Vulnerabilidades explotables hoy
413,655en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,614
- Alto22,423
- Medio20,902
- Bajo2,127
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2015-0839—93.7%
——28——CVE-2018-1000804—93.7%
——28——CVE-2020-15718—93.7%
——28——CVE-2025-2284—93.7%
——28——CVE-2017-7043—93.7%
——28——CVE-2013-4864—93.7%
——28——CVE-2025-106346.3 MED93.7%
——28A weakness has been identified in D-Link DIR-823X 240126/240802/250416. The impacted element is the function sub_412E7C of the file /usr/sbin/goahead of the component Environment Variable Handler. This manipulation of the argument terminal_addr/server_ip/server_port causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.43dCVE-2026-2621610.0 CRÍ93.7%
——28Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec(). The __import__ builtin was included in the allowed builtins, allowing unauthenticated remote attackers to import arbitrary modules and execute system commands. Successful exploitation allows full server compromise, including arbitrary command execution, file read and write access, sensitive data exfiltration, and lateral movement within internal networks.35dCVE-2007-3932—93.7%
——28——CVE-2016-7886—93.7%
——28——CVE-2008-6535—93.7%
——28——CVE-2014-1545—93.7%
——28——CVE-2013-0150—93.7%
——28——CVE-2017-17458—93.7%
——28——CVE-2020-11135.3 MED93.7%
——28A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnerability, a man-in-the-middle attacker would need to send a specially crafted request to a vulnerable system.
The security update addresses the vulnerability by correcting how the Task Scheduler service validates connections.85dCVE-2013-5817—93.7%
——28——CVE-2024-48455—93.7%
——28——CVE-2017-7486—93.7%
——28——CVE-2001-0974—93.7%
——28——CVE-2010-0129—93.7%
——28——CVE-2012-5575—93.7%
——28——CVE-2006-4386—93.7%
——28——CVE-2026-81118.8 ALT93.7%
——28SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote code execution.17dCVE-2008-1887—93.7%
——28——CVE-2004-1535—93.7%
——28——CVE-2016-1039—93.7%
——28——CVE-2007-2809—93.7%
——28——CVE-2013-5782—93.7%
——28——CVE-2007-1882—93.7%
——28——CVE-2017-7039—93.7%
——28——CVE-2013-5814—93.7%
——28——CVE-2011-4507—93.7%
——28——CVE-2008-3486—93.7%
——28——CVE-2014-0566—93.7%
——28——CVE-2016-1062—93.7%
——28——CVE-2020-3799—93.7%
——28——CVE-2005-1006—93.7%
——28——CVE-2013-3060—93.7%
——28——CVE-2020-9655—93.7%
——28——CVE-2007-2777—93.7%
——28——