Vulnerabilidades explotables hoy
414,707en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,438
- Alto21,753
- Medio20,070
- Bajo2,096
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2016-6297—92.6%
——28——CVE-2021-32462—92.6%
——28——CVE-2022-22029—92.6%
——28——CVE-2020-11028.8 ALT92.6%
——28A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account.
Exploitation of this vulnerability requires that a user uploads a specially crafted SharePoint application package to an affected version of SharePoint.
The security update addresses the vulnerability by correcting how SharePoint checks the source markup of application packages.86dCVE-2023-33617—92.6%
——28——CVE-2025-108146.3 MED92.6%
——28A vulnerability was determined in D-Link DIR-823X 240126/240802/250416. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/goahead. This manipulation of the argument port causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.33dCVE-2019-101609.8 CRÍ92.6%
——28A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4 through v3.8.0b1, which still allows an attacker to exploit CVE-2019-9636 by abusing the user and password parts of a URL. When an application parses user-supplied URLs to store cookies, authentication credentials, or other kind of information, it is possible for an attacker to provide specially crafted URLs to make the application locate host-related information (e.g. cookies, authentication data) and send them to a different host than where it should, unlike if the URLs had been correctly parsed. The result of an attack may vary based on the application.31dCVE-2022-44673—92.6%
——28——CVE-2018-15181—92.6%
——28——CVE-2019-0956—92.6%
——28——CVE-2009-4536—92.6%
——28——CVE-2025-11187—92.6%
——28——CVE-2001-03806.4 SIN92.6%
——28Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via a default, undocumented community string 'ILMI'.35dCVE-2012-5270—92.6%
——28——CVE-2007-5005—92.6%
——28——CVE-2012-5272—92.6%
——28——CVE-2009-4581—92.6%
——28——CVE-2022-414416.1 MED92.6%
——28Multiple cross-site scripting (XSS) vulnerabilities in ReQlogic v11.3 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the POBatch and WaitDuration parameters.128dCVE-2015-8664—92.6%
——28——CVE-2019-7219—92.6%
——28——CVE-2020-11856—92.6%
——28——CVE-2016-4322—92.6%
——28——CVE-2019-3922—92.6%
——28——CVE-2016-5386—92.6%
——28——CVE-2006-2587—92.6%
——28——CVE-2017-7689—92.6%
——28——CVE-1999-0765—92.6%
——28——CVE-2008-2085—92.6%
——28——CVE-2018-11801—92.6%
——28——CVE-2022-48565—92.6%
——28——CVE-2019-2767—92.6%
——28——CVE-2014-2210—92.6%
——28——CVE-2020-10611—92.6%
——28——CVE-2005-1347—92.6%
——28——CVE-2011-2199—92.6%
——28——CVE-2008-1866—92.6%
——28——CVE-2020-11796.5 MED92.6%
——28An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.
There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.
The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.86dCVE-2002-0253—92.6%
——28——CVE-2011-0572—92.6%
——28——CVE-2020-24901—92.6%
——28——