Vulnerabilidades explotables hoy
413,805en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,594
- Alto22,456
- Medio20,780
- Bajo2,126
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2018-0464—92.8%
——28——CVE-2015-3416—92.8%
——28——CVE-2023-23845—92.8%
——28——CVE-2015-3310—92.8%
——28——CVE-2014-8391—92.8%
——28——CVE-2019-0819—92.8%
——28——CVE-2005-1046—92.8%
——28——CVE-2024-32737—92.8%
——28——CVE-2015-0433—92.8%
——28——CVE-2001-0629—92.8%
——28——CVE-2015-6574—92.8%
——28——CVE-2000-098510.0 SIN92.8%
——28Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT TO" command.51dCVE-2019-97406.1 MED92.8%
——28An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n (specifically in the query string after a ? character) followed by an HTTP header or a Redis command. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.30dCVE-2016-6981—92.8%
——28——CVE-2024-32739—92.8%
——28——CVE-2021-3965—92.8%
——28——CVE-2008-0033—92.8%
——28——CVE-2007-1997—92.8%
——28——CVE-2015-1059—92.8%
——28——CVE-2013-4560—92.8%
——28——CVE-2006-1449—92.8%
——28——CVE-2023-31068—92.8%
——28——CVE-2006-2170—92.8%
——28——CVE-2002-0508—92.8%
——28——CVE-2007-2375—92.8%
——28——CVE-2007-4381—92.8%
——28——CVE-2002-2257—92.8%
——28——CVE-2019-18283—92.8%
——28——CVE-2013-5603—92.8%
——28——CVE-2012-2289—92.8%
——28——CVE-2017-2841—92.8%
——28——CVE-2007-0117—92.8%
——28——CVE-2019-2557—92.8%
——28——CVE-2026-444967.5 ALT92.8%
——28Axios is a promise based HTTP client for the browser and Node.js. Axios versions before 0.32.0 on the 0.x line and before 1.16.0 on the 1.x line build a regular expression from the configured XSRF cookie name without escaping regex metacharacters. In standard browser environments, an attacker who can influence the cookie name passed to axios can cause expensive regex backtracking while axios reads document.cookie. The practical impact is client-side availability degradation, such as freezing the affected browser tab while axios prepares a request. The issue does not affect ordinary Node.js HTTP adapter usage, React Native, or web workers, where axios does not read document.cookie. This vulnerability is fixed in 0.32.0 and 1.16.0.62dCVE-2013-5932—92.8%
——28——CVE-2019-5909—92.8%
——28——CVE-2008-5705—92.8%
——28——CVE-2021-23639—92.8%
——28——CVE-2009-2465—92.8%
——28——CVE-2020-5738—92.8%
——28——