Vulnerabilidades explotables hoy
413,525en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,739
- Alto22,705
- Medio21,204
- Bajo2,175
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2018-120237.5 ALT95.3%
——29An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Oracle JDBC jar in the classpath, and an attacker can provide an LDAP service to access, it is possible to make the service execute a malicious payload.27dCVE-2018-18593—95.3%
——29——CVE-2004-1261—95.3%
——29——CVE-2017-15691—95.3%
——29——CVE-2020-27995—95.3%
——29——CVE-2014-4611—95.3%
——29——CVE-2016-7126—95.3%
——29——CVE-2007-3619—95.3%
——29——CVE-2019-6470—95.3%
——29——CVE-2004-0375—95.3%
——29——CVE-2022-1631—95.3%
——29——CVE-2006-4780—95.3%
——29——CVE-2019-19743—95.3%
——29——CVE-2020-0850—95.3%
——29——CVE-2009-0198—95.3%
——29——CVE-2020-0829—95.3%
——29——CVE-2005-3640—95.3%
——29——CVE-2017-11221—95.3%
——29——CVE-2019-175694.8 MED95.3%
——29The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a particular manner. Such a reverse proxy is considered unlikely.78dCVE-2004-1259—95.3%
——29——CVE-2004-1236—95.3%
——29——CVE-2014-00994.3 SIN95.3%
——29Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse proxy, allows remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.28dCVE-2005-4385—95.3%
——29——CVE-2006-2024—95.3%
——29——CVE-2007-5610—95.3%
——29——CVE-2004-0309—95.3%
——29——CVE-2002-0288—95.3%
——29——CVE-2004-0760—95.3%
——29——CVE-2008-0947—95.3%
——29——CVE-2018-16671—95.3%
——29——CVE-2008-5498—95.3%
——29——CVE-2002-1224—95.3%
——29——CVE-2021-34583—95.3%
——29——CVE-2017-11294—95.3%
——29——CVE-2015-7894—95.3%
——29——CVE-2007-3157—95.3%
——29——CVE-2018-7104—95.3%
——29——CVE-2015-3900—95.3%
——29——CVE-2005-0469—95.3%
——29——CVE-2018-4996—95.3%
——29——