Vulnerabilidades explotables hoy
413,612en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,728
- Alto22,707
- Medio21,208
- Bajo2,163
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2007-2798—94.6%
——28——CVE-2025-95866.3 MED94.6%
——28A vulnerability was identified in Comfast CF-N1 2.6.0. This vulnerability affects the function wireless_device_dissoc of the file /usr/bin/webmgnt. Such manipulation of the argument mac leads to command injection. The attack may be performed from a remote location. The exploit is publicly available and might be used.47dCVE-2012-4148—94.6%
——28——CVE-2007-5248—94.6%
——28——CVE-2021-23841—94.6%
——28——CVE-2018-19442—94.6%
——28——CVE-2007-6322—94.6%
——28——CVE-2017-6412—94.6%
——28——CVE-2017-9936—94.6%
——28——CVE-2011-2097—94.6%
——28——CVE-2013-2473—94.6%
——28——CVE-2020-5191—94.6%
——28——CVE-2005-3929—94.6%
——28——CVE-2014-8485—94.6%
——28——CVE-2012-4158—94.6%
——28——CVE-2017-7037—94.6%
——28——CVE-2021-33194—94.6%
——28——CVE-2026-79756—94.6%
——28Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, the fix for unauthenticated OS command injection in the nuclio dashboard on the local/Docker platform is incomplete. The fix added validateFunctionName for function names and common.Quote() for the named-resource shell command path, but the list-all resource path (triggered when no specific resource name is provided) still interpolates the resourceNamespace parameter unquoted into a /bin/sh -c command string. An unauthenticated attacker can inject shell metacharacters via the X-Nuclio-Function-Namespace, X-Nuclio-Project-Namespace, or X-Nuclio-Function-Event-Namespace HTTP headers to achieve arbitrary command execution inside the dashboard container. This issue has been patched in version 1.17.4.70dCVE-2004-0356—94.6%
——28——CVE-2000-0872—94.6%
——28——CVE-2003-1432—94.6%
——28——CVE-2016-5766—94.6%
——28——CVE-2022-1013—94.6%
——28——CVE-2015-5169—94.6%
——28——CVE-2018-2657—94.6%
——28——CVE-2021-34074—94.6%
——28——CVE-2008-2326—94.6%
——28——CVE-2012-2051—94.6%
——28——CVE-2010-1281—94.6%
——28——CVE-2007-1411—94.6%
——28——CVE-2007-6021—94.6%
——28——CVE-2011-4644—94.6%
——28——CVE-2011-5002—94.6%
——28——CVE-2022-0993—94.6%
——28——CVE-2008-5680—94.6%
——28——CVE-2021-369368.8 ALT94.6%
——28Windows Print Spooler Remote Code Execution Vulnerability94dCVE-2000-0588—94.6%
——28——CVE-2018-20506—94.6%
——28——CVE-2007-5394—94.6%
——28——CVE-2016-10178—94.6%
——28——