Vulnerabilidades explotables hoy
403,426en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,756
Nuevos KEV · 24H0
Exploit Today ≥ 701,689
Distribución · última ventana
- Crítico5,556
- Alto21,532
- Medio19,934
- Bajo2,099
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2023-26801—99.6%
——30——CVE-2007-1748—99.6%
——30——CVE-2025-0107—99.6%
——30——CVE-2003-0466—99.6%
——30——CVE-2003-0714—99.6%
——30——CVE-2014-7205—99.6%
——30——CVE-2019-11945—99.6%
——30——CVE-2007-2446—99.6%
——30——CVE-2016-0709—99.6%
——30——CVE-2008-2499—99.6%
——30——CVE-2018-10823—99.6%
——30——CVE-2019-12840—99.6%
——30——CVE-2017-12478—99.6%
——30——CVE-2018-12709.8 CRÍ99.6%
——30Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack.18dCVE-2017-13696—99.6%
——30——CVE-2014-5005—99.6%
——30——CVE-2018-0770—99.6%
——30——CVE-2024-3408—99.6%
——30——CVE-2020-11108—99.6%
——30——CVE-2022-34176—99.6%
——30——CVE-2023-27856—99.6%
——30——CVE-2012-1440—99.6%
——30——CVE-2002-0079—99.6%
——30——CVE-2021-31813—99.6%
——30——CVE-2000-091710.0 SIN99.6%
——30Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.34dCVE-2010-1549—99.6%
——30——CVE-2020-13166—99.6%
——30——CVE-2018-0776—99.6%
——30——CVE-2019-16113—99.6%
——30——CVE-2022-21145—99.6%
——30——CVE-2020-8863—99.6%
——30——CVE-2020-12800—99.6%
——30——CVE-2021-39312—99.6%
——30——CVE-2010-1587—99.6%
——30——CVE-2024-28075—99.6%
——30——CVE-2006-5745—99.6%
——30——CVE-2021-213417.5 ALT99.6%
——30XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulating the processed input stream. No user is affected who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.19dCVE-2017-1000117—99.6%
——30——CVE-2023-468478.6 ALT99.6%
——30Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.81dCVE-2017-5982—99.6%
——30——