Vulnerabilidades explotables hoy
413,525en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,739
- Alto22,705
- Medio21,204
- Bajo2,175
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-327487.5 ALT95.4%
——29Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable Denial of Service attack against the Squid service using ICP protocol. This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero `icp_port`). This problem _cannot_ be mitigated by denying ICP queries using `icp_access` rules. This bug is fixed in Squid version 7.5.120dCVE-2012-5285—95.4%
——29——CVE-2010-3914—95.4%
——29——CVE-2018-5037—95.4%
——29——CVE-2019-7095—95.4%
——29——CVE-2016-1558—95.4%
——29——CVE-2019-5788—95.4%
——29——CVE-2009-2419—95.4%
——29——CVE-2020-8265—95.4%
——29——CVE-2005-3670—95.4%
——29——CVE-2026-335267.5 ALT95.4%
——29Squid is a caching proxy for the Web. Prior to version 7.5, due to heap Use-After-Free, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable Denial of Service attack against the Squid service using ICP protocol. This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero `icp_port`). This problem _cannot_ be mitigated by denying ICP queries using `icp_access` rules. Version 7.5 contains a patch.120dCVE-2025-53833—95.4%
——29——CVE-2013-43224.3 SIN95.4%
——29Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer coding without properly handling (1) a large total amount of chunked data or (2) whitespace characters in an HTTP header value within a trailer field, which allows remote attackers to cause a denial of service by streaming data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3544.33dCVE-2002-1641—95.4%
——29——CVE-2013-4096—95.4%
——29——CVE-2018-10063—95.4%
——29——CVE-1999-0669—95.4%
——29——CVE-2003-0044—95.4%
——29——CVE-2009-0037—95.3%
——29——CVE-2009-0813—95.4%
——29——CVE-2003-0253—95.4%
——29——CVE-2022-0826—95.4%
——29——CVE-2007-0047—95.4%
——29——CVE-2022-45672—95.4%
——29——CVE-2018-4971—95.4%
——29——CVE-2020-1374—95.4%
——29——CVE-2020-3878—95.4%
——29——CVE-2003-1396—95.4%
——29——CVE-2016-0729—95.4%
——29——CVE-2016-2381—95.4%
——29——CVE-2013-4338—95.4%
——29——CVE-2024-13974—95.4%
——29——CVE-2015-0324—95.4%
——29——CVE-2022-25434—95.4%
——29——CVE-2018-4974—95.4%
——29——CVE-2025-7776—95.4%
——29——CVE-2015-5300—95.4%
——29——CVE-2018-6184—95.4%
——29——CVE-2023-30256—95.4%
——29——CVE-2017-2971—95.4%
——29——