Vulnerabilidades explotables hoy
414,707en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,438
- Alto21,753
- Medio20,070
- Bajo2,096
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2013-0435—92.6%
——28——CVE-2015-2683—92.6%
——28——CVE-2010-3642—92.6%
——28——CVE-2010-3643—92.6%
——28——CVE-2018-7567—92.6%
——28——CVE-2013-0791—92.6%
——28——CVE-2014-1684—92.6%
——28——CVE-2011-0900—92.6%
——28——CVE-2018-19274—92.6%
——28——CVE-2010-3646—92.6%
——28——CVE-2017-11833—92.6%
——28——CVE-2014-8098—92.6%
——28——CVE-2000-0741—92.6%
——28——CVE-2005-4048—92.6%
——28——CVE-2010-3640—92.6%
——28——CVE-2018-11765—92.6%
——28——CVE-2006-29345.0 SIN92.6%
——28SCTP conntrack (ip_conntrack_proto_sctp.c) in netfilter for Linux kernel 2.6.17 before 2.6.17.3 and 2.6.16 before 2.6.16.23 allows remote attackers to cause a denial of service (crash) via a packet without any chunks, which causes a variable to contain an invalid value that is later used to dereference a pointer.52dCVE-2020-82037.4 ALT92.6%
——28Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.11dCVE-2010-0212—92.6%
——28——CVE-1999-0572—92.6%
——28——CVE-2013-2586—92.6%
——28——CVE-2008-0699—92.6%
——28——CVE-2020-13143—92.6%
——28——CVE-2010-3645—92.6%
——28——CVE-2012-3990—92.6%
——28——CVE-2022-23837—92.6%
——28——CVE-2000-0558—92.6%
——28——CVE-2000-0753—92.6%
——28——CVE-2025-64393—92.6%
——28This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server.20dCVE-2005-2175—92.6%
——28——CVE-2019-19031—92.6%
——28——CVE-2018-18805—92.6%
——28——CVE-2012-3970—92.6%
——28——CVE-2026-66578.8 ALT92.6%
——28A vulnerability in jupyter-server versions 1.12.0 through 2.17.0 allows an attacker to bypass CORS origin validation when the `allow_origin_pat` configuration is used. The issue arises from the use of `re.match()` for validating the `Origin` header, which only anchors at the start of the string. This allows attacker-controlled domains such as `trusted.example.com.evil.com` to pass validation against patterns intended to match `trusted.example.com`. The vulnerability affects multiple locations in the codebase, including CORS headers, WebSocket connections, referer validation, and login redirects, potentially enabling phishing attacks, arbitrary code execution, and unauthorized access to sensitive API responses.115dCVE-2016-8750—92.6%
——28——CVE-2021-28152—92.6%
——28——CVE-2004-1025—92.6%
——28——CVE-2005-3185—92.6%
——28——CVE-2019-7834—92.6%
——28——CVE-2017-6098—92.6%
——28——