Vulnerabilidades explotables hoy
4,375en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,756
Nuevos KEV · 24H0
Exploit Today ≥ 701,689
Distribución · última ventana
- Crítico4,435
- Alto18,015
- Medio16,606
- Bajo1,665
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2017-1000353—100.0%
KEV—80Jenkins Remote Code Execution Vulnerability—CVE-2021-220547.5 ALT100.0%
KEV—80Omnissa Workspace ONE Server-Side Request Forgery24dCVE-2014-6278—99.9%
KEV—80GNU Bash OS Command Injection Vulnerability—CVE-2025-48703—99.9%
KEV—80CWP Control Web Panel OS Command Injection Vulnerability—CVE-2022-22965—99.9%
KEV—80Spring Framework JDK 9+ Remote Code Execution Vulnerability—CVE-2012-1443—99.9%
——30——CVE-2024-5217—99.9%
KEV—80ServiceNow Incomplete List of Disallowed Inputs Vulnerability—CVE-2024-9465—99.9%
KEV—80Palo Alto Networks Expedition SQL Injection Vulnerability—CVE-2024-28995—99.9%
KEV—80SolarWinds Serv-U Path Traversal Vulnerability —CVE-2023-20198—99.9%
KEV—80Cisco IOS XE Web UI Privilege Escalation Vulnerability—CVE-2022-37061—99.9%
——30——CVE-2020-14181—99.9%
——30——CVE-2020-16040—99.9%
——30——CVE-2021-33045—99.9%
KEV—80Dahua IP Camera Authentication Bypass Vulnerability—CVE-2020-16846—99.9%
KEV—80SaltStack Salt Shell Injection Vulnerability—CVE-2015-54777.5 ALT99.9%
KEV—80 ISC BIND Data Processing Errors Vulnerability16dCVE-2023-38646—99.9%
——30——CVE-2026-39987—99.9%
KEV—80Marimo Remote Code Execution Vulnerability—CVE-2024-4040—99.9%
KEV—80CrushFTP VFS Sandbox Escape Vulnerability—CVE-2018-20062—99.9%
KEV—80ThinkPHP "noneCms" Remote Code Execution Vulnerability—CVE-2024-63878.1 ALT99.9%
——30A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.11dCVE-2022-1471—99.9%
——30——CVE-2015-330610.0 CRÍ99.9%
KEV—80ProFTPD Improper Access Control Vulnerability16dCVE-2017-0199—99.9%
KEVR80Microsoft Office and WordPad Remote Code Execution Vulnerability—CVE-2025-3132410.0 CRÍ99.9%
KEVR80SAP NetWeaver Unrestricted File Upload Vulnerability82dCVE-2024-236929.8 CRÍ99.9%
KEVR80Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability76dCVE-2018-0171—99.9%
KEV—80Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability—CVE-2017-1000028—99.9%
——30——CVE-2026-215897.5 ALT99.9%
KEV—80Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability6dCVE-2022-42475—99.9%
KEVR80Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability—CVE-2013-0156—99.9%
——30——CVE-2017-7494—99.9%
KEVR80Samba Remote Code Execution Vulnerability—CVE-2023-368847.5 ALT99.9%
KEVR80Microsoft Windows Search Remote Code Execution Vulnerability76dCVE-2023-376799.8 CRÍ99.9%
——30A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server.109dCVE-2024-38856—99.9%
KEV—80Apache OFBiz Incorrect Authorization Vulnerability—CVE-2011-0611—99.9%
KEV—80Adobe Flash Player Remote Code Execution Vulnerability—CVE-2024-214128.1 ALT99.9%
KEVR80Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability76dCVE-2023-32560—99.9%
——30——CVE-2025-1974—99.9%
——30——CVE-2017-9805—99.9%
KEV—80Apache Struts Deserialization of Untrusted Data Vulnerability—