Vulnerabilidades explotables hoy
413,917en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,605
- Alto22,516
- Medio20,838
- Bajo2,138
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2007-3383—95.5%
——29——CVE-2025-137996.3 MED95.5%
——29A vulnerability has been found in ADSLR NBR1005GPEV2 250814-r037c. This vulnerability affects the function ap_macfilter_del of the file /send_order.cgi. The manipulation of the argument mac leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.25dCVE-2018-71608.8 ALT95.5%
——29The Node.js inspector, in 6.x and later is vulnerable to a DNS rebinding attack which could be exploited to perform remote code execution. An attack is possible from malicious websites open in a web browser on the same computer, or another computer with network access to the computer running the Node.js process. A malicious website could use a DNS rebinding attack to trick the web browser to bypass same-origin-policy checks and to allow HTTP connections to localhost or to hosts on the local network. If a Node.js process with the debug port active is running on localhost or on a host on the local network, the malicious website could connect to it as a debugger, and get full code execution access.35dCVE-2009-2193—95.5%
——29——CVE-2005-1532—95.5%
——29——CVE-2025-138006.3 MED95.5%
——29A vulnerability was found in ADSLR NBR1005GPEV2 250814-r037c. This issue affects the function set_mesh_disconnect of the file /send_order.cgi. The manipulation of the argument mac results in command injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.25dCVE-2019-17626—95.5%
——29——CVE-2004-0888—95.5%
——29——CVE-2015-6490—95.5%
——29——CVE-2026-2527—95.5%
——29——CVE-2023-6304—95.5%
——29——CVE-2007-2593—95.5%
——29——CVE-2002-2311—95.5%
——29——CVE-2020-11527—95.5%
——29——CVE-2002-0068—95.5%
——29——CVE-2022-32275—95.5%
——29——CVE-2013-1299—95.5%
——29——CVE-2017-3059—95.5%
——29——CVE-2019-0802—95.5%
——29——CVE-2015-2544—95.5%
——29——CVE-2010-1475—95.5%
——29——CVE-2002-2015—95.5%
——29——CVE-2010-1722—95.5%
——29——CVE-2013-45904.3 SIN95.5%
——29Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 allows attackers to obtain "Tomcat internals" information by leveraging the presence of an untrusted web application with a context.xml, web.xml, *.jspx, *.tagx, or *.tld XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.34dCVE-2017-20212—95.5%
——29——CVE-2010-4180—95.5%
——29——CVE-2017-7041—95.5%
——29——CVE-2007-2428—95.5%
——29——CVE-2025-34102—95.5%
——29——CVE-2007-4504—95.5%
——29——CVE-2000-0883—95.5%
——29——CVE-2015-2543—95.5%
——29——CVE-2019-11678—95.5%
——29——CVE-2020-16199—95.5%
——29——CVE-1999-0926—95.5%
——29——CVE-2009-3874—95.5%
——29——CVE-2013-5613—95.5%
——29——CVE-2019-7804—95.5%
——29——CVE-2011-1470—95.5%
——29——CVE-2015-6044—95.5%
——29——