Vulnerabilidades explotables hoy
413,805en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,596
- Alto22,468
- Medio20,787
- Bajo2,126
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2008-5246—93.1%
——28——CVE-2026-730349.8 CRÍ93.1%
——28DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers to write arbitrary files to any location on the server by injecting directory traversal sequences into the user_id HTTP header of the Python file-upload endpoint. Attackers can send a crafted multipart upload request with a traversal-poisoned user_id header to escape the intended upload directory and write attacker-controlled content to locations such as Python startup hooks, cron directories, or agent scripts, resulting in remote code execution.19dCVE-2009-2140—93.1%
——28——CVE-2010-0919—93.1%
——28——CVE-2016-3505—93.1%
——28——CVE-2015-5253—93.1%
——28——CVE-2009-2981—93.1%
——28——CVE-2015-5113—93.1%
——28——CVE-2018-11804—93.1%
——28——CVE-2015-5111—93.1%
——28——CVE-2022-45460—93.1%
——28——CVE-2013-3481—93.1%
——28——CVE-2017-0185—93.1%
——28——CVE-2016-4997—93.1%
——28——CVE-2024-0300—93.1%
——28——CVE-2015-9262—93.1%
——28——CVE-2010-4378—93.1%
——28——CVE-2018-8865—93.1%
——28——CVE-2014-0993—93.1%
——28——CVE-2004-1034—93.1%
——28——CVE-2014-6500—93.1%
——28——CVE-2013-3528—93.1%
——28——CVE-2018-2633—93.1%
——28——CVE-1999-0804—93.1%
——28——CVE-2017-14085—93.1%
——28——CVE-2017-8597—93.1%
——28——CVE-2014-8080—93.1%
——28——CVE-2022-232189.8 CRÍ93.1%
——28The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution.29dCVE-2009-1728—93.1%
——28——CVE-2008-4157—93.1%
——28——CVE-2006-6442—93.1%
——28——CVE-2014-0603—93.1%
——28——CVE-2002-1584—93.1%
——28——CVE-2021-2302—93.1%
——28——CVE-2008-4437—93.1%
——28——CVE-2021-21030—93.1%
——28——CVE-2020-1408—93.1%
——28——CVE-2025-551909.9 CRÍ93.1%
——28Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. In versions 2.13.0 through 2.13.8, 2.14.0 through 2.14.15, 3.0.0 through 3.0.12 and 3.1.0-rc1 through 3.1.1, API tokens with project-level permissions are able to retrieve sensitive repository credentials (usernames, passwords) through the project details API endpoint, even when the token only has standard application management permissions and no explicit access to secrets. This vulnerability does not only affect project-level permissions. Any token with project get permissions is also vulnerable, including global permissions such as: `p, role/user, projects, get, *, allow`. This issue is fixed in versions 2.13.9, 2.14.16, 3.0.14 and 3.1.2.25dCVE-2015-8058—93.1%
——28——CVE-2008-4420—93.1%
——28——