Vulnerabilidades explotables hoy
406,792en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,588
- Alto21,774
- Medio20,296
- Bajo2,113
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2015-6115—96.4%
——29——CVE-2012-4791—96.4%
——29——CVE-2017-16934—96.4%
——29——CVE-2015-1764—96.4%
——29——CVE-2025-69787.2 ALT96.4%
——29Diagnostics command injection vulnerability26dCVE-2017-6444—96.4%
——29——CVE-2020-13700—96.4%
——29——CVE-2025-40738—96.4%
——29——CVE-2007-4227—96.4%
——29——CVE-2018-0709—96.4%
——29——CVE-2007-0222—96.4%
——29——CVE-2010-1653—96.4%
——29——CVE-2009-1420—96.4%
——29——CVE-2018-12860—96.4%
——29——CVE-2026-30822—96.4%
——29——CVE-2011-1944—96.4%
——29——CVE-2024-1873—96.4%
——29——CVE-2010-0021—96.4%
——29——CVE-2021-44352—96.4%
——29——CVE-2015-0969—96.4%
——29——CVE-2016-1000282—96.4%
——29——CVE-2022-233477.5 ALT96.4%
——29BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks.117dCVE-2006-1618—96.4%
——29——CVE-2025-343118.8 ALT96.4%
——29IPFire versions prior to 2.29 (Core Update 198) contain a command injection vulnerability that allows an authenticated attacker to execute arbitrary commands as the user 'nobody' via multiple parameters when creating a Proxy report. When a user creates a Proxy report the application issues an HTTP POST to /cgi-bin/logs.cgi/calamaris.dat and reads the values of DAY_BEGIN, MONTH_BEGIN, YEAR_BEGIN, DAY_END, MONTH_END, YEAR_END, NUM_DOMAINS, PERF_INTERVAL, NUM_CONTENT, HIST_LEVEL, NUM_HOSTS, NUM_URLS, and BYTE_UNIT, which are interpolated directly into the shell invocation of the mkreport helper. Because these parameters are never sanitized for improper characters or constructs, a crafted POST can inject shell metacharacters into one or more fields, causing arbitrary commands to run with the privileges of the 'nobody' user.38dCVE-2018-1000001—96.4%
——29——CVE-2000-094110.0 SIN96.4%
——29Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter.41dCVE-2025-7087—96.4%
——29——CVE-2019-1072—96.4%
——29——CVE-2004-1437—96.4%
——29——CVE-2026-22844—96.4%
——29——CVE-2018-15933—96.4%
——29——CVE-2018-12862—96.4%
——29——CVE-1999-0196—96.4%
——29——CVE-2019-9581—96.4%
——29——CVE-2016-3261—96.4%
——29——CVE-2026-61959.8 CRÍ96.4%
——29A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this issue is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument admpass leads to os command injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.7dCVE-2017-1000373—96.4%
——29——CVE-2018-1002204—96.4%
——29——CVE-2010-0972—96.4%
——29——CVE-2018-15934—96.4%
——29——