Vulnerabilidades explotables hoy
413,612en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,728
- Alto22,707
- Medio21,208
- Bajo2,163
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2019-0537—94.6%
——28——CVE-2005-3184—94.6%
——28——CVE-2013-6435—94.6%
——28——CVE-2006-0799—94.6%
——28——CVE-2007-2924—94.6%
——28——CVE-2017-0275—94.6%
——28——CVE-2007-1804—94.6%
——28——CVE-2003-1251—94.6%
——28——CVE-2017-11245—94.6%
——28——CVE-2001-1382—94.6%
——28——CVE-2017-11233—94.6%
——28——CVE-2018-7532—94.6%
——28——CVE-2018-8383—94.6%
——28——CVE-2022-23299—94.6%
——28——CVE-2004-0507—94.6%
——28——CVE-2017-11255—94.6%
——28——CVE-2019-110504.8 MED94.6%
——28When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.87dCVE-2015-0514—94.6%
——28——CVE-2025-592469.8 CRÍ94.6%
——28Azure Entra ID Elevation of Privilege Vulnerability35dCVE-2013-3706—94.6%
——28——CVE-2017-11246—94.6%
——28——CVE-2009-3587—94.6%
——28——CVE-2007-0777—94.6%
——28——CVE-2023-23787.2 ALT94.6%
——28A flaw has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This affects an unknown function of the component Web Management Interface. This manipulation of the argument suffix-rate-up causes command injection. The attack may be initiated remotely. The exploit has been published and may be used. The real existence of this vulnerability is still doubted at the moment. The vendor position is that post-authentication issues are not accepted as vulnerabilities.126dCVE-2013-0768—94.6%
——28——CVE-2006-4424—94.6%
——28——CVE-2018-15353—94.6%
——28——CVE-2024-2991—94.6%
——28——CVE-2014-3806—94.6%
——28——CVE-2008-1231—94.6%
——28——CVE-2013-1807—94.6%
——28——CVE-2006-3811—94.6%
——28——CVE-2004-0006—94.6%
——28——CVE-2021-23157—94.6%
——28——CVE-2014-10010—94.6%
——28——CVE-2017-11232—94.6%
——28——CVE-2018-0315—94.6%
——28——CVE-2025-345139.8 CRÍ94.6%
——28Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an OS command injection vulnerability in mbus_build_from_csv.php that allows an unauthenticated attacker to execute arbitrary code. Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet.34dCVE-2025-3328—94.6%
——28——CVE-2026-8383—94.6%
——28——