Vulnerabilidades explotables hoy
406,443en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,571
- Alto21,547
- Medio20,115
- Bajo2,096
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2011-3499—96.7%
——29——CVE-2013-2471—96.7%
——29——CVE-2024-353978.8 ALT96.7%
——29TOTOLINK CP900L v4.1.5cu.798_B20221228 weas discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.116dCVE-2010-1688—96.7%
——29——CVE-2016-3389—96.7%
——29——CVE-2021-21797—96.7%
——29——CVE-2006-00339.3 SIN96.7%
——29Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted PNG image that triggers memory corruption when it is parsed.40dCVE-2014-7857—96.7%
——29——CVE-2018-1301—96.7%
——29——CVE-2013-1602—96.7%
——29——CVE-2014-5091—96.7%
——29——CVE-2020-11188.6 ALT96.7%
——29A denial of service vulnerability exists in the Windows implementation of Transport Layer Security (TLS) when it improperly handles certain key exchanges. An attacker who successfully exploited the vulnerability could cause a target system to stop responding.
To exploit this vulnerability, a remote unauthenticated attacker could send a specially crafted request to a target system utilizing TLS 1.2 or lower, triggering the system to automatically reboot.
The update addresses the vulnerability by changing the way TLS key exchange messages are validated.75dCVE-2014-2674—96.7%
——29——CVE-2020-1208—96.7%
——29——CVE-2000-0330—96.7%
——29——CVE-2002-0723—96.7%
——29——CVE-2020-18568—96.7%
——29——CVE-2008-2712—96.7%
——29——CVE-2024-263059.8 CRÍ96.7%
——29There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
41dCVE-2025-6463—96.7%
——29——CVE-2012-4409—96.7%
——29——CVE-2014-2799—96.7%
——29——CVE-2016-2518—96.7%
——29——CVE-2017-8990—96.7%
——29——CVE-2026-94416.3 MED96.7%
——29A security flaw has been discovered in Edimax BR-6478AC 1.23. Affected by this issue is the function formiNICbasic of the file /goform/formiNICbasic of the component POST Request Handler. Performing a manipulation of the argument rootAPmac results in command injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.102dCVE-2014-4111—96.7%
——29——CVE-2005-0399—96.7%
——29——CVE-2013-3909—96.7%
——29——CVE-2015-1748—96.7%
——29——CVE-2008-2950—96.7%
——29——CVE-2014-7858—96.7%
——29——CVE-2018-1149—96.7%
——29——CVE-2012-6422—96.7%
——29——CVE-2022-36971—96.7%
——29——CVE-2013-6924—96.7%
——29——CVE-2014-4105—96.7%
——29——CVE-2016-3295—96.7%
——29——CVE-2019-17361—96.7%
——29——CVE-2026-58509.8 CRÍ96.7%
——29A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setVpnPassCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument pptpPassThru leads to os command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.7dCVE-2023-28219—96.7%
——29——