Vulnerabilidades explotables hoy
4,375en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,756
Nuevos KEV · 24H0
Exploit Today ≥ 701,689
Distribución · última ventana
- Crítico5,082
- Alto19,899
- Medio18,229
- Bajo1,858
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2021-2394—99.5%
——30——CVE-2021-213466.1 MED99.5%
——30XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.19dCVE-2009-1979—99.5%
——30——CVE-2022-36099—99.5%
——30——CVE-2020-35951—99.5%
——30——CVE-2010-4417—99.5%
——30——CVE-2018-15811—99.5%
KEV—80DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability—CVE-2014-5073—99.5%
——30——CVE-2022-44698—99.5%
KEVR80Microsoft Defender SmartScreen Security Feature Bypass Vulnerability—CVE-2018-14728—99.5%
——30——CVE-2023-44221—99.5%
KEV—80SonicWall SMA100 Appliances OS Command Injection Vulnerability—CVE-2021-22145—99.5%
——30——CVE-2022-34721—99.5%
——30——CVE-2025-3102—99.5%
——30——CVE-2021-21616—99.5%
——30——CVE-2024-8504—99.5%
——30——CVE-2023-29509—99.5%
——30——CVE-2010-2156—99.5%
——30——CVE-2013-0081—99.5%
——30——CVE-2007-0042—99.5%
——30——CVE-2025-63899.8 CRÍ99.5%
——30The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeit_articles_pagination_callback() function. This is due to the function accepting user input and then passing that through call_user_func(). This makes it possible for unauthenticated attackers to execute code on the server which can be leveraged to inject backdoors or, for example, create new administrative user accounts.8dCVE-2022-42424—99.5%
——30——CVE-2022-42427—99.5%
——30——CVE-2022-42429—99.5%
——30——CVE-2022-42425—99.5%
——30——CVE-2021-41303—99.5%
——30——CVE-2026-250899.8 CRÍ99.5%
KEV—80Fortinet FortiSandbox OS Command Injection Vulnerability95dCVE-2013-1391—99.5%
——30——CVE-2025-29891—99.5%
——30——CVE-2023-4220—99.5%
——30——CVE-2024-36404—99.5%
——30——CVE-2014-7141—99.5%
——30——CVE-2021-416539.8 CRÍ99.5%
——30The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to remote code execution via a crafted payload in an IP address input field.110dCVE-2020-14179—99.5%
——30——CVE-2023-388368.8 ALT99.5%
——30File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header to bypass MIME type checks.110dCVE-2021-21668—99.5%
——30——CVE-2002-1142—99.5%
——30——CVE-2021-30860—99.5%
KEV—80Apple Multiple Products Integer Overflow Vulnerability—CVE-2021-213445.3 MED99.5%
——30XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.19dCVE-2020-2140—99.5%
——30——