Vulnerabilidades explotables hoy
413,612en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,740
- Alto22,744
- Medio21,227
- Bajo2,176
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2013-0425—94.9%
——28——CVE-2005-0698—94.9%
——28——CVE-2016-1453—94.9%
——28——CVE-2020-15608—94.9%
——28——CVE-2020-15433—94.9%
——28——CVE-2020-15615—94.9%
——28——CVE-2022-43606—94.9%
——28——CVE-2018-7316—94.9%
——28——CVE-2022-22616—94.9%
——28——CVE-2020-15607—94.9%
——28——CVE-2019-108698.1 ALT94.9%
——28Path Traversal and Unrestricted File Upload exists in the Ninja Forms plugin before 3.0.23 for WordPress (when the Uploads add-on is activated). This allows an attacker to traverse the file system to access files and execute code via the includes/fields/upload.php (aka upload/submit page) name and tmp_name parameters.87dCVE-2017-9750—94.9%
——28——CVE-2021-37762—94.9%
——28——CVE-2006-2568—94.9%
——28——CVE-2016-0994—94.9%
——28——CVE-2004-0687—94.9%
——28——CVE-2022-0422—94.9%
——28——CVE-2022-29361—94.9%
——28——CVE-2020-28037—94.9%
——28——CVE-2014-4912—94.9%
——28——CVE-2007-2317—94.9%
——28——CVE-2001-0189—94.9%
——28——CVE-2012-0934—94.9%
——28——CVE-2012-0776—94.9%
——28——CVE-2026-584559.8 CRÍ94.9%
——28Dockwatch through 0.6.567 contains an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary shell commands by exploiting a missing exit() after an authentication redirect in loader.php combined with unsanitized input passed to shell_exec() in ajax/compose.php. Attackers can seed the required session flag through the incomplete auth check, then inject arbitrary commands via the composePath POST parameter in the composePull action to achieve full host compromise, facilitated by the standard deployment mounting of the Docker socket.17dCVE-2019-5367—94.9%
——28——CVE-2020-15606—94.9%
——28——CVE-2018-17899—94.9%
——28——CVE-2000-1093—94.9%
——28——CVE-2018-20664—94.9%
——28——CVE-2020-15609—94.9%
——28——CVE-2017-11813—94.9%
——28——CVE-2018-16618—94.9%
——28——CVE-2006-5289—94.9%
——28——CVE-2017-3091—94.9%
——28——CVE-2007-2891—94.9%
——28——CVE-2004-2519—94.9%
——28——CVE-2020-15432—94.9%
——28——CVE-2026-82296.3 MED94.9%
——28A vulnerability was detected in Wavlink NU516U1 240425. The affected element is the function WifiBasic of the file /cgi-bin/wireless.cgi. Performing a manipulation of the argument AuthMethod/EncrypType results in os command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure.111dCVE-2015-7384—94.9%
——28——