Vulnerabilidades explotables hoy
413,525en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,739
- Alto22,705
- Medio21,204
- Bajo2,175
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2018-19386—95.3%
——29——CVE-2017-8750—95.3%
——29——CVE-2014-8680—95.3%
——29——CVE-2006-2909—95.3%
——29——CVE-2024-5337—95.3%
——29——CVE-2007-2771—95.3%
——29——CVE-2015-4931—95.3%
——29——CVE-2021-22672—95.3%
——29——CVE-2015-4932—95.3%
——29——CVE-2010-2085—95.3%
——29——CVE-2013-0742—95.3%
——29——CVE-2015-4935—95.3%
——29——CVE-2013-2118—95.3%
——29——CVE-2008-0132—95.3%
——29——CVE-2005-0892—95.3%
——29——CVE-2025-53143—95.3%
——29——CVE-2007-2947—95.3%
——29——CVE-2012-58855.0 SIN95.3%
——29The replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 tracks cnonce (aka client nonce) values instead of nonce (aka server nonce) and nc (aka nonce-count) values, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, a different vulnerability than CVE-2011-1184.33dCVE-2019-7275—95.3%
——29——CVE-2002-1816—95.3%
——29——CVE-2019-6224—95.3%
——29——CVE-2003-0511—95.3%
——29——CVE-2002-0449—95.3%
——29——CVE-2014-2846—95.3%
——29——CVE-2018-8335—95.3%
——29——CVE-2000-0656—95.3%
——29——CVE-2024-5336—95.3%
——29——CVE-2018-5359—95.3%
——29——CVE-2007-0817—95.3%
——29——CVE-2001-0461—95.3%
——29——CVE-2016-9369—95.3%
——29——CVE-2007-1156—95.3%
——29——CVE-2013-1450—95.3%
——29——CVE-2015-5230—95.3%
——29——CVE-2007-3297—95.3%
——29——CVE-2015-5214—95.3%
——29——CVE-2011-48997.5 SIN95.3%
——29wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not ensure that the specified MySQL database service is appropriate, which allows remote attackers to configure an arbitrary database via the dbhost and dbname parameters, and subsequently conduct static code injection and cross-site scripting (XSS) attacks via (1) an HTTP request or (2) a MySQL query. NOTE: the vendor disputes the significance of this issue; however, remote code execution makes the issue important in many realistic environments8dCVE-2016-10182—95.3%
——29——CVE-2016-6301—95.3%
——29——CVE-2015-4934—95.3%
——29——