Vulnerabilidades explotables hoy
367,069en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,685
Nuevos KEV · 24H0
Exploit Today ≥ 701,629
Distribución · última ventana
- Crítico2,260
- Alto9,263
- Medio5,235
- Bajo501
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2023-34048—99.9%
KEV—80VMware vCenter Server Out-of-Bounds Write Vulnerability—CVE-2022-3236—99.9%
KEV—80Sophos Firewall Code Injection Vulnerability—CVE-2020-06188.8 ALT99.9%
KEVR80Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability16dCVE-2022-301907.8 ALT99.9%
KEVR80Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability25dCVE-2022-303337.5 ALT99.9%
KEVR80RARLAB UnRAR Directory Traversal Vulnerability27dCVE-2022-36804—99.9%
KEV—80Atlassian Bitbucket Server and Data Center Command Injection Vulnerability—CVE-2024-236929.8 CRÍ99.9%
KEVR80Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability20dCVE-2024-4040—99.9%
KEV—80CrushFTP VFS Sandbox Escape Vulnerability—CVE-2025-49113—99.9%
KEV—80RoundCube Webmail Deserialization of Untrusted Data Vulnerability—CVE-2022-22965—99.9%
KEV—80Spring Framework JDK 9+ Remote Code Execution Vulnerability—CVE-2024-9465—99.9%
KEV—80Palo Alto Networks Expedition SQL Injection Vulnerability—CVE-2019-16278—99.9%
KEV—80Nostromo nhttpd Directory Traversal Vulnerability—CVE-2024-27348—99.9%
KEV—80Apache HugeGraph-Server Improper Access Control Vulnerability—CVE-2011-0611—99.9%
KEV—80Adobe Flash Player Remote Code Execution Vulnerability—CVE-2014-6278—99.9%
KEV—80GNU Bash OS Command Injection Vulnerability—CVE-2021-32030—99.9%
KEV—80ASUS Routers Improper Authentication Vulnerability—CVE-2025-32433—99.9%
KEV—80Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability—CVE-2012-46819.8 CRÍ99.9%
KEVR80Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability25dCVE-2024-38856—99.9%
KEV—80Apache OFBiz Incorrect Authorization Vulnerability—CVE-2026-41940—99.9%
KEVR80WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability—CVE-2023-22515—99.9%
KEVR80Atlassian Confluence Data Center and Server Broken Access Control Vulnerability—CVE-2018-76029.8 CRÍ99.9%
KEVR80Drupal Core Remote Code Execution Vulnerability18dCVE-2024-28995—99.9%
KEV—80SolarWinds Serv-U Path Traversal Vulnerability —CVE-2024-32113—99.9%
KEV—80Apache OFBiz Path Traversal Vulnerability—CVE-2024-20767—99.9%
KEV—80Adobe ColdFusion Improper Access Control Vulnerability—CVE-2023-28771—99.9%
KEV—80Zyxel Multiple Firewalls OS Command Injection Vulnerability—CVE-2020-10199—99.9%
KEV—80Sonatype Nexus Repository Remote Code Execution Vulnerability—CVE-2017-7494—99.9%
KEVR80Samba Remote Code Execution Vulnerability—CVE-2019-17558—99.9%
KEV—80Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability—CVE-2008-4250—99.9%
KEV—80Microsoft Windows Buffer Overflow Vulnerability—CVE-2025-497066.5 MED99.9%
KEVR80Microsoft SharePoint Improper Authentication Vulnerability27dCVE-2020-11978—99.9%
KEV—80Apache Airflow Command Injection—CVE-2017-0147—99.9%
KEVR80Microsoft Windows SMBv1 Information Disclosure Vulnerability—CVE-2018-20062—99.9%
KEV—80ThinkPHP "noneCms" Remote Code Execution Vulnerability—CVE-2025-3132410.0 CRÍ99.9%
KEVR80SAP NetWeaver Unrestricted File Upload Vulnerability27dCVE-2026-344867.5 ALT99.9%
KEV—80Apache Tomcat Missing Encryption of Sensitive Data Vulnerability21dCVE-2022-24086—99.9%
KEV—80Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability—CVE-2020-14750—99.9%
KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—CVE-2024-5217—99.9%
KEV—80ServiceNow Incomplete List of Disallowed Inputs Vulnerability—CVE-2017-9805—99.9%
KEV—80Apache Struts Deserialization of Untrusted Data Vulnerability—