Vulnerabilidades explotables hoy
406,402en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,568
- Alto21,536
- Medio20,089
- Bajo2,093
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2013-6450—96.8%
——29——CVE-2023-45852—96.8%
——29——CVE-2015-2556—96.8%
——29——CVE-2008-3010—96.8%
——29——CVE-2016-0772—96.8%
——29——CVE-2016-3740—96.8%
——29——CVE-2015-3456—96.8%
——29——CVE-2002-2081—96.8%
——29——CVE-2018-20220—96.8%
——29——CVE-2008-0984—96.8%
——29——CVE-2020-12695—96.8%
——29——CVE-2009-0419—96.8%
——29——CVE-2015-0080—96.8%
——29——CVE-2017-0131—96.8%
——29——CVE-2007-4566—96.8%
——29——CVE-2014-2785—96.8%
——29——CVE-2026-6144710.0 CRÍ96.8%
——29PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execute_python() that executes LLM-generated Python code without AST validation, import restrictions, or sandbox enforcement. Attackers can influence LLM output through prompt injection to exfiltrate all environment secrets and execute arbitrary code on the host system.8dCVE-2017-0136—96.8%
——29——CVE-2007-2031—96.8%
——29——CVE-2016-8511—96.8%
——29——CVE-2007-0464—96.8%
——29——CVE-2010-4328—96.8%
——29——CVE-2015-2514—96.8%
——29——CVE-2019-3833—96.8%
——29——CVE-2004-2532—96.8%
——29——CVE-2022-37113—96.8%
——29——CVE-2025-474118.1 ALT96.8%
——29A user with a legitimate non-administrator account can exploit a vulnerability in the user ID creation mechanism in Apache StreamPipes that allows them to swap the username of an existing user with that of an administrator.
This vulnerability allows an attacker to gain administrative control over the application by manipulating JWT tokens, which can lead to data tampering, unauthorized access and other security issues.
This issue affects Apache StreamPipes: through 0.97.0.
Users are recommended to upgrade to version 0.98.0, which fixes the issue.26dCVE-2017-0035—96.8%
——29——CVE-2016-3378—96.8%
——29——CVE-2015-2560—96.8%
——29——CVE-2006-13169.3 SIN96.8%
——29Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with malformed string that triggers memory corruption related to record lengths, aka "Microsoft Office Parsing Vulnerability," a different vulnerability than CVE-2006-2389.40dCVE-2015-0076—96.8%
——29——CVE-2021-386668.8 ALT96.8%
——29Remote Desktop Client Remote Code Execution Vulnerability75dCVE-2022-1565—96.8%
——29——CVE-2010-1185—96.8%
——29——CVE-2024-488847.5 ALT96.8%
——29A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, FortiOS 7.2.0 through 7.2.9, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4.0 through 6.4.15, FortiProxy 7.4.0 through 7.4.5, FortiProxy 7.2.0 through 7.2.11, FortiProxy 7.0.0 through 7.0.18, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions may allow a remote authenticated attacker with access to the security fabric interface and port to write arbitrary files or a remote unauthenticated attacker to delete an arbitrary folder11dCVE-2017-15363—96.8%
——29——CVE-2015-64209.8 CRÍ96.8%
——29Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Service Provider; Unified Computing; Voice and Unified Communications Devices; Video, Streaming, TelePresence, and Transcoding Devices; Wireless; and Cisco Hosted Services products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.26dCVE-2005-2665—96.8%
——29——CVE-2017-5799—96.8%
——29——