Vulnerabilidades explotables hoy
413,655en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,623
- Alto22,480
- Medio20,944
- Bajo2,133
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2018-6797—93.8%
——28——CVE-2009-1044—93.8%
——28——CVE-2001-1290—93.8%
——28——CVE-2017-11302—93.8%
——28——CVE-2020-1931—93.8%
——28——CVE-2019-2413—93.8%
——28——CVE-2011-2423—93.8%
——28——CVE-2024-28892—93.8%
——28——CVE-2011-3336—93.8%
——28——CVE-2018-1007—93.8%
——28——CVE-2026-53394.7 MED93.8%
——28A vulnerability was detected in Tenda G103 1.0.0.5. The impacted element is the function action_set_net_settings of the file gpon.lua of the component Setting Handler. Performing a manipulation of the argument authLoid/authLoidPassword/authPassword/authSerialNo/authType/oltType/usVlanId/usVlanPriority results in command injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.111dCVE-2021-41344—93.8%
——28——CVE-2017-11847—93.8%
——28——CVE-2016-5842—93.8%
——28——CVE-2015-7619—93.8%
——28——CVE-2019-7268—93.8%
——28——CVE-2007-3929—93.8%
——28——CVE-2016-5323—93.8%
——28——CVE-2007-3959—93.8%
——28——CVE-2013-2624—93.8%
——28——CVE-2025-147089.8 CRÍ93.8%
——28A weakness has been identified in Shiguangwu sgwbox N3 2.0.25. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/http_eshell_server of the component WIREDCFGGET Interface. Executing manipulation of the argument params can lead to buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.36dCVE-2007-1049—93.8%
——28——CVE-2018-16875—93.8%
——28——CVE-2007-6254—93.8%
——28——CVE-2017-9830—93.8%
——28——CVE-2015-6678—93.8%
——28——CVE-2020-11087.5 ALT93.8%
——28A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Core or .NET Framework web application. The vulnerability can be exploited remotely, without authentication.
A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET Core or .NET Framework application.
The update addresses the vulnerability by correcting how the .NET Core or .NET Framework web application handles web requests.85dCVE-2018-12228—93.8%
——28——CVE-2011-2961—93.8%
——28——CVE-2006-4510—93.8%
——28——CVE-2007-0061—93.8%
——28——CVE-2016-4464—93.8%
——28——CVE-2013-5604—93.8%
——28——CVE-2015-0207—93.8%
——28——CVE-2024-36985—93.8%
——28——CVE-2017-1000215—93.8%
——28——CVE-2009-3996—93.8%
——28——CVE-2020-4521—93.8%
——28——CVE-2012-5083—93.8%
——28——CVE-2015-6995—93.8%
——28——