Vulnerabilidades explotables hoy
406,871en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,596
- Alto21,811
- Medio20,336
- Bajo2,115
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2012-0547—96.2%
——29——CVE-2016-3342—96.2%
——29——CVE-2004-0716—96.2%
——29——CVE-2022-28233—96.2%
——29——CVE-2014-6374—96.2%
——29——CVE-2019-0787—96.2%
——29——CVE-2019-7297—96.2%
——29——CVE-2016-7065—96.2%
——29——CVE-2020-16896—96.2%
——29——CVE-2023-40507.5 ALT96.2%
——29In some cases, an untrusted input stream was copied to a stack buffer without checking its size. This resulted in a potentially exploitable crash which could have led to a sandbox escape. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.11dCVE-2025-3577—96.2%
——29——CVE-2020-1240—96.2%
——29——CVE-2018-19862—96.2%
——29——CVE-2017-11934—96.2%
——29——CVE-2024-37080—96.2%
——29——CVE-2021-25159—96.2%
——29——CVE-2017-8555—96.2%
——29——CVE-2011-4620—96.2%
——29——CVE-2010-2084—96.2%
——29——CVE-2020-369629.8 CRÍ96.2%
——29Tendenci 12.3.1 contains a CSV formula injection vulnerability in the contact form message field that allows attackers to inject malicious formulas during export. Attackers can submit crafted payloads like '=10+20+cmd|' /C calc'!A0' in the message field to trigger arbitrary command execution when the CSV is opened in spreadsheet applications.26dCVE-2019-0788—96.2%
——29——CVE-2021-25832—96.2%
——29——CVE-2019-11444—96.2%
——29——CVE-2019-1290—96.2%
——29——CVE-2015-51744.3 MED96.2%
——29Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.. (slash dot dot) in a pathname used by a web application in a getResource, getResourceAsStream, or getResourcePaths call, as demonstrated by the $CATALINA_BASE/webapps directory.20dCVE-2019-6275—96.2%
——29——CVE-2019-0756—96.2%
——29——CVE-2014-8675—96.2%
——29——CVE-2006-2900—96.2%
——29——CVE-2007-0981—96.2%
——29——CVE-2013-0804—96.2%
——29——CVE-2017-5630—96.2%
——29——CVE-1999-1063—96.2%
——29——CVE-2011-4372—96.2%
——29——CVE-2021-460099.8 CRÍ96.2%
——29In Totolink A3100R V5.9c.4577, multiple pages can be read by curl or Burp Suite without authentication. Additionally, admin configurations can be set without cookies.118dCVE-2025-7414—96.2%
——29——CVE-2022-27796—96.2%
——29——CVE-2000-1003—96.2%
——29——CVE-2008-1188—96.2%
——29——CVE-2022-28230—96.2%
——29——