Vulnerabilidades explotables hoy
413,805en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,595
- Alto22,463
- Medio20,783
- Bajo2,126
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2016-4266—93.0%
——28——CVE-2017-2482—93.0%
——28——CVE-2014-1547—93.0%
——28——CVE-2009-2985—93.0%
——28——CVE-2026-615119.8 CRÍ93.0%
——28vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Runtime::runMaths() method within the template runtime that allows unauthenticated remote attackers to execute arbitrary PHP code by supplying crafted input through the pagenav[pagenumber] parameter. Attackers can exploit the insufficiently restrictive regex filter by using phpfuck-style encoding with permitted characters to inject and execute arbitrary PHP code via the unauthenticated ajax/render template route without any authentication.9dCVE-2010-4193—93.0%
——28——CVE-2007-6181—93.0%
——28——CVE-2017-5193—93.0%
——28——CVE-2007-5824—93.0%
——28——CVE-2019-10894—93.0%
——28——CVE-2013-2734—93.0%
——28——CVE-2009-2896—93.0%
——28——CVE-2017-13056—93.0%
——28——CVE-2013-1681—93.0%
——28——CVE-2019-0704—93.0%
——28——CVE-2011-2009—93.0%
——28——CVE-2013-1085—93.0%
——28——CVE-2005-2420—93.0%
——28——CVE-2013-4091—93.0%
——28——CVE-2008-6363—93.0%
——28——CVE-2018-17141—93.0%
——28——CVE-2008-5001—93.0%
——28——CVE-2019-15588—93.0%
——28——CVE-2014-0513—93.0%
——28——CVE-2004-0644—93.0%
——28——CVE-2014-1562—93.0%
——28——CVE-2007-5294—93.0%
——28——CVE-2014-0541—93.0%
——28——CVE-2017-3004—93.0%
——28——CVE-2016-6291—93.0%
——28——CVE-2009-2996—93.0%
——28——CVE-2013-3338—93.0%
——28——CVE-2002-0895—93.0%
——28——CVE-2002-0432—93.0%
——28——CVE-2010-4194—93.0%
——28——CVE-2013-4830—93.0%
——28——CVE-2016-1415—93.0%
——28——CVE-2023-290077.0 ALT93.0%
——28Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` file with submodule URLs that are longer than 1024 characters can used to exploit a bug in `config.c::git_config_copy_or_rename_section_in_file()`. This bug can be used to inject arbitrary configuration into a user's `$GIT_DIR/config` when attempting to remove the configuration section associated with that submodule. When the attacker injects configuration values which specify executables to run (such as `core.pager`, `core.editor`, `core.sshCommand`, etc.) this can lead to a remote code execution. A fix A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid running `git submodule deinit` on untrusted repositories or without prior inspection of any submodule sections in `$GIT_DIR/config`.10dCVE-2015-8367—93.0%
——28——CVE-2014-8121—93.0%
——28——