Vulnerabilidades explotables hoy
413,525en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,739
- Alto22,705
- Medio21,204
- Bajo2,175
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2024-4058—95.3%
——29——CVE-2017-4914—95.3%
——29——CVE-2013-1849—95.3%
——29——CVE-2018-12785—95.3%
——29——CVE-2014-4937—95.3%
——29——CVE-2026-0907—95.3%
——29——CVE-2016-7131—95.3%
——29——CVE-2007-2281—95.3%
——29——CVE-2022-369467.5 ALT95.3%
——29nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len.28dCVE-2007-3157—95.3%
——29——CVE-2019-6470—95.3%
——29——CVE-2019-12822—95.3%
——29——CVE-2017-15691—95.3%
——29——CVE-2021-22990—95.3%
——29——CVE-1999-0204—95.3%
——29——CVE-2018-18593—95.3%
——29——CVE-2016-0746—95.3%
——29——CVE-2018-7103—95.3%
——29——CVE-2022-1631—95.3%
——29——CVE-2009-2534—95.3%
——29——CVE-2016-7412—95.3%
——29——CVE-2015-2536—95.3%
——29——CVE-2018-120237.5 ALT95.3%
——29An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Oracle JDBC jar in the classpath, and an attacker can provide an LDAP service to access, it is possible to make the service execute a malicious payload.27dCVE-2018-14883—95.3%
——29——CVE-2008-2214—95.3%
——29——CVE-2005-4385—95.3%
——29——CVE-2010-4349—95.3%
——29——CVE-2016-7126—95.3%
——29——CVE-2006-4780—95.3%
——29——CVE-2004-0375—95.3%
——29——CVE-2015-2135—95.3%
——29——CVE-2025-115498.8 ALT95.3%
——29A vulnerability has been found in Tenda W12 3.0.0.6(3948). The affected element is the function wifiMacFilterSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of the argument mac leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.35dCVE-2019-175694.8 MED95.3%
——29The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a particular manner. Such a reverse proxy is considered unlikely.78dCVE-2009-0134—95.3%
——29——CVE-2017-2927—95.3%
——29——CVE-2026-48907.5 ALT95.3%
——29A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.79dCVE-2017-11221—95.3%
——29——CVE-2004-1261—95.3%
——29——CVE-2001-0507—95.3%
——29——CVE-2006-2024—95.3%
——29——