Vulnerabilidades explotables hoy
406,792en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,588
- Alto21,774
- Medio20,296
- Bajo2,113
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2014-9473—96.5%
——29——CVE-2003-0447—96.5%
——29——CVE-2019-0890—96.5%
——29——CVE-2025-104416.3 MED96.5%
——29A vulnerability was found in D-Link DI-8100G, DI-8200G and DI-8003G 17.12.20A1/19.12.10A1. Affected by this issue is the function sub_433F7C of the file version_upgrade.asp of the component jhttpd. The manipulation of the argument path results in os command injection. The attack may be launched remotely. The exploit has been made public and could be used.15dCVE-2019-0901—96.5%
——29——CVE-2019-0897—96.5%
——29——CVE-2023-20036—96.5%
——29——CVE-2000-0228—96.5%
——29——CVE-2013-3631—96.5%
——29——CVE-2019-0828—96.5%
——29——CVE-2020-24581—96.5%
——29——CVE-2017-0227—96.5%
——29——CVE-2009-1902—96.5%
——29——CVE-2023-7095—96.5%
——29——CVE-2012-2149—96.5%
——29——CVE-2025-5441—96.5%
——29——CVE-2020-157787.4 ALT96.5%
——29scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."20dCVE-2017-0093—96.5%
——29——CVE-2008-3465—96.5%
——29——CVE-2014-0295—96.5%
——29——CVE-2002-1603—96.5%
——29——CVE-2019-0947—96.5%
——29——CVE-2018-0956—96.5%
——29——CVE-2021-33265—96.5%
——29——CVE-2004-1293—96.5%
——29——CVE-2025-5446—96.5%
——29——CVE-2012-0050—96.5%
——29——CVE-2021-34586—96.5%
——29——CVE-2011-2443—96.5%
——29——CVE-2016-0154—96.5%
——29——CVE-2011-0614—96.5%
——29——CVE-2013-3724—96.5%
——29——CVE-2022-25082—96.5%
——29——CVE-2023-41183—96.5%
——29——CVE-2022-29329—96.5%
——29——CVE-2023-543359.8 CRÍ96.5%
——29eXtplorer 2.1.14 contains an authentication bypass vulnerability that allows attackers to login without a password by manipulating the login request. Attackers can exploit this flaw to upload malicious PHP files and execute remote commands on the vulnerable file management system.27dCVE-2002-2435—96.5%
——29——CVE-2010-4300—96.5%
——29——CVE-2012-5321—96.5%
——29——CVE-2014-4118—96.5%
——29——