Vulnerabilidades explotables hoy
402,779en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,756
Nuevos KEV · 24H0
Exploit Today ≥ 701,689
Distribución · última ventana
- Crítico5,086
- Alto19,906
- Medio18,230
- Bajo1,858
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2012-1446—100.0%
——30——CVE-2017-12635—100.0%
——30——CVE-2026-1096189.8 CRÍ100.0%
——30PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).3hCVE-2014-0195—100.0%
——30——CVE-2024-29826—100.0%
——30——CVE-2020-10220—100.0%
——30——CVE-2022-42889—100.0%
——30——CVE-2020-13379—100.0%
——30——CVE-2012-1456—100.0%
——30——CVE-2015-7297—100.0%
——30——CVE-2008-2938—100.0%
——30——CVE-2014-3704—100.0%
——30——CVE-2017-8917—100.0%
——30——CVE-2022-39952—100.0%
——30——CVE-2015-4000—100.0%
——30——CVE-2024-29823—100.0%
——30——CVE-2025-53771—100.0%
——30——CVE-2024-29825—100.0%
——30——CVE-2023-27372—100.0%
——30——CVE-2012-1459—100.0%
——30——CVE-2019-0232—100.0%
——30——CVE-2020-11022—99.9%
——30——CVE-2020-14181—99.9%
——30——CVE-2020-36289—99.9%
——30——CVE-2023-38646—99.9%
——30——CVE-2020-7209—99.9%
——30——CVE-2023-376799.8 CRÍ99.9%
——30A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server.110dCVE-2013-0156—99.9%
——30——CVE-2012-1442—99.9%
——30——CVE-2019-5736—99.9%
——30——CVE-2025-29927—99.9%
——30——CVE-2013-47867.5 ALT99.9%
——30The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC.17dCVE-2012-1443—99.9%
——30——CVE-2018-12613—99.9%
——30——CVE-2012-1457—99.9%
——30——CVE-2021-21978—99.9%
——30——CVE-2017-12542—99.9%
——30——CVE-2018-15473—99.9%
——30——CVE-2017-1000028—99.9%
——30——CVE-2015-02044.3 SIN99.9%
——30The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the "FREAK" issue. NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.12d