Vulnerabilidades explotables hoy
413,805en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,620
- Alto22,540
- Medio20,943
- Bajo2,137
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2017-11276—93.5%
——28——CVE-2012-5840—93.5%
——28——CVE-2016-1017—93.5%
——28——CVE-2015-4063—93.5%
——28——CVE-2009-3829—93.5%
——28——CVE-2015-7848—93.5%
——28——CVE-2014-9223—93.5%
——28——CVE-2007-3658—93.5%
——28——CVE-2015-0305—93.5%
——28——CVE-2019-6550—93.5%
——28——CVE-2020-25765—93.5%
——28——CVE-2007-2345—93.5%
——28——CVE-2005-4550—93.5%
——28——CVE-2013-3743—93.5%
——28——CVE-2010-4540—93.5%
——28——CVE-2014-5345—93.5%
——28——CVE-2026-457009.8 CRÍ93.5%
——28FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/planar.c, freerdp_bitmap_decompress_planar() validates the X destination coordinate nXDst against the caller-provided destination stride (nDstStep) even when it is writing into the internal temp buffer pTempData. An attacker can bypass the check with a large nDstStep and a large nXDst, causing planar_decompress_plane_rle() to write past the end of pTempData. This vulnerability is fixed in 3.26.0.106dCVE-2020-8559—93.5%
——28——CVE-2026-200294.9 MED93.5%
——28A vulnerability in the licensing features of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker with administrative privileges to gain access to sensitive information.
This vulnerability is due to improper parsing of XML that is processed by the web-based management interface of Cisco ISE and Cisco ISE-PIC. An attacker could exploit this vulnerability by uploading a malicious file to the application. A successful exploit could allow the attacker to read arbitrary files from the underlying operating system that could include sensitive data that should otherwise be inaccessible even to administrators. To exploit this vulnerability, the attacker must have valid administrative credentials.17dCVE-2014-9906—93.5%
——28——CVE-2006-5673—93.5%
——28——CVE-2015-8383—93.5%
——28——CVE-2014-0534—93.5%
——28——CVE-2008-3304—93.5%
——28——CVE-2007-2313—93.5%
——28——CVE-2024-31849—93.5%
——28——CVE-2021-45063—93.5%
——28——CVE-2016-1016—93.5%
——28——CVE-2010-1786—93.5%
——28——CVE-2010-2876—93.5%
——28——CVE-2009-3462—93.5%
——28——CVE-2012-4215—93.5%
——28——CVE-2012-4216—93.5%
——28——CVE-2025-7848—93.5%
——28——CVE-2017-0273—93.5%
——28——CVE-2017-3186—93.5%
——28——CVE-2009-2363—93.5%
——28——CVE-2018-0987—93.5%
——28——CVE-2012-4214—93.5%
——28——CVE-2017-11277—93.5%
——28——