Vulnerabilidades explotables hoy
413,655en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,700
- Alto22,645
- Medio21,142
- Bajo2,151
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2018-8595—94.2%
——28——CVE-2022-4379—94.2%
——28——CVE-2006-3556—94.2%
——28——CVE-2018-11789—94.2%
——28——CVE-2014-1904—94.2%
——28——CVE-2006-0658—94.2%
——28——CVE-2015-5114—94.2%
——28——CVE-2020-7159—94.2%
——28——CVE-2014-3629—94.2%
——28——CVE-2020-7150—94.2%
——28——CVE-2002-1463—94.2%
——28——CVE-2009-4270—94.2%
——28——CVE-2011-0606—94.2%
——28——CVE-2008-3285—94.2%
——28——CVE-2015-4757—94.2%
——28——CVE-2005-0788—94.2%
——28——CVE-2011-2424—94.2%
——28——CVE-2013-2422—94.2%
——28——CVE-2006-0319—94.2%
——28——CVE-2020-7146—94.2%
——28——CVE-2003-1240—94.2%
——28——CVE-2021-203227.4 ALT94.2%
——28A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.105dCVE-2026-425089.1 CRÍ94.2%
——28Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked.58dCVE-2002-1828—94.2%
——28——CVE-2025-612609.8 CRÍ94.2%
——28A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protocol) configuration files. The attack is triggered when a user runs the codex command inside a malicious or compromised repository. Codex automatically loads project-local .env and .codex/config.toml files without requiring user confirmation, allowing attackers to embed arbitrary commands that execute immediately.8dCVE-2017-11226—94.2%
——28——CVE-2010-1769—94.2%
——28——CVE-2007-1252—94.2%
——28——CVE-2020-7154—94.2%
——28——CVE-2022-365516.5 MED94.2%
——28A Server Side Request Forgery (SSRF) in the Data Import module in Heartex - Label Studio Community Edition versions 1.5.0 and earlier allows an authenticated user to access arbitrary files on the system. Furthermore, self-registration is enabled by default in these versions of Label Studio enabling a remote attacker to create a new account and then exploit the SSRF.126dCVE-2020-7142—94.2%
——28——CVE-2021-30639—94.2%
——28——CVE-2010-3812—94.2%
——28——CVE-2010-0166—94.2%
——28——CVE-2020-7144—94.2%
——28——CVE-2026-27175—94.2%
——28——CVE-2013-1557—94.2%
——28——CVE-2005-3391—94.2%
——28——CVE-2021-30355—94.2%
——28——CVE-2017-11227—94.2%
——28——