Vulnerabilidades explotables hoy
413,612en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,728
- Alto22,707
- Medio21,208
- Bajo2,163
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2005-0739—94.6%
——28——CVE-2020-35488—94.6%
——28——CVE-2011-4694—94.6%
——28——CVE-2016-4361—94.6%
——28——CVE-2012-2814—94.6%
——28——CVE-2017-11238—94.6%
——28——CVE-2004-0507—94.6%
——28——CVE-2006-4424—94.6%
——28——CVE-2025-151326.3 MED94.6%
——28A vulnerability was determined in ZSPACE Z4Pro+ 1.0.0440024. The affected element is the function zfilev2_api_open of the file /v2/file/safe/open of the component HTTP POST Request Handler. This manipulation causes command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.36dCVE-2019-15505—94.6%
——28——CVE-2009-3587—94.6%
——28——CVE-2002-2400—94.6%
——28——CVE-2007-0777—94.6%
——28——CVE-2007-3606—94.6%
——28——CVE-2012-3585—94.6%
——28——CVE-2021-23157—94.6%
——28——CVE-2014-10010—94.6%
——28——CVE-2006-3588—94.6%
——28——CVE-2009-5067—94.6%
——28——CVE-2014-3085—94.6%
——28——CVE-2019-15311—94.6%
——28——CVE-2013-0450—94.6%
——28——CVE-2013-1807—94.6%
——28——CVE-2017-11233—94.6%
——28——CVE-2020-26147—94.6%
——28——CVE-2017-11255—94.6%
——28——CVE-2025-592469.8 CRÍ94.6%
——28Azure Entra ID Elevation of Privilege Vulnerability35dCVE-2022-0783—94.6%
——28——CVE-2007-1244—94.6%
——28——CVE-2006-0328—94.6%
——28——CVE-2017-6193—94.6%
——28——CVE-2022-31269—94.6%
——28——CVE-2017-7617—94.6%
——28——CVE-2004-1082—94.6%
——28——CVE-2017-15920—94.6%
——28——CVE-2026-480309.9 CRÍ94.6%
——28Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.4, an OS Command Injection vulnerability in the terminal action handler allows any authenticated user to execute arbitrary OS commands by injecting shell metacharacters into the 'dir' POST parameter, completely bypassing the TERMINAL_COMMANDS whitelist and achieving full Remote Code Execution with web server privileges. This issue has been patched in version 2.0.4.19dCVE-2004-1664—94.6%
——28——CVE-2007-2186—94.6%
——28——CVE-2016-0859—94.6%
——28——CVE-2000-10337.5 SIN94.6%
——28Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (possibly anonymous) and then attempting to guess the passwords of other users.50d