Vulnerabilidades explotables hoy
406,286en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,560
- Alto21,575
- Medio20,079
- Bajo2,088
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2011-1273—97.1%
——29——CVE-2001-0212—97.1%
——29——CVE-2014-0280—97.1%
——29——CVE-2006-5627—97.1%
——29——CVE-2011-0031—97.1%
——29——CVE-2009-4137—97.1%
——29——CVE-2011-0653—97.1%
——29——CVE-2025-124908.8 ALT97.1%
——29Netgate pfSense CE Suricata Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Netgate pfSense. Authentication is required to exploit this vulnerability.
The specific flaw exists within the Suricata package. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to create files in the context of root. Was ZDI-CAN-28085.25dCVE-2006-1900—97.1%
——29——CVE-2011-1278—97.1%
——29——CVE-2017-8631—97.1%
——29——CVE-2014-5119—97.1%
——29——CVE-2024-7928—97.0%
——29——CVE-2017-5404—97.1%
——29——CVE-2019-1128—97.1%
——29——CVE-2006-3354—97.1%
——29——CVE-2008-0250—97.1%
——29——CVE-2015-3440—97.1%
——29——CVE-2002-0621—97.1%
——29——CVE-2016-8581—97.1%
——29——CVE-2007-1770—97.1%
——29——CVE-2010-5107—97.1%
——29——CVE-2025-448239.9 CRÍ97.0%
——29Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/get_users call. This is GL:NLS#475.24dCVE-2016-0084—97.1%
——29——CVE-2023-1549—97.1%
——29——CVE-2025-48148—97.0%
——29——CVE-2014-0278—97.1%
——29——CVE-2025-55296—97.1%
——29——CVE-2011-1262—97.1%
——29——CVE-2017-0228—97.1%
——29——CVE-2006-3317—97.1%
——29——CVE-2019-1912—97.1%
——29——CVE-2025-217587.8 ALT97.1%
——29In the Linux kernel, the following vulnerability has been resolved:
ipv6: mcast: add RCU protection to mld_newpack()
mld_newpack() can be called without RTNL or RCU being held.
Note that we no longer can use sock_alloc_send_skb() because
ipv6.igmp_sk uses GFP_KERNEL allocations which can sleep.
Instead use alloc_skb() and charge the net->ipv6.igmp_sk
socket under RCU protection.18dCVE-2019-1121—97.1%
——29——CVE-2015-2280—97.1%
——29——CVE-2019-1306—97.1%
——29——CVE-2010-1531—97.1%
——29——CVE-2022-45925—97.1%
——29——CVE-2016-3382—97.1%
——29——CVE-2010-1258—97.1%
——29——