Vulnerabilidades explotables hoy
406,313en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,562
- Alto21,577
- Medio20,086
- Bajo2,090
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2021-45837—96.9%
——29——CVE-2013-42865.8 SIN96.9%
——29Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is used, does not properly handle certain inconsistent HTTP request headers, which allows remote attackers to trigger incorrect identification of a request's length and conduct request-smuggling attacks via (1) multiple Content-Length headers or (2) a Content-Length header and a "Transfer-Encoding: chunked" header. NOTE: this vulnerability exists because of an incomplete fix for CVE-2005-2090.23dCVE-2008-0748—96.9%
——29——CVE-2006-5864—96.9%
——29——CVE-2012-2536—96.9%
——29——CVE-2002-1717—96.9%
——29——CVE-2023-20048—96.9%
——29——CVE-2016-0107—96.9%
——29——CVE-2007-4938—96.9%
——29——CVE-2005-1758—96.9%
——29——CVE-2015-4666—96.9%
——29——CVE-2023-4068—96.9%
——29——CVE-2019-0847—96.9%
——29——CVE-2016-0123—96.9%
——29——CVE-2015-3185—96.9%
——29——CVE-2009-1890—96.9%
——29——CVE-2015-0070—96.9%
——29——CVE-2021-42667—96.9%
——29——CVE-2016-0113—96.9%
——29——CVE-2010-1471—96.9%
——29——CVE-2016-10367—96.9%
——29——CVE-2018-12909—96.9%
——29——CVE-2021-32675—96.9%
——29——CVE-2015-9499—96.9%
——29——CVE-2016-0112—96.9%
——29——CVE-2014-6362—96.9%
——29——CVE-2019-0597—96.9%
——29——CVE-2016-0114—96.9%
——29——CVE-2013-7137—96.9%
——29——CVE-2014-9296—96.9%
——29——CVE-2015-1686—96.9%
——29——CVE-2023-335329.8 CRÍ96.9%
——29There is a command injection vulnerability in the Netgear R6250 router with Firmware Version 1.0.4.48. If an attacker gains web management privileges, they can inject commands into the post request parameters, thereby gaining shell privileges.116dCVE-2024-7828—96.9%
——29——CVE-2011-4313—96.9%
——29——CVE-2004-1292—96.9%
——29——CVE-2021-391418.5 ALT96.9%
——29XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. XStream 1.4.18 uses no longer a blacklist by default, since it cannot be secured for general purpose.25dCVE-2011-2667—96.9%
——29——CVE-2007-0103—96.9%
——29——CVE-1999-0039—96.9%
——29——CVE-2017-7455—96.9%
——29——