Vulnerabilidades explotables hoy
406,286en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,560
- Alto21,573
- Medio20,071
- Bajo2,088
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2013-6810—97.1%
——29——CVE-2018-8231—97.1%
——29——CVE-2017-16393—97.1%
——29——CVE-2019-1122—97.1%
——29——CVE-2022-28452—97.1%
——29——CVE-2006-1900—97.1%
——29——CVE-2017-8631—97.1%
——29——CVE-2017-0247—97.1%
——29——CVE-2015-2479—97.1%
——29——CVE-2013-0008—97.1%
——29——CVE-2015-1673—97.1%
——29——CVE-2017-5811—97.1%
——29——CVE-2018-13045.9 MED97.1%
——29The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 when used as part of a security constraint definition. This caused the constraint to be ignored. It was, therefore, possible for unauthorised users to gain access to web application resources that should have been protected. Only security constraints with a URL pattern of the empty string were affected.17dCVE-2019-1481—97.1%
——29——CVE-2001-0212—97.1%
——29——CVE-2009-4137—97.1%
——29——CVE-2018-7669—97.1%
——29——CVE-2018-13981—97.1%
——29——CVE-2002-0621—97.1%
——29——CVE-2022-0902—97.1%
——29——CVE-2009-2509—97.1%
——29——CVE-2011-4109—97.1%
——29——CVE-2016-8581—97.1%
——29——CVE-2025-48148—97.0%
——29——CVE-2019-10172—97.1%
——29——CVE-2017-15710—97.1%
——29——CVE-2003-0813—97.1%
——29——CVE-2023-30149—97.1%
——29——CVE-2025-0868—97.1%
——29——CVE-2002-0695—97.1%
——29——CVE-2011-1273—97.1%
——29——CVE-2011-0262—97.1%
——29——CVE-2019-1306—97.1%
——29——CVE-2025-140924.7 MED97.1%
——29A security vulnerability has been detected in Edimax BR-6478AC V3 1.0.15. This issue affects the function sub_416898 of the file /boafrm/formDebugDiagnosticRun. The manipulation of the argument host leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.14dCVE-2002-1437—97.1%
——29——CVE-2022-1552—97.1%
——29——CVE-2005-1191—97.1%
——29——CVE-2019-1123—97.1%
——29——CVE-2011-1893—97.0%
——29——CVE-2018-15691—97.0%
——29——