Vulnerabilidades explotables hoy
413,525en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,739
- Alto22,705
- Medio21,204
- Bajo2,175
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2008-5498—95.3%
——29——CVE-2002-2072—95.3%
——29——CVE-2009-0134—95.3%
——29——CVE-2025-4883—95.3%
——29——CVE-2016-7126—95.3%
——29——CVE-2007-1998—95.3%
——29——CVE-2016-7431—95.3%
——29——CVE-2022-24070—95.3%
——29——CVE-2009-1201—95.3%
——29——CVE-2001-0152—95.3%
——29——CVE-2018-18593—95.3%
——29——CVE-2019-12822—95.3%
——29——CVE-2018-4996—95.3%
——29——CVE-2016-9635—95.3%
——29——CVE-2020-27995—95.3%
——29——CVE-2016-2517—95.3%
——29——CVE-2019-175694.8 MED95.3%
——29The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a particular manner. Such a reverse proxy is considered unlikely.78dCVE-2002-0288—95.3%
——29——CVE-2020-1283—95.3%
——29——CVE-2006-2024—95.3%
——29——CVE-2014-00994.3 SIN95.3%
——29Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse proxy, allows remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.28dCVE-2023-50469—95.3%
——29——CVE-2014-3618—95.3%
——29——CVE-2014-2648—95.3%
——29——CVE-2020-0823—95.3%
——29——CVE-2004-0375—95.3%
——29——CVE-2004-2059—95.3%
——29——CVE-2020-0826—95.3%
——29——CVE-2025-142256.3 MED95.3%
——29A vulnerability was determined in D-Link DCS-930L 1.15.04. This affects an unknown part of the file /setSystemAdmin of the component alphapd. Executing manipulation of the argument AdminID can lead to command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer.35dCVE-2021-22989—95.3%
——29——CVE-2015-3900—95.3%
——29——CVE-2009-0198—95.3%
——29——CVE-2006-4780—95.3%
——29——CVE-2021-34583—95.3%
——29——CVE-2001-1303—95.3%
——29——CVE-2004-0760—95.3%
——29——CVE-2022-1631—95.3%
——29——CVE-2005-4385—95.3%
——29——CVE-2014-4937—95.3%
——29——CVE-2026-0907—95.3%
——29——