Vulnerabilidades explotables hoy
413,525en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,739
- Alto22,705
- Medio21,204
- Bajo2,175
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2012-6637—95.3%
——29——CVE-2019-3474—95.3%
——29——CVE-2009-4494—95.3%
——29——CVE-2012-1835—95.3%
——29——CVE-2007-2872—95.3%
——29——CVE-2017-5261—95.3%
——29——CVE-2016-4432—95.3%
——29——CVE-2007-5605—95.3%
——29——CVE-2006-2349—95.3%
——29——CVE-2012-1010—95.3%
——29——CVE-2021-34859—95.3%
——29——CVE-2012-5641—95.3%
——29——CVE-2008-5356—95.3%
——29——CVE-2024-7580—95.3%
——29——CVE-2009-3658—95.3%
——29——CVE-2020-27733—95.3%
——29——CVE-2006-5278—95.3%
——29——CVE-2014-3225—95.3%
——29——CVE-2020-7060—95.3%
——29——CVE-2018-5751—95.3%
——29——CVE-2001-0899—95.3%
——29——CVE-2004-0643—95.3%
——29——CVE-2014-8461—95.3%
——29——CVE-2014-0088—95.3%
——29——CVE-2013-5072—95.3%
——29——CVE-2019-204449.1 CRÍ95.3%
——29HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."34dCVE-2017-8752—95.3%
——29——CVE-2024-279039.8 CRÍ95.3%
——29OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used to interact with the privileged OpenVPN interactive service.8dCVE-2015-1629—95.3%
——29——CVE-2014-4874—95.3%
——29——CVE-2006-6504—95.3%
——29——CVE-2024-43639—95.3%
——29——CVE-2018-1722—95.3%
——29——CVE-2008-5642—95.3%
——29——CVE-2001-0080—95.3%
——29——CVE-2015-2305—95.3%
——29——CVE-2026-672768.1 ALT95.3%
——29RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the exponent. Because signature verification uses the client-supplied key, an attacker knowing an authorized RSA modulus can supply a key with exponent one, forge a valid signature, and open an SSH command channel as the target user without the private key.This issue affects only 7.x branch was fixed in versions: 7.23.4 (Long-term) and 7.24.2 (Stable)48dCVE-2010-2300—95.3%
——29——CVE-2008-0364—95.3%
——29——CVE-2017-7042—95.3%
——29——