Vulnerabilidades explotables hoy
413,655en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,614
- Alto22,423
- Medio20,902
- Bajo2,127
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2021-28468—93.7%
——28——CVE-2012-3374—93.7%
——28——CVE-2007-2777—93.7%
——28——CVE-2026-3611—93.7%
——28——CVE-2026-425338.1 ALT93.7%
——28A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable in a string expression under certain conditions. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.
Impact:
This vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX system or to possibly trigger a code execution. There is no control plane exposure; this is a data plane issue only.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.9dCVE-2020-35616—93.7%
——28——CVE-2011-0873—93.7%
——28——CVE-2019-17497—93.7%
——28——CVE-2005-4438—93.7%
——28——CVE-2012-5468—93.7%
——28——CVE-2014-2892—93.7%
——28——CVE-2014-0418—93.7%
——28——CVE-2019-17142—93.7%
——28——CVE-2007-6230—93.7%
——28——CVE-2016-4120—93.7%
——28——CVE-2014-8441—93.7%
——28——CVE-2009-0858—93.7%
——28——CVE-2012-5324—93.7%
——28——CVE-2019-1010238—93.7%
——28——CVE-2020-0880—93.7%
——28——CVE-2008-5663—93.7%
——28——CVE-2020-354908.1 ALT93.7%
——28FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource.35dCVE-2020-9748—93.7%
——28——CVE-2024-43502—93.7%
——28——CVE-2017-2457—93.7%
——28——CVE-2012-2836—93.7%
——28——CVE-2018-8422—93.7%
——28——CVE-2019-38599.1 CRÍ93.7%
——28An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.29dCVE-2020-111138.8 ALT93.7%
——28FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).79dCVE-2013-4797—93.7%
——28——CVE-2006-4662—93.7%
——28——CVE-2008-4664—93.7%
——28——CVE-2008-5885—93.7%
——28——CVE-2025-60724—93.7%
——28——CVE-2004-2627—93.7%
——28——CVE-2015-1480—93.7%
——28——CVE-2015-0325—93.7%
——28——CVE-2026-623279.1 CRÍ93.7%
——289Router through version 0.4.41 contains an unauthenticated information disclosure vulnerability that allows remote attackers to retrieve plaintext API keys for all connected AI provider accounts by sending a single unauthenticated request to the /api/usage/stats endpoint. Attackers can exploit the missing authentication middleware on the Next.js API route to obtain full API key strings alongside token counts, cost breakdowns, and request metadata, enabling unauthorized use of connected AI provider accounts, billing fraud, and quota exhaustion.19dCVE-2023-1719—93.7%
——28——CVE-2021-23926—93.7%
——28——