Vulnerabilidades explotables hoy
4,375en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,756
Nuevos KEV · 24H0
Exploit Today ≥ 701,689
Distribución · última ventana
- Crítico5,086
- Alto19,906
- Medio18,230
- Bajo1,858
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2020-11108—99.6%
——30——CVE-2021-28799—99.6%
KEVR80QNAP NAS Improper Authorization Vulnerability—CVE-2019-0192—99.6%
——30——CVE-2026-21858—99.6%
——30——CVE-2009-3068—99.6%
——30——CVE-2026-887728.1 ALT99.6%
KEV—80Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability28dCVE-2024-28741—99.6%
——30——CVE-2022-26318—99.6%
KEV—80WatchGuard Firebox and XTM Appliances Arbitrary Code Execution—CVE-2011-3402—99.6%
KEV—80Microsoft Windows Remote Code Execution Vulnerability—CVE-2017-0261—99.6%
KEV—80Microsoft Office Use-After-Free Vulnerability—CVE-2003-0466—99.6%
——30——CVE-2013-3183—99.6%
——30——CVE-2015-0936—99.6%
——30——CVE-2011-3587—99.6%
——30——CVE-2023-273517.5 ALT99.6%
KEVR80PaperCut NG/MF Improper Authentication Vulnerability25dCVE-2022-38772—99.6%
——30——CVE-2020-27223—99.6%
——30——CVE-2024-28075—99.6%
——30——CVE-2010-1587—99.6%
——30——CVE-2018-10583—99.6%
——30——CVE-2023-24880—99.6%
KEVR80Microsoft Windows SmartScreen Security Feature Bypass Vulnerability—CVE-2021-219757.5 ALT99.6%
KEVR80VMware Server Side Request Forgery in vRealize Operations Manager API24dCVE-2007-2139—99.6%
——30——CVE-2017-5982—99.6%
——30——CVE-2024-3408—99.6%
——30——CVE-2019-16113—99.6%
——30——CVE-2002-0079—99.6%
——30——CVE-2021-39312—99.6%
——30——CVE-2013-6221—99.6%
——30——CVE-2004-1561—99.6%
——30——CVE-2016-2108—99.6%
——30——CVE-2021-41951—99.6%
——30——CVE-2022-24288—99.6%
——30——CVE-2014-5005—99.6%
——30——CVE-2019-9851—99.6%
——30——CVE-2024-55947—99.6%
——30——CVE-2022-24734—99.6%
——30——CVE-2017-1000117—99.6%
——30——CVE-2021-213417.5 ALT99.6%
——30XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulating the processed input stream. No user is affected who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.19dCVE-2022-21145—99.6%
——30——