Vulnerabilidades explotables hoy
413,805en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,595
- Alto22,463
- Medio20,783
- Bajo2,126
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2023-1018—92.9%
——28——CVE-2010-3044—92.9%
——28——CVE-2006-2356—92.9%
——28——CVE-2009-1351—92.9%
——28——CVE-2008-4402—92.9%
——28——CVE-2009-0791—92.9%
——28——CVE-2015-0241—92.9%
——28——CVE-2013-2369—92.9%
——28——CVE-2015-0932—92.9%
——28——CVE-2011-1216—92.9%
——28——CVE-2023-38142—92.9%
——28——CVE-2015-7249—92.9%
——28——CVE-2012-5854—92.9%
——28——CVE-2014-1513—92.9%
——28——CVE-2007-3376—92.9%
——28——CVE-2007-5538—92.9%
——28——CVE-2008-4750—92.9%
——28——CVE-2024-20685—92.9%
——28——CVE-2018-195917.5 ALT92.9%
——28In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closed. This is related to the if_nametoindex() function.30dCVE-2019-0712—92.9%
——28——CVE-2017-8987—92.9%
——28——CVE-2010-5290—92.9%
——28——CVE-2007-2687—92.9%
——28——CVE-2009-1179—92.9%
——28——CVE-2026-2493—92.9%
——28——CVE-2013-2060—92.9%
——28——CVE-2009-4758—92.9%
——28——CVE-2000-0057—92.9%
——28——CVE-2011-1215—92.9%
——28——CVE-2005-3922—92.9%
——28——CVE-2025-25038—92.9%
——28——CVE-2026-328547.5 ALT92.9%
——28LibVNCServer versions 0.9.15 and prior (fixed in commit dc78dee) contain null pointer dereference vulnerabilities in the HTTP proxy handlers within httpProcessInput() in httpd.c that allow remote attackers to cause a denial of service by sending specially crafted HTTP requests. Attackers can exploit missing validation of strchr() return values in the CONNECT and GET proxy handling paths to trigger null pointer dereferences and crash the server when httpd and proxy features are enabled.121dCVE-2005-3240—92.9%
——28——CVE-2015-4647—92.9%
——28——CVE-2009-0811—92.9%
——28——CVE-2016-1000217—92.9%
——28——CVE-2026-1219434.8 MED92.9%
——28Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sip_check_packet and sip_validate_packet caused by an off-by-one length check on 10240-byte SIP payloads. Remote attackers can send a crafted UDP or TCP SIP packet or supply a pcap file to crash sngrep or leak adjacent stack bytes into displayed SIP fields.8dCVE-2022-29145—92.9%
——28——CVE-2022-12718.8 ALT92.9%
——28An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.29dCVE-2009-0270—92.9%
——28——