Vulnerabilidades explotables hoy
406,286en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,572
- Alto21,608
- Medio20,104
- Bajo2,090
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2020-0767—97.1%
——29——CVE-2023-26602—97.1%
——29——CVE-2002-1288—97.1%
——29——CVE-2012-4557—97.1%
——29——CVE-2023-29804—97.1%
——29——CVE-2017-12945—97.1%
——29——CVE-1999-1033—97.1%
——29——CVE-2004-0393—97.1%
——29——CVE-2025-0283—97.1%
——29——CVE-2001-0150—97.1%
——29——CVE-2015-1756—97.1%
——29——CVE-2013-5842—97.1%
——29——CVE-2023-2833—97.1%
——29——CVE-2017-10075—97.1%
——29——CVE-2018-16660—97.1%
——29——CVE-2005-2308—97.1%
——29——CVE-2014-0293—97.1%
——29——CVE-2009-3019—97.1%
——29——CVE-2016-3362—97.1%
——29——CVE-2001-0719—97.1%
——29——CVE-1999-0469—97.1%
——29——CVE-2013-5045—97.1%
——29——CVE-2011-1993—97.1%
——29——CVE-2002-1688—97.1%
——29——CVE-2019-8446—97.1%
——29——CVE-2019-7838—97.1%
——29——CVE-2024-582748.3 ALT97.1%
——29Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2024-08-01 allows execution of a command within $( ) in /center/api/installation/detection JSON data, as exploited in the wild in 2024 and 2025.31dCVE-2020-1226—97.1%
——29——CVE-2008-4493—97.1%
——29——CVE-2026-2131—97.1%
——29——CVE-2012-0009—97.1%
——29——CVE-2016-7252—97.1%
——29——CVE-2022-29632—97.1%
——29——CVE-2022-366358.8 ALT97.1%
——29ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.do.116dCVE-2019-9083—97.1%
——29——CVE-2007-5892—97.1%
——29——CVE-2010-2562—97.1%
——29——CVE-2014-00755.0 SIN97.1%
——29Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service (resource consumption) via a malformed chunk size in chunked transfer coding of a request during the streaming of data.18dCVE-2025-113314.7 MED97.1%
——29A vulnerability was found in IdeaCMS up to 1.8. The impacted element is an unknown function of the file app/common/logic/admin/Config.php of the component Website Name Handler. Performing manipulation of the argument 网站名称 results in command injection. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.13dCVE-2025-6793—97.1%
——29——