Vulnerabilidades explotables hoy
406,402en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,568
- Alto21,536
- Medio20,089
- Bajo2,093
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2018-20220—96.8%
——29——CVE-2014-9119—96.8%
——29——CVE-2015-64209.8 CRÍ96.8%
——29Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Service Provider; Unified Computing; Voice and Unified Communications Devices; Video, Streaming, TelePresence, and Transcoding Devices; Wireless; and Cisco Hosted Services products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.26dCVE-2009-0419—96.8%
——29——CVE-2012-3575—96.8%
——29——CVE-2025-474118.1 ALT96.8%
——29A user with a legitimate non-administrator account can exploit a vulnerability in the user ID creation mechanism in Apache StreamPipes that allows them to swap the username of an existing user with that of an administrator.
This vulnerability allows an attacker to gain administrative control over the application by manipulating JWT tokens, which can lead to data tampering, unauthorized access and other security issues.
This issue affects Apache StreamPipes: through 0.97.0.
Users are recommended to upgrade to version 0.98.0, which fixes the issue.26dCVE-2017-0032—96.8%
——29——CVE-2001-0162—96.8%
——29——CVE-2022-1565—96.8%
——29——CVE-2017-0132—96.8%
——29——CVE-2018-8390—96.8%
——29——CVE-2017-0067—96.8%
——29——CVE-2007-0464—96.8%
——29——CVE-2018-8634—96.8%
——29——CVE-2009-2957—96.8%
——29——CVE-2017-8625—96.8%
——29——CVE-2022-37113—96.8%
——29——CVE-2017-0131—96.8%
——29——CVE-2005-2943—96.8%
——29——CVE-2023-22513—96.8%
——29——CVE-2010-1185—96.8%
——29——CVE-2017-6510—96.8%
——29——CVE-2017-9217—96.8%
——29——CVE-2015-2514—96.8%
——29——CVE-2019-13605—96.8%
——29——CVE-2017-15363—96.8%
——29——CVE-2010-2566—96.8%
——29——CVE-2006-0585—96.8%
——29——CVE-2026-6144710.0 CRÍ96.8%
——29PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execute_python() that executes LLM-generated Python code without AST validation, import restrictions, or sandbox enforcement. Attackers can influence LLM output through prompt injection to exfiltrate all environment secrets and execute arbitrary code on the host system.8dCVE-2017-17672—96.8%
——29——CVE-2024-10542—96.8%
——29——CVE-2010-0759—96.8%
——29——CVE-2008-3010—96.8%
——29——CVE-2001-0746—96.8%
——29——CVE-2008-0984—96.8%
——29——CVE-2024-26020—96.8%
——29——CVE-2017-0138—96.8%
——29——CVE-2007-1530—96.8%
——29——CVE-2016-8511—96.8%
——29——CVE-2023-41998—96.8%
——29——