Vulnerabilidades explotables hoy
406,817en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,592
- Alto21,789
- Medio20,310
- Bajo2,113
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2025-2094—96.3%
——29——CVE-2022-47507—96.3%
——29——CVE-2004-0723—96.3%
——29——CVE-2009-3943—96.3%
——29——CVE-2021-43062—96.3%
——29——CVE-2011-1140—96.3%
——29——CVE-2006-7079—96.3%
——29——CVE-2006-6863—96.3%
——29——CVE-2017-11272—96.3%
——29——CVE-2025-681548.1 ALT96.3%
——29systeminformation is a System and OS information library for node.js. In versions prior to 5.27.14, the `fsSize()` function in systeminformation is vulnerable to OS command injection on Windows systems. The optional `drive` parameter is directly concatenated into a PowerShell command without sanitization, allowing arbitrary command execution when user-controlled input reaches this function. The actual exploitability depends on how applications use this function. If an application does not pass user-controlled input to `fsSize()`, it is not vulnerable. Version 5.27.14 contains a patch.33dCVE-2010-0157—96.3%
——29——CVE-2009-4488—96.3%
——29——CVE-2015-6074—96.3%
——29——CVE-2010-2204—96.3%
——29——CVE-2006-1959—96.3%
——29——CVE-2010-3719—96.3%
——29——CVE-2013-2009—96.3%
——29——CVE-2015-1657—96.3%
——29——CVE-2000-103510.0 SIN96.3%
——29Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER, PASS, or CWD command.41dCVE-2014-3997—96.3%
——29——CVE-2006-0289—96.3%
——29——CVE-2008-2303—96.3%
——29——CVE-2014-7192—96.3%
——29——CVE-2026-27826—96.3%
——29——CVE-2021-360907.5 ALT96.3%
——29When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip package.26dCVE-2019-7259—96.3%
——29——CVE-2015-6146—96.3%
——29——CVE-2011-0764—96.3%
——29——CVE-2021-38556—96.3%
——29——CVE-2018-8163—96.3%
——29——CVE-2014-6043—96.3%
——29——CVE-2005-1214—96.3%
——29——CVE-2024-0582—96.3%
——29——CVE-2015-1687—96.3%
——29——CVE-2007-5145—96.3%
——29——CVE-2000-0091—96.3%
——29——CVE-2025-28219—96.3%
——29——CVE-2021-24926—96.3%
——29——CVE-2025-27892—96.3%
——29——CVE-1999-1576—96.3%
——29——