Vulnerabilidades explotables hoy
408,074en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,768
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,777
- Alto22,472
- Medio20,927
- Bajo2,195
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2017-0229—95.8%
——29——CVE-2020-0974—95.8%
——29——CVE-2014-6349—95.8%
——29——CVE-2024-4540910.0 CRÍ95.8%
——29The Ruby SAML library is for implementing the client side of a SAML authorization. Ruby-SAML in <= 12.2 and 1.13.0 <= 1.16.0 does not properly verify the signature of the SAML Response. An unauthenticated attacker with access to any signed saml document (by the IdP) can thus forge a SAML Response/Assertion with arbitrary contents. This would allow the attacker to log in as arbitrary user within the vulnerable system. This vulnerability is fixed in 1.17.0 and 1.12.3.2dCVE-2018-16395—95.8%
——29——CVE-2012-3236—95.8%
——29——CVE-2001-0199—95.8%
——29——CVE-2006-1770—95.8%
——29——CVE-2018-6913—95.8%
——29——CVE-2014-9160—95.8%
——29——CVE-2002-1077—95.8%
——29——CVE-2013-4838—95.8%
——29——CVE-2018-19125—95.8%
——29——CVE-2017-8946—95.8%
——29——CVE-2007-4924—95.8%
——29——CVE-2001-0432—95.8%
——29——CVE-2024-51982—95.8%
——29——CVE-2021-43734—95.8%
——29——CVE-2021-28419—95.8%
——29——CVE-2013-1616—95.8%
——29——CVE-2010-2011—95.8%
——29——CVE-2016-3226—95.8%
——29——CVE-2007-4478—95.8%
——29——CVE-2005-0500—95.8%
——29——CVE-2008-1965—95.8%
——29——CVE-2004-2364—95.8%
——29——CVE-2015-2489—95.8%
——29——CVE-2019-145409.8 CRÍ95.8%
——29A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.28dCVE-2004-0953—95.8%
——29——CVE-2021-24405—95.8%
——29——CVE-2015-7251—95.8%
——29——CVE-2001-0013—95.8%
——29——CVE-1999-0426—95.8%
——29——CVE-2015-1627—95.8%
——29——CVE-2010-0024—95.8%
——29——CVE-2022-38841—95.8%
——29——CVE-2004-1392—95.8%
——29——CVE-2017-6640—95.8%
——29——CVE-2019-175637.5 ALT95.8%
——29When using FORM authentication with Apache Tomcat 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 and 7.0.0 to 7.0.98 there was a narrow window where an attacker could perform a session fixation attack. The window was considered too narrow for an exploit to be practical but, erring on the side of caution, this issue has been treated as a security vulnerability.28dCVE-2014-9456—95.8%
——29——