Vulnerabilidades explotables hoy
413,655en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,700
- Alto22,645
- Medio21,141
- Bajo2,151
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2008-0667—94.2%
——28——CVE-2011-2424—94.2%
——28——CVE-2026-78739.9 CRÍ94.2%
——28IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.18dCVE-2005-3392—94.2%
——28——CVE-2014-0653—94.2%
——28——CVE-2025-15501—94.2%
——28——CVE-2020-24650—94.2%
——28——CVE-2013-1486—94.2%
——28——CVE-2014-3975—94.2%
——28——CVE-2020-7144—94.2%
——28——CVE-2013-2422—94.2%
——28——CVE-2019-3926—94.1%
——28——CVE-2008-3246—94.1%
——28——CVE-2015-1000010—94.1%
——28——CVE-2026-27174—94.1%
——28——CVE-2004-1381—94.1%
——28——CVE-2017-3086—94.1%
——28——CVE-2015-0104—94.1%
——28——CVE-2018-10592—94.1%
——28——CVE-2017-14596—94.1%
——28——CVE-2025-4999—94.1%
——28——CVE-2016-8580—94.1%
——28——CVE-2006-6808—94.1%
——28——CVE-2022-2915—94.1%
——28——CVE-2014-6601—94.1%
——28——CVE-2015-0291—94.1%
——28——CVE-2015-2314—94.1%
——28——CVE-2025-342679.9 CRÍ94.1%
——28Flowise v3.0.1 < 3.0.8 and all versions after with 'ALLOW_BUILTIN_DEP' enabled contain an authenticated remote code execution vulnerability and node VM sandbox escape due to insecure use of integrated modules (Puppeteer and Playwright) within the nodevm execution environment. An authenticated attacker able to create or run a tool that leverages Puppeteer/Playwright can specify attacker-controlled browser binary paths and parameters. When the tool executes, the attacker-controlled executable/parameters are run on the host and circumvent the intended nodevm sandbox restrictions, resulting in execution of arbitrary code in the context of the host. This vulnerability was incorrectly assigned as a duplicate CVE-2025-26319 by the developers and should be considered distinct from that identifier.35dCVE-2004-2614—94.1%
——28——CVE-2010-2991—94.1%
——28——CVE-2012-0231—94.1%
——28——CVE-2008-1727—94.1%
——28——CVE-2022-428988.8 ALT94.1%
——28PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has "a similar bug."29dCVE-2024-30034—94.1%
——28——CVE-2005-0731—94.1%
——28——CVE-2018-12524—94.1%
——28——CVE-2017-16384—94.1%
——28——CVE-2018-12525—94.1%
——28——CVE-2015-4683—94.1%
——28——CVE-2019-3925—94.1%
——28——