Vulnerabilidades explotables hoy
406,871en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,596
- Alto21,811
- Medio20,336
- Bajo2,115
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2008-5692—96.3%
——29——CVE-2015-0057—96.3%
——29——CVE-2006-2426—96.3%
——29——CVE-2017-12718—96.3%
——29——CVE-2015-1638—96.3%
——29——CVE-2007-2292—96.3%
——29——CVE-2018-147189.8 CRÍ96.3%
——29FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.26dCVE-2025-3785—96.3%
——29——CVE-2015-2826—96.3%
——29——CVE-2024-34854—96.3%
——29——CVE-2016-2170—96.3%
——29——CVE-2015-6050—96.3%
——29——CVE-2014-8457—96.3%
——29——CVE-2024-32394—96.3%
——29——CVE-2025-127629.1 CRÍ96.3%
——29pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical risk to the integrity and security of the database management system and underlying data.16dCVE-2025-147047.3 ALT96.2%
——29A vulnerability was found in Shiguangwu sgwbox N3 2.0.25. The impacted element is an unknown function of the file /eshell of the component API. The manipulation results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.27dCVE-2015-51744.3 MED96.2%
——29Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.. (slash dot dot) in a pathname used by a web application in a getResource, getResourceAsStream, or getResourcePaths call, as demonstrated by the $CATALINA_BASE/webapps directory.20dCVE-2017-5630—96.2%
——29——CVE-2007-5184—96.2%
——29——CVE-2019-13051—96.2%
——29——CVE-2014-5246—96.2%
——29——CVE-2008-5106—96.2%
——29——CVE-2005-1252—96.2%
——29——CVE-2022-27785—96.2%
——29——CVE-2019-0788—96.2%
——29——CVE-2021-460099.8 CRÍ96.2%
——29In Totolink A3100R V5.9c.4577, multiple pages can be read by curl or Burp Suite without authentication. Additionally, admin configurations can be set without cookies.118dCVE-2020-16896—96.2%
——29——CVE-2018-19862—96.2%
——29——CVE-2017-0929—96.2%
——29——CVE-2019-1290—96.2%
——29——CVE-2014-8675—96.2%
——29——CVE-2019-1291—96.2%
——29——CVE-2022-28240—96.2%
——29——CVE-2004-0716—96.2%
——29——CVE-2012-4513—96.2%
——29——CVE-2000-1003—96.2%
——29——CVE-2021-26723—96.2%
——29——CVE-2022-28230—96.2%
——29——CVE-2024-53703—96.2%
——29——CVE-2022-38827—96.2%
——29——