Vulnerabilidades explotables hoy
4,338en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,685
Nuevos KEV · 24H0
Exploit Today ≥ 701,629
Distribución · última ventana
- Crítico2,260
- Alto9,263
- Medio5,235
- Bajo501
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2024-4885—99.9%
KEV—80Progress WhatsUp Gold Path Traversal Vulnerability—CVE-2023-28771—99.9%
KEV—80Zyxel Multiple Firewalls OS Command Injection Vulnerability—CVE-2020-19389.8 CRÍ99.9%
KEV—80Apache Tomcat Improper Privilege Management Vulnerability6dCVE-2020-14750—99.9%
KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—CVE-2018-76029.8 CRÍ99.9%
KEVR80Drupal Core Remote Code Execution Vulnerability18dCVE-2022-301907.8 ALT99.9%
KEVR80Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability25dCVE-2017-01448.8 ALT99.9%
KEVR80Microsoft SMBv1 Remote Code Execution Vulnerability17dCVE-2025-29927—99.9%
——30——CVE-2020-0646—99.9%
KEV—80Microsoft .NET Framework Remote Code Execution Vulnerability—CVE-2024-27348—99.9%
KEV—80Apache HugeGraph-Server Improper Access Control Vulnerability—CVE-2020-36289—99.9%
——30——CVE-2022-24086—99.9%
KEV—80Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability—CVE-2020-11978—99.9%
KEV—80Apache Airflow Command Injection—CVE-2023-22515—99.9%
KEVR80Atlassian Confluence Data Center and Server Broken Access Control Vulnerability—CVE-2025-68613—99.9%
KEV—80n8n Improper Control of Dynamically-Managed Code Resources Vulnerability—CVE-2021-445299.8 CRÍ99.9%
KEVR80Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability 27dCVE-2022-303337.5 ALT99.9%
KEVR80RARLAB UnRAR Directory Traversal Vulnerability27dCVE-2022-36804—99.9%
KEV—80Atlassian Bitbucket Server and Data Center Command Injection Vulnerability—CVE-2022-40300—99.9%
——30——CVE-2020-10199—99.9%
KEV—80Sonatype Nexus Repository Remote Code Execution Vulnerability—CVE-2015-1538—99.9%
——30——CVE-2022-24637—99.9%
——30——CVE-2022-39986—99.9%
——30——CVE-2019-16278—99.9%
KEV—80Nostromo nhttpd Directory Traversal Vulnerability—CVE-2025-49113—99.9%
KEV—80RoundCube Webmail Deserialization of Untrusted Data Vulnerability—CVE-2014-0114—99.9%
——30——CVE-2020-06188.8 ALT99.9%
KEVR80Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability16dCVE-2020-11022—99.9%
——30——CVE-2021-21978—99.9%
——30——CVE-2021-25646—99.9%
——30——CVE-2017-3881—99.9%
KEV—80Cisco IOS and IOS XE Remote Code Execution Vulnerability—CVE-2020-7247—99.9%
KEV—80OpenSMTPD Remote Code Execution Vulnerability—CVE-2021-40539—99.9%
KEVR80Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability—CVE-2019-3929—99.9%
KEV—80Crestron Multiple Products Command Injection Vulnerability—CVE-2011-3192—99.9%
——30——CVE-2023-368847.5 ALT99.9%
KEVR80Microsoft Windows Search Remote Code Execution Vulnerability21dCVE-2020-9496—99.9%
——30——CVE-2012-1442—99.9%
——30——CVE-2017-9791—99.9%
KEV—80Apache Struts 1 Improper Input Validation Vulnerability—CVE-2022-3236—99.9%
KEV—80Sophos Firewall Code Injection Vulnerability—