Vulnerabilidades explotables hoy
413,655en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,627
- Alto22,493
- Medio20,962
- Bajo2,135
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2005-3335—93.9%
——28——CVE-2015-8388—93.9%
——28——CVE-2021-27246—93.9%
——28——CVE-2019-0285—93.9%
——28——CVE-2021-22006—93.9%
——28——CVE-2026-2163—93.9%
——28——CVE-2020-84926.5 MED93.9%
——28Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking.29dCVE-2009-1517—93.9%
——28——CVE-2009-3041—93.9%
——28——CVE-2023-28227—93.9%
——28——CVE-2021-24554—93.9%
——28——CVE-2008-4822—93.9%
——28——CVE-2015-5099—93.9%
——28——CVE-2026-189639.1 CRÍ93.9%
——28A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for any user without needing to click the required email verification link. This can result in the attacker gaining full control over target user accounts by directly setting new credentials.20dCVE-2016-4436—93.9%
——28——CVE-2025-341785.4 MED93.9%
——28In pfSense CE /suricata/suricata_app_parsers.php, the value of the policy_name parameter is not sanitized of HTML-related strings/characters before being directly displayed. This can result in stored cross-site scripting. The attacker must be authenticated with at least "WebCfg - Services: suricata package" permissions.121dCVE-2011-0079—93.9%
——28——CVE-2016-3334—93.9%
——28——CVE-2018-16224—93.9%
——28——CVE-2016-3333—93.9%
——28——CVE-2015-0784—93.9%
——28——CVE-2006-3805—93.9%
——28——CVE-2025-6335—93.9%
——28——CVE-2022-3254—93.9%
——28——CVE-2009-2415—93.9%
——28——CVE-2010-2102—93.9%
——28——CVE-2016-8331—93.9%
——28——CVE-2011-0228—93.9%
——28——CVE-2019-19078—93.9%
——28——CVE-2021-344677.1 ALT93.9%
——28Microsoft SharePoint Server Remote Code Execution Vulnerability94dCVE-2009-1690—93.9%
——28——CVE-2002-1621—93.9%
——28——CVE-2021-25160—93.9%
——28——CVE-2019-130574.9 MED93.9%
——28An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g., for multi-tenant deployments), slapd does not properly stop a rootDN from requesting authorization as an identity from another database during a SASL bind or with a proxyAuthz (RFC 4370) control. (It is not a common configuration to deploy a system where the server administrator and a DB administrator enjoy different levels of trust.)29dCVE-2016-6937—93.9%
——28——CVE-2017-16787—93.9%
——28——CVE-2018-11768—93.9%
——28——CVE-2009-4089—93.9%
——28——CVE-2009-0071—93.9%
——28——CVE-2024-26170—93.9%
——28——