Vulnerabilidades explotables hoy
413,805en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,594
- Alto22,456
- Medio20,780
- Bajo2,126
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2004-0827—92.9%
——28——CVE-2016-0042—92.9%
——28——CVE-2010-3007—92.9%
——28——CVE-2005-4195—92.9%
——28——CVE-2026-9735910.0 CRÍ92.9%
——28HFS2 version 2.4.0 and earlier contains a template injection vulnerability in the multipart upload handler that allows unauthenticated attackers to achieve remote code execution by embedding malicious template syntax in a filename. Attackers can craft a filename containing a closing template quoting sequence followed by an exec macro, which bypasses the authorization check in the dispatcher to execute arbitrary commands on the underlying host system.45dCVE-2017-14593—92.9%
——28——CVE-2008-4932—92.9%
——28——CVE-2023-3077—92.9%
——28——CVE-2021-40839—92.9%
——28——CVE-2006-5301—92.9%
——28——CVE-2025-55681—92.9%
——28——CVE-2007-4577—92.9%
——28——CVE-2017-15235—92.9%
——28——CVE-2016-5244—92.9%
——28——CVE-2013-6045—92.9%
——28——CVE-2005-3627—92.9%
——28——CVE-2023-3595—92.9%
——28——CVE-2001-0191—92.9%
——28——CVE-2010-2947—92.9%
——28——CVE-2016-3551—92.9%
——28——CVE-2016-0975—92.9%
——28——CVE-2018-15944—92.9%
——28——CVE-2013-1418—92.9%
——28——CVE-2007-4561—92.9%
——28——CVE-2016-7889—92.9%
——28——CVE-2014-8767—92.9%
——28——CVE-2018-0312—92.9%
——28——CVE-2019-11397—92.9%
——28——CVE-2021-27856—92.9%
——28——CVE-2015-8865—92.9%
——28——CVE-2026-97878.8 ALT92.9%
——28Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.
The specific flaw exists within the processing of NVBULogDaemon JSON-RPC messages. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-27625.18dCVE-2014-0074—92.9%
——28——CVE-2005-3129—92.9%
——28——CVE-2006-0841—92.9%
——28——CVE-2014-0455—92.9%
——28——CVE-2007-1511—92.9%
——28——CVE-2022-26585—92.9%
——28——CVE-2017-11791—92.9%
——28——CVE-2020-5760—92.9%
——28——CVE-2014-3444—92.9%
——28——