Vulnerabilidades explotables hoy
406,792en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,588
- Alto21,774
- Medio20,296
- Bajo2,113
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2015-6115—96.4%
——29——CVE-2022-26159—96.4%
——29——CVE-2018-15933—96.4%
——29——CVE-2017-3064—96.4%
——29——CVE-2022-233477.5 ALT96.4%
——29BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks.117dCVE-2022-25216—96.4%
——29——CVE-2018-6383—96.4%
——29——CVE-2015-16839.3 SIN96.4%
——29Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."19dCVE-2018-4237—96.4%
——29——CVE-2026-3493810.0 CRÍ96.4%
——29PraisonAI is a multi-agent teams system. Prior to version 1.5.90, execute_code() in praisonai-agents runs attacker-controlled Python inside a three-layer sandbox that can be fully bypassed by passing a str subclass with an overridden startswith() method to the _safe_getattr wrapper, achieving arbitrary OS command execution on the host. This issue has been patched in version 1.5.90.101dCVE-2026-33309—96.4%
——29——CVE-2025-40738—96.4%
——29——CVE-2023-322337.8 ALT96.4%
——29In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.19dCVE-2005-2758—96.4%
——29——CVE-2018-4913—96.4%
——29——CVE-2007-4227—96.4%
——29——CVE-2016-0018—96.4%
——29——CVE-2025-69787.2 ALT96.4%
——29Diagnostics command injection vulnerability26dCVE-2018-12862—96.4%
——29——CVE-2012-3577—96.4%
——29——CVE-2009-1420—96.4%
——29——CVE-2016-2278—96.4%
——29——CVE-2026-3066—96.4%
——29——CVE-2017-6444—96.4%
——29——CVE-2025-59467.2 ALT96.4%
——29Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Centreon Infra Monitoring (Poller reload setup in the configuration modules) allows OS Command Injection.
On the poller parameters page, a user with high privilege is able to concatenate custom instructions into the poller reload command.
This issue affects Infra Monitoring: from 24.10.0 before 24.10.13, from 24.04.0 before 24.04.18, from 23.10.0 before 23.10.28.26dCVE-2019-10863—96.4%
——29——CVE-2006-1618—96.4%
——29——CVE-2026-61959.8 CRÍ96.4%
——29A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this issue is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument admpass leads to os command injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.7dCVE-2026-2615—96.4%
——29——CVE-2020-13700—96.4%
——29——CVE-2000-094110.0 SIN96.4%
——29Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter.41dCVE-2006-2548—96.4%
——29——CVE-2016-10161—96.4%
——29——CVE-2010-0985—96.4%
——29——CVE-2016-3243—96.4%
——29——CVE-2019-5782—96.4%
——29——CVE-2015-0922—96.4%
——29——CVE-2020-0970—96.4%
——29——CVE-2021-34842—96.4%
——29——CVE-2007-4430—96.4%
——29——