Vulnerabilidades explotables hoy
413,612en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,740
- Alto22,744
- Medio21,227
- Bajo2,176
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2018-7316—94.9%
——28——CVE-2010-3778—94.9%
——28——CVE-2007-6189—94.9%
——28——CVE-2014-4912—94.9%
——28——CVE-2008-0729—94.9%
——28——CVE-2009-1431—94.9%
——28——CVE-2007-1993—94.9%
——28——CVE-2014-1493—94.9%
——28——CVE-2024-41922—94.9%
——28——CVE-2006-3532—94.9%
——28——CVE-2025-639327.3 ALT94.9%
——28D-Link Router DIR-868L A1 FW106KRb01.bin has an unauthenticated remote code execution vulnerability in the cgibin binary. The HNAP service provided by cgibin does not filter the HTTP SOAPAction header field. The unauthenticated remote attacker can execute the shell command.7dCVE-2003-0621—94.9%
——28——CVE-2026-584559.8 CRÍ94.9%
——28Dockwatch through 0.6.567 contains an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary shell commands by exploiting a missing exit() after an authentication redirect in loader.php combined with unsanitized input passed to shell_exec() in ajax/compose.php. Attackers can seed the required session flag through the incomplete auth check, then inject arbitrary commands via the composePath POST parameter in the composePull action to achieve full host compromise, facilitated by the standard deployment mounting of the Docker socket.17dCVE-2006-2568—94.9%
——28——CVE-2020-15610—94.9%
——28——CVE-2008-5062—94.9%
——28——CVE-2020-15425—94.9%
——28——CVE-2025-53786—94.8%
——28——CVE-2012-4964—94.8%
——28——CVE-2022-0814—94.8%
——28——CVE-2016-07625.9 MED94.8%
——28The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not process the supplied password if the supplied user name did not exist. This made a timing attack possible to determine valid user names. Note that the default configuration includes the LockOutRealm which makes exploitation of this vulnerability harder.34dCVE-2024-10387—94.8%
——28——CVE-2015-3648—94.8%
——28——CVE-2019-9767—94.8%
——28——CVE-2020-17510—94.8%
——28——CVE-2004-0193—94.8%
——28——CVE-2019-129009.8 CRÍ94.8%
——28BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.29dCVE-2019-9766—94.8%
——28——CVE-2015-3000—94.8%
——28——CVE-2019-0918—94.8%
——28——CVE-2017-8592—94.8%
——28——CVE-2003-1487—94.8%
——28——CVE-2007-1060—94.8%
——28——CVE-2011-2441—94.8%
——28——CVE-2018-8740—94.8%
——28——CVE-2010-3555—94.8%
——28——CVE-2002-0741—94.8%
——28——CVE-2008-0399—94.8%
——28——CVE-2004-1153—94.8%
——28——CVE-2006-4834—94.8%
——28——