Vulnerabilidades explotables hoy
413,612en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,712
- Alto22,677
- Medio21,178
- Bajo2,161
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-82734.7 MED94.5%
——28A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/cgi_fan_control/cgi_merge_user of the file /cgi-bin/system_mgr.cgi. This manipulation causes os command injection. It is possible to initiate the attack remotely.17dCVE-2018-4919—94.5%
——28——CVE-2009-1120—94.5%
——28——CVE-2015-8650—94.5%
——28——CVE-2014-5300—94.5%
——28——CVE-2011-4220—94.5%
——28——CVE-2015-0516—94.5%
——28——CVE-2025-340888.8 ALT94.5%
——28An authenticated remote code execution vulnerability exists in Pandora FMS version 7.0NG and earlier. The net_tools.php functionality allows authenticated users to execute arbitrary OS commands via the select_ips parameter when performing network tools operations, such as pinging. This occurs because user input is not properly sanitized before being passed to system commands, enabling command injection.120dCVE-2010-1603—94.5%
——28——CVE-2021-35565—94.5%
——28——CVE-2025-3693—94.5%
——28——CVE-2022-374549.8 CRÍ94.5%
——28The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.29dCVE-2012-2226—94.5%
——28——CVE-2016-4225—94.5%
——28——CVE-2019-17059—94.5%
——28——CVE-2008-6712—94.5%
——28——CVE-2001-0003—94.5%
——28——CVE-2007-1897—94.5%
——28——CVE-2018-6443—94.5%
——28——CVE-2007-6185—94.5%
——28——CVE-2016-6931—94.5%
——28——CVE-2019-196469.8 CRÍ94.5%
——28pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.29dCVE-2019-1371—94.5%
——28——CVE-2006-7168—94.5%
——28——CVE-2014-8655—94.5%
——28——CVE-2017-3222—94.5%
——28——CVE-2015-7893—94.5%
——28——CVE-2005-4154—94.5%
——28——CVE-2021-22921—94.5%
——28——CVE-2025-632079.8 CRÍ94.5%
——28The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to broken access control due to improper authentication checks on the /_Passwd.html endpoint. An attacker can send an unauthenticated POST request to change the Admin, Operator, and User passwords, resulting in complete system compromise.7dCVE-2015-8649—94.5%
——28——CVE-2005-1679—94.5%
——28——CVE-2024-7157—94.5%
——28——CVE-2026-421678.1 ALT94.5%
——28mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USER requests with an expansion such as %U, and the SQL backend allows commands (e.g., COPY TO PROGRAM).111dCVE-2024-36035—94.5%
——28——CVE-2002-0236—94.5%
——28——CVE-2000-0180—94.5%
——28——CVE-2009-4003—94.5%
——28——CVE-2015-8648—94.5%
——28——CVE-2022-0864—94.5%
——28——