Vulnerabilidades explotables hoy
413,655en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,631
- Alto22,527
- Medio21,016
- Bajo2,145
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2020-24572—94.1%
——28——CVE-2020-10895—94.1%
——28——CVE-2022-30654—94.1%
——28——CVE-2021-432097.8 ALT94.1%
——283D Viewer Remote Code Execution Vulnerability85dCVE-2010-0193—94.1%
——28——CVE-2020-17407—94.1%
——28——CVE-2005-0110—94.1%
——28——CVE-2005-2075—94.1%
——28——CVE-2008-4588—94.1%
——28——CVE-2010-4541—94.1%
——28——CVE-2025-116654.7 MED94.1%
——28A vulnerability was detected in D-Link DAP-2695 2.00RC131. This affects the function fwupdater_main of the file rgbin of the component Firmware Update Handler. Performing manipulation results in os command injection. The attack may be initiated remotely. This vulnerability only affects products that are no longer supported by the maintainer.35dCVE-2018-8005—94.1%
——28——CVE-2019-20478—94.1%
——28——CVE-2017-6060—94.1%
——28——CVE-2023-30943—94.1%
——28——CVE-2020-10897—94.1%
——28——CVE-2026-2227—94.1%
——28——CVE-2018-0871—94.1%
——28——CVE-2014-8150—94.1%
——28——CVE-2010-3630—94.1%
——28——CVE-2015-6684—94.1%
——28——CVE-2007-2659—94.1%
——28——CVE-2022-30658—94.1%
——28——CVE-2019-13334—94.1%
——28——CVE-2015-1920—94.1%
——28——CVE-2006-23105.0 SIN94.1%
——28BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to cause a denial of service (hang) via a request for a .cfm file whose name contains an MS-DOS device name such as (1) con, (2) aux, (3) com1, and (4) com2.50dCVE-2022-30661—94.1%
——28——CVE-2021-36005—94.1%
——28——CVE-2020-24765—94.1%
——28——CVE-2017-3792—94.1%
——28——CVE-2019-10126—94.1%
——28——CVE-2007-0845—94.1%
——28——CVE-2007-6088—94.1%
——28——CVE-2019-199257.5 ALT94.1%
——28zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.29dCVE-2026-76655.3 MED94.1%
——28The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.6.4 via the ajax_load_more function due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected, private, or draft posts that they should not have access to.112dCVE-2010-4332—94.1%
——28——CVE-2012-5576—94.1%
——28——CVE-2015-1772—94.1%
——28——CVE-2019-199237.5 ALT94.1%
——28flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).29dCVE-1999-0627—94.1%
——28——