Vulnerabilidades explotables hoy
408,074en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,768
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,770
- Alto22,437
- Medio20,913
- Bajo2,193
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2006-1990—95.8%
——29——CVE-2009-3115—95.8%
——29——CVE-2006-0720—95.8%
——29——CVE-2025-02479.8 CRÍ95.8%
——29Memory safety bugs present in Firefox 133 and Thunderbird 133. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 134 and Thunderbird 134.31dCVE-2013-7204—95.8%
——29——CVE-2018-5737—95.8%
——29——CVE-2018-8038—95.8%
——29——CVE-2018-1002203—95.8%
——29——CVE-2015-3144—95.8%
——29——CVE-2025-4524—95.8%
——29——CVE-2019-0809—95.8%
——29——CVE-2015-7780—95.8%
——29——CVE-2022-45957—95.8%
——29——CVE-2019-10969—95.8%
——29——CVE-2010-3200—95.8%
——29——CVE-2017-2966—95.8%
——29——CVE-2012-5276—95.8%
——29——CVE-2015-5417—95.8%
——29——CVE-2017-16383—95.8%
——29——CVE-2015-5421—95.8%
——29——CVE-2016-6330—95.8%
——29——CVE-2006-3472—95.8%
——29——CVE-2015-0054—95.8%
——29——CVE-2021-294254.8 MED95.8%
——29In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limited" path traversal), if the calling code would use the result to construct a path value.29dCVE-2000-1053—95.8%
——29——CVE-2015-4117—95.8%
——29——CVE-2015-5419—95.8%
——29——CVE-2018-193629.8 CRÍ95.8%
——29FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.21dCVE-2014-0683—95.8%
——29——CVE-2018-193609.8 CRÍ95.8%
——29FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic deserialization.21dCVE-2024-45844—95.8%
——29——CVE-2009-0369—95.8%
——29——CVE-2013-6618—95.8%
——29——CVE-2017-0154—95.8%
——29——CVE-2019-9831—95.8%
——29——CVE-2016-1988—95.8%
——29——CVE-2006-0814—95.8%
——29——CVE-2006-6811—95.8%
——29——CVE-2009-2446—95.8%
——29——CVE-2026-4840—95.8%
——29——