Vulnerabilidades explotables hoy
4,375en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,756
Nuevos KEV · 24H0
Exploit Today ≥ 701,689
Distribución · última ventana
- Crítico4,727
- Alto18,786
- Medio17,139
- Bajo1,727
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2020-5722—99.7%
KEV—80Grandstream Networks UCM6200 Series SQL Injection Vulnerability—CVE-2024-5156710.0 CRÍ99.7%
KEVR80CyberPanel Incorrect Default Permissions Vulnerability83dCVE-2021-22123—99.7%
——30——CVE-2018-1000006—99.7%
——30——CVE-2013-72859.8 CRÍ99.7%
——30Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. e.g. JSON.17dCVE-2023-3388—99.7%
——30——CVE-2025-47916—99.7%
——30——CVE-2018-17246—99.7%
——30——CVE-2024-43451—99.7%
KEV—80Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability—CVE-2017-0213—99.7%
KEVR80Microsoft Windows Privilege Escalation Vulnerability—CVE-2010-3563—99.7%
——30——CVE-2024-38077—99.7%
——30——CVE-2024-38112—99.7%
KEV—80Microsoft Windows MSHTML Platform Spoofing Vulnerability—CVE-2019-12314—99.7%
——30——CVE-2021-25080—99.7%
——30——CVE-2014-6037—99.7%
——30——CVE-2025-40551—99.7%
KEV—80SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability—CVE-2015-2857—99.7%
——30——CVE-2019-12257—99.7%
——30——CVE-2017-11317—99.7%
KEV—80Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability—CVE-2021-21224—99.7%
KEV—80Google Chromium V8 Type Confusion Vulnerability—CVE-2024-12856—99.7%
——30——CVE-2024-6782—99.7%
——30——CVE-2021-24155—99.7%
——30——CVE-2020-25681—99.7%
——30——CVE-2018-17552—99.7%
——30——CVE-2009-3129—99.7%
KEV—80Microsoft Excel Featheader Record Memory Corruption Vulnerability—CVE-2023-28128—99.7%
——30——CVE-2023-28432—99.7%
KEV—80MinIO Information Disclosure Vulnerability—CVE-2015-3035—99.7%
KEV—80TP-Link Multiple Archer Devices Directory Traversal Vulnerability—CVE-2023-48022—99.7%
——30——CVE-2022-28368—99.7%
——30——CVE-2022-30690—99.7%
——30——CVE-2021-3781—99.7%
——30——CVE-2018-17431—99.7%
——30——CVE-2005-3252—99.7%
——30——CVE-2023-29325—99.7%
——30——CVE-2009-2265—99.7%
——30——CVE-2020-10879—99.7%
——30——CVE-2020-3161—99.7%
KEV—80Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability—