Vulnerabilidades explotables hoy
413,525en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,739
- Alto22,705
- Medio21,205
- Bajo2,175
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2017-7041—95.5%
——29——CVE-2019-17626—95.5%
——29——CVE-2007-1415—95.5%
——29——CVE-2014-9374—95.5%
——29——CVE-2005-0838—95.5%
——29——CVE-2007-2390—95.5%
——29——CVE-2007-2593—95.5%
——29——CVE-2006-6740—95.5%
——29——CVE-2018-1311—95.5%
——29——CVE-2004-0888—95.5%
——29——CVE-2007-4586—95.5%
——29——CVE-2022-32275—95.5%
——29——CVE-2012-6151—95.5%
——29——CVE-2008-3996—95.5%
——29——CVE-2019-0802—95.5%
——29——CVE-2010-3676—95.5%
——29——CVE-2018-18793—95.5%
——29——CVE-2006-3192—95.5%
——29——CVE-2009-0955—95.5%
——29——CVE-2021-253297.0 ALT95.5%
——29The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely to be used, the Tomcat instance was still vulnerable to CVE-2020-9494. Note that both the previously published prerequisites for CVE-2020-9484 and the previously published mitigations for CVE-2020-9484 also apply to this issue.34dCVE-2019-7804—95.5%
——29——CVE-2013-1299—95.5%
——29——CVE-2017-3059—95.5%
——29——CVE-2019-7822—95.5%
——29——CVE-1999-0266—95.5%
——29——CVE-2015-2543—95.5%
——29——CVE-2019-7829—95.5%
——29——CVE-2007-3026—95.5%
——29——CVE-2018-71608.8 ALT95.5%
——29The Node.js inspector, in 6.x and later is vulnerable to a DNS rebinding attack which could be exploited to perform remote code execution. An attack is possible from malicious websites open in a web browser on the same computer, or another computer with network access to the computer running the Node.js process. A malicious website could use a DNS rebinding attack to trick the web browser to bypass same-origin-policy checks and to allow HTTP connections to localhost or to hosts on the local network. If a Node.js process with the debug port active is running on localhost or on a host on the local network, the malicious website could connect to it as a debugger, and get full code execution access.34dCVE-2019-7800—95.5%
——29——CVE-2014-0754—95.5%
——29——CVE-2010-1475—95.5%
——29——CVE-2007-2456—95.5%
——29——CVE-1999-0926—95.5%
——29——CVE-2002-2015—95.5%
——29——CVE-2015-6170—95.5%
——29——CVE-2024-12106—95.5%
——29——CVE-2021-21157—95.5%
——29——CVE-2017-14064—95.5%
——29——CVE-2019-7825—95.5%
——29——