Vulnerabilidades explotables hoy
414,707en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,438
- Alto21,753
- Medio20,070
- Bajo2,096
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2020-9344—92.6%
——28——CVE-2024-300788.8 ALT92.6%
——28Windows Wi-Fi Driver Remote Code Execution Vulnerability116dCVE-2021-3144—92.6%
——28——CVE-2015-4614—92.6%
——28——CVE-2021-40617—92.6%
——28——CVE-2005-0256—92.6%
——28——CVE-2020-7203—92.6%
——28——CVE-2010-3109—92.6%
——28——CVE-1999-0904—92.6%
——28——CVE-2015-0357—92.6%
——28——CVE-2013-2462—92.6%
——28——CVE-2004-1003—92.6%
——28——CVE-2020-8091—92.6%
——28——CVE-2007-2821—92.6%
——28——CVE-2001-0181—92.6%
——28——CVE-2012-3966—92.6%
——28——CVE-2021-44686—92.6%
——28——CVE-2004-1587—92.6%
——28——CVE-2025-45859—92.6%
——28——CVE-2024-12358—92.6%
——28——CVE-2000-0341—92.6%
——28——CVE-2017-3057—92.6%
——28——CVE-2010-3649—92.6%
——28——CVE-2010-3650—92.6%
——28——CVE-2010-3641—92.6%
——28——CVE-2015-2052—92.6%
——28——CVE-2001-1289—92.6%
——28——CVE-2016-0959—92.6%
——28——CVE-2000-10785.0 SIN92.6%
——28ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character.52dCVE-2015-3079—92.6%
——28——CVE-2012-4895—92.6%
——28——CVE-2018-14629—92.6%
——28——CVE-2017-0064—92.6%
——28——CVE-2013-5599—92.6%
——28——CVE-2017-7555—92.6%
——28——CVE-2014-2279—92.6%
——28——CVE-2009-23617.5 SIN92.6%
——28SQL injection vulnerability in include/class.staff.php in osTicket before 1.6 RC5 allows remote attackers to execute arbitrary SQL commands via the staff username parameter.126dCVE-2020-27659—92.6%
——28——CVE-2007-2445—92.6%
——28——CVE-2020-11718.8 ALT92.6%
——28A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnerability, an attacker would need to convince a target to clone a repository and open it in Visual Studio Code with the Python extension installed. Attacker-specified code would execute when the target opened the integrated terminal.
The update address the vulnerability by modifying the way Visual Studio Code Python extension handles environment variables.86d