Vulnerabilidades explotables hoy
413,525en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,739
- Alto22,705
- Medio21,204
- Bajo2,175
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2017-3108—95.2%
——29——CVE-2012-6708—95.2%
——29——CVE-2023-33145—95.2%
——29——CVE-2017-11910—95.2%
——29——CVE-2020-5786—95.2%
——29——CVE-2016-0734—95.2%
——29——CVE-2019-203309.8 CRÍ95.2%
——29FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.34dCVE-2020-253679.8 CRÍ95.2%
——29A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbitrary web scripts via shell metacharacters in the Captcha field to Login.126dCVE-2007-2776—95.2%
——29——CVE-2024-0920—95.2%
——29——CVE-2019-13917—95.2%
——29——CVE-2007-0073—95.2%
——29——CVE-2005-0094—95.2%
——29——CVE-2022-26042—95.2%
——29——CVE-2017-8647—95.2%
——29——CVE-2017-11930—95.2%
——29——CVE-2020-25483—95.2%
——29——CVE-2014-1756—95.2%
——29——CVE-2017-15088—95.2%
——29——CVE-2025-510885.3 MED95.2%
——29Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/WifiGuestSet. The manipulation of the argument `shareSpeed` leads to stack-based buffer overflow.130dCVE-2021-39510—95.2%
——29——CVE-2005-1112—95.2%
——29——CVE-2010-3133—95.2%
——29——CVE-2002-0962—95.2%
——29——CVE-2022-46604—95.2%
——29——CVE-2000-0612—95.2%
——29——CVE-2010-3039—95.2%
——29——CVE-2018-1327—95.2%
——29——CVE-2017-11905—95.2%
——29——CVE-2008-5334—95.2%
——29——CVE-2018-5061—95.2%
——29——CVE-2017-11913—95.2%
——29——CVE-2017-8499—95.2%
——29——CVE-1999-0953—95.2%
——29——CVE-2000-09775.0 SIN95.2%
——29mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file name in the "filename" parameter in a POST request, which is then sent by email to the address specified in the "email" parameter.50dCVE-2008-4216—95.2%
——29——CVE-2009-2620—95.2%
——29——CVE-2026-1112187.2 ALT95.2%
——29Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Traffic Shaper Limiters privileges to execute root commands by tampering with the limiter number field. Attackers can submit a malicious hidden 'number' value when editing a limiter, then delete it so delete_queue() passes the unquoted value to dnctl via /bin/sh as root.23dCVE-2017-5814—95.2%
——29——CVE-2010-2307—95.2%
——29——