Vulnerabilidades explotables hoy
4,375en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,756
Nuevos KEV · 24H0
Exploit Today ≥ 701,689
Distribución · última ventana
- Crítico5,086
- Alto19,906
- Medio18,230
- Bajo1,858
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2023-49103—99.6%
KEV—80ownCloud graphapi Information Disclosure Vulnerability—CVE-2023-295259.9 CRÍ99.6%
——30XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Affected versions of xwiki are subject to code injection in the `since` parameter of the `/xwiki/bin/view/XWiki/Notifications/Code/LegacyNotificationAdministration` endpoint. This provides an XWiki syntax injection attack via the since-parameter, allowing privilege escalation from view to programming rights and subsequent code execution privilege. The vulnerability has been patched in XWiki 15.0-rc-1, 14.10.3, 14.4.8 and 14.10.3. Users are advised to upgrade. Users unable to upgrade may modify the page `XWiki.Notifications.Code.LegacyNotificationAdministration` to add the missing escaping. For versions < 14.6-rc-1 a workaround is to modify the file `<xwikiwebapp>/templates/distribution/eventmigration.wiki` to add the missing escaping.2dCVE-2020-13562—99.6%
——30——CVE-2008-3466—99.6%
——30——CVE-2013-1347—99.6%
KEV—80Microsoft Internet Explorer Remote Code Execution Vulnerability—CVE-2012-1440—99.6%
——30——CVE-2014-1761—99.6%
KEV—80Microsoft Word Memory Corruption Vulnerability—CVE-2024-1512—99.6%
——30——CVE-2018-0127—99.6%
——30——CVE-2010-0842—99.6%
——30——CVE-2008-2639—99.6%
——30——CVE-2002-1123—99.6%
——30——CVE-2015-2797—99.6%
——30——CVE-2018-10823—99.6%
——30——CVE-2023-26801—99.6%
——30——CVE-2022-2560—99.6%
——30——CVE-2017-113579.8 CRÍ99.6%
KEVR80Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability73dCVE-2020-0609—99.6%
——30——CVE-2021-26914—99.6%
——30——CVE-2007-1748—99.6%
——30——CVE-2026-4855810.0 CRÍ99.6%
KEV—80SimpleHelp Authentication Bypass Vulnerability19dCVE-2007-2446—99.6%
——30——CVE-2023-35150—99.6%
——30——CVE-2019-12840—99.6%
——30——CVE-2010-1549—99.6%
——30——CVE-2020-13166—99.6%
——30——CVE-2003-0714—99.6%
——30——CVE-2013-0634—99.6%
——30——CVE-2006-5745—99.6%
——30——CVE-2024-1698—99.6%
——30——CVE-2016-4054—99.6%
——30——CVE-2020-15148—99.6%
——30——CVE-2022-34176—99.6%
——30——CVE-2020-10808—99.6%
——30——CVE-2016-0709—99.6%
——30——CVE-2025-26794—99.6%
——30——CVE-2014-6352—99.6%
KEV—80Microsoft Windows Code Injection Vulnerability—CVE-2020-11532—99.6%
——30——CVE-2018-12709.8 CRÍ99.6%
——30Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack.18dCVE-2008-2499—99.6%
——30——