Vulnerabilidades explotables hoy
413,655en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,627
- Alto22,493
- Medio20,957
- Bajo2,135
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2005-1222—93.9%
——28——CVE-2010-1417—93.9%
——28——CVE-2021-371377.5 ALT93.9%
——28The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by supplying malicious input that decompresses to a very big size (via a network stream or a file) or by sending a huge skippable chunk.35dCVE-2015-7828—93.9%
——28——CVE-2004-1945—93.9%
——28——CVE-2008-2930—93.9%
——28——CVE-2014-6040—93.9%
——28——CVE-2009-0113—93.9%
——28——CVE-2002-2251—93.9%
——28——CVE-2020-13404—93.9%
——28——CVE-2002-0131—93.9%
——28——CVE-2013-2733—93.9%
——28——CVE-2020-0951—93.9%
——28——CVE-2008-7053—93.9%
——28——CVE-2016-1594—93.9%
——28——CVE-2020-25074—93.9%
——28——CVE-2020-29311—93.9%
——28——CVE-2004-1540—93.9%
——28——CVE-2017-12246—93.9%
——28——CVE-2019-0930—93.9%
——28——CVE-2006-4848—93.9%
——28——CVE-2021-21104—93.9%
——28——CVE-2015-8450—93.9%
——28——CVE-2016-10140—93.9%
——28——CVE-2015-8436—93.9%
——28——CVE-2004-2003—93.9%
——28——CVE-2014-0116—93.9%
——28——CVE-2016-9950—93.9%
——28——CVE-2015-8447—93.9%
——28——CVE-2016-8025—93.9%
——28——CVE-2007-2917—93.9%
——28——CVE-2015-8442—93.9%
——28——CVE-2015-8445—93.9%
——28——CVE-2015-8439—93.9%
——28——CVE-2025-32819—93.9%
——28——CVE-2020-1597—93.9%
——28——CVE-2010-0364—93.9%
——28——CVE-2008-4211—93.9%
——28——CVE-2000-0843—93.9%
——28——CVE-2025-109596.3 MED93.9%
——28A vulnerability has been found in Wavlink NU516U1 M16U1_V240425. The affected element is the function sub_401778 of the file /cgi-bin/firewall.cgi. Such manipulation of the argument dmz_flag leads to command injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.32d