Vulnerabilidades explotables hoy
413,525en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,739
- Alto22,705
- Medio21,204
- Bajo2,175
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1112187.2 ALT95.2%
——29Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Traffic Shaper Limiters privileges to execute root commands by tampering with the limiter number field. Attackers can submit a malicious hidden 'number' value when editing a limiter, then delete it so delete_queue() passes the unquoted value to dnctl via /bin/sh as root.23dCVE-2017-6367—95.2%
——29——CVE-2005-3713—95.2%
——29——CVE-1999-0060—95.2%
——29——CVE-2008-1833—95.2%
——29——CVE-2006-5269—95.2%
——29——CVE-2018-7184—95.2%
——29——CVE-2018-8627—95.2%
——29——CVE-2007-2776—95.2%
——29——CVE-2017-11913—95.2%
——29——CVE-2009-1684—95.2%
——29——CVE-2019-1010155—95.2%
——29——CVE-2019-7826—95.2%
——29——CVE-2010-0016—95.2%
——29——CVE-2006-4437—95.2%
——29——CVE-2007-2768—95.2%
——29——CVE-2013-2724—95.2%
——29——CVE-2007-0072—95.2%
——29——CVE-2017-8520—95.2%
——29——CVE-2005-1112—95.2%
——29——CVE-2008-6953—95.2%
——29——CVE-2015-0287—95.2%
——29——CVE-2017-10989—95.2%
——29——CVE-2020-253679.8 CRÍ95.2%
——29A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbitrary web scripts via shell metacharacters in the Captcha field to Login.126dCVE-2009-1861—95.2%
——29——CVE-2002-0962—95.2%
——29——CVE-2005-4559—95.2%
——29——CVE-2017-15088—95.2%
——29——CVE-2005-1740—95.2%
——29——CVE-2017-11930—95.2%
——29——CVE-2012-6708—95.2%
——29——CVE-2017-11908—95.2%
——29——CVE-2016-1000112—95.2%
——29——CVE-2026-403435.8 MED95.2%
——29free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.2, a fail-open request handling flaw in the UDR service causes the `/nudr-dr/v2/policy-data/subs-to-notify` POST handler to continue processing requests even after request body retrieval or deserialization errors. This may allow unintended creation of Policy Data notification subscriptions with invalid, empty, or partially processed input, depending on downstream processor behavior. As of time of publication, a patched version is not available.16dCVE-2015-8874—95.2%
——29——CVE-2021-39510—95.2%
——29——CVE-2018-5061—95.2%
——29——CVE-2018-1327—95.2%
——29——CVE-2017-11766—95.2%
——29——CVE-2005-0094—95.2%
——29——