-45046—100.0%
KEVR80Apache Log4j2 Deserialization of Untrusted Data Vulnerability—CVE-2014-0195—100.0%
——30——CVE-2012-0158—100.0%
KEVR80Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability—CVE-2024-4879—100.0%
KEV—80ServiceNow Improper Input Validation Vulnerability—CVE-2014-3704—100.0%
——30——CVE-2025-24893—100.0%
KEV—80XWiki Platform Eval Injection Vulnerability—CVE-2025-57777.5 ALT100.0%
KEVR80Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability17dCVE-2014-8361—100.0%
KEV—80Realtek SDK Improper Input Validation Vulnerability—CVE-2022-41082—100.0%
KEVR80Microsoft Exchange Server Remote Code Execution Vulnerability—CVE-2017-126178.1 ALT100.0%
KEV—80Apache Tomcat Remote Code Execution Vulnerability61dCVE-2020-25506—100.0%
KEV—80D-Link DNS-320 Device Command Injection Vulnerability—CVE-2015-7297—100.0%
——30——CVE-2025-31161—100.0%
KEVR80CrushFTP Authentication Bypass Vulnerability—CVE-2022-47986—100.0%
KEVR80IBM Aspera Faspex Code Execution Vulnerability—CVE-2021-42013—100.0%
KEVR80Apache HTTP Server Path Traversal Vulnerability—CVE-2021-3156—100.0%
KEV—80Sudo Heap-Based Buffer Overflow Vulnerability—CVE-2020-0688—100.0%
KEVR80Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability—CVE-2019-10149—100.0%
KEV—80Exim Mail Transfer Agent (MTA) Improper Input Validation—CVE-2018-2628—100.0%
KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2024-38475—100.0%
KEV—80Apache HTTP Server Improper Escaping of Output Vulnerability—CVE-2022-41040—100.0%
KEVR80Microsoft Exchange Server Server-Side Request Forgery Vulnerability—CVE-2022-1388—100.0%
KEVR80F5 BIG-IP Missing Authentication Vulnerability—CVE-2023-38035—100.0%
KEVR80Ivanti Sentry Authentication Bypass Vulnerability—CVE-2018-15961—100.0%
KEV—80Adobe ColdFusion Unrestricted File Upload Vulnerability—CVE-2018-10562—100.0%
KEVR80Dasan GPON Routers Command Injection Vulnerability—CVE-2017-11882—100.0%
KEVR80Microsoft Office Memory Corruption Vulnerability—CVE-2022-30525—100.0%
KEV—80Zyxel Multiple Firewalls OS Command Injection Vulnerability—CVE-2021-3129—100.0%
KEVR80Laravel Ignition File Upload Vulnerability—CVE-2025-24813—100.0%
KEV—80Apache Tomcat Path Equivalence Vulnerability—CVE-2020-10189—100.0%
KEV—80Zoho ManageEngine Desktop Central File Upload Vulnerability—CVE-2014-7169—100.0%
KEV—80GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability—CVE-2024-29824—100.0%
KEV—80Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability—CVE-2024-27198—100.0%
KEVR80JetBrains TeamCity Authentication Bypass Vulnerability—CVE-2022-22963—100.0%
KEV—80VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability—CVE-2021-26085—100.0%
KEVR80Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability—CVE-2023-34362—100.0%
KEVR80Progress MOVEit Transfer SQL Injection Vulnerability—CVE-2012-1456—100.0%
——30——