Vulnerabilidades explotables hoy
413,655en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,607
- Alto22,402
- Medio20,867
- Bajo2,124
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2015-0326—93.7%
——28——CVE-2006-5101—93.7%
——28——CVE-2020-0882—93.7%
——28——CVE-2017-2469—93.7%
——28——CVE-2008-7245—93.7%
——28——CVE-2020-9748—93.7%
——28——CVE-2007-4221—93.7%
——28——CVE-2023-38679.1 CRÍ93.7%
——28In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix out of bounds read in smb2_sess_setup
ksmbd does not consider the case of that smb2 session setup is
in compound request. If this is the second payload of the compound,
OOB read issue occurs while processing the first payload in
the smb2_sess_setup().89dCVE-2012-5324—93.7%
——28——CVE-2006-5292—93.7%
——28——CVE-2015-1819—93.7%
——28——CVE-2016-4163—93.7%
——28——CVE-2013-4797—93.7%
——28——CVE-2008-4664—93.7%
——28——CVE-2011-3378—93.7%
——28——CVE-2001-1473—93.7%
——28——CVE-2019-1010238—93.7%
——28——CVE-2008-0888—93.7%
——28——CVE-2019-12406—93.7%
——28——CVE-2016-6207—93.7%
——28——CVE-2005-3550—93.7%
——28——CVE-2002-1441—93.7%
——28——CVE-2020-35616—93.7%
——28——CVE-2011-0745—93.7%
——28——CVE-2019-11196—93.7%
——28——CVE-2023-1719—93.7%
——28——CVE-2016-6296—93.7%
——28——CVE-2019-17142—93.7%
——28——CVE-2018-8422—93.7%
——28——CVE-2016-4120—93.7%
——28——CVE-2004-1267—93.7%
——28——CVE-2023-0527—93.7%
——28——CVE-2026-623279.1 CRÍ93.7%
——289Router through version 0.4.41 contains an unauthenticated information disclosure vulnerability that allows remote attackers to retrieve plaintext API keys for all connected AI provider accounts by sending a single unauthenticated request to the /api/usage/stats endpoint. Attackers can exploit the missing authentication middleware on the Next.js API route to obtain full API key strings alongside token counts, cost breakdowns, and request metadata, enabling unauthorized use of connected AI provider accounts, billing fraud, and quota exhaustion.19dCVE-2021-229243.7 BAJ93.7%
——28libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths *case insensitively*,which could lead to libcurl reusing wrong connections.File paths are, or can be, case sensitive on many systems but not all, and caneven vary depending on used file systems.The comparison also didn't include the 'issuer cert' which a transfer can setto qualify how to verify the server certificate.29dCVE-2007-5620—93.7%
——28——CVE-2019-5021—93.7%
——28——CVE-2024-9122—93.7%
——28——CVE-2024-45711—93.7%
——28——CVE-2009-0243—93.7%
——28——CVE-2011-0560—93.7%
——28——