Vulnerabilidades explotables hoy
413,525en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,739
- Alto22,705
- Medio21,204
- Bajo2,175
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2019-0933—95.4%
——29——CVE-2007-1942—95.4%
——29——CVE-2012-0001—95.4%
——29——CVE-2008-4101—95.4%
——29——CVE-2002-0652—95.4%
——29——CVE-2017-16398—95.4%
——29——CVE-2021-32558—95.4%
——29——CVE-2023-47681—95.4%
——29——CVE-2022-3180—95.4%
——29——CVE-2008-6976—95.4%
——29——CVE-2008-5183—95.4%
——29——CVE-2007-6276—95.4%
——29——CVE-2005-0828—95.4%
——29——CVE-2015-3210—95.4%
——29——CVE-2018-1000121—95.4%
——29——CVE-2022-24542—95.4%
——29——CVE-2021-43495—95.4%
——29——CVE-2017-11219—95.4%
——29——CVE-2015-1631—95.4%
——29——CVE-2003-0767—95.4%
——29——CVE-2014-0166—95.4%
——29——CVE-2006-3372—95.4%
——29——CVE-2019-0915—95.4%
——29——CVE-2000-0787—95.4%
——29——CVE-2026-93128.2 ALT95.4%
——29A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to send crafted requests to internal services by exploiting insufficient input validation in an upload endpoint. By injecting path traversal content into request parameters, an attacker could bypass the intended request flow and redirect internal API calls, potentially accessing internal services and exposing sensitive credentials. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.22 and was fixed in versions 3.17.17, 3.18.11, 3.19.8, 3.20.4, and 3.21.2. This vulnerability was reported via the GitHub Bug Bounty program.112dCVE-2014-5112—95.4%
——29——CVE-2017-15662—95.4%
——29——CVE-2014-7226—95.4%
——29——CVE-2009-4355—95.4%
——29——CVE-2023-317427.2 ALT95.4%
——29There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006. If an attacker gains web management privileges, they can inject commands into the post request parameters wl_ant, wl_rate, WL_atten_ctl, ttcp_num, ttcp_size in the httpd s Start_EPI() function, thereby gaining shell privileges.126dCVE-2006-1735—95.4%
——29——CVE-2012-4167—95.4%
——29——CVE-2006-2496—95.4%
——29——CVE-2017-0033—95.4%
——29——CVE-2014-3848—95.4%
——29——CVE-2018-0875—95.4%
——29——CVE-2019-0205—95.4%
——29——CVE-2004-2496—95.4%
——29——CVE-2011-2194—95.4%
——29——CVE-2018-5337—95.4%
——29——