Vulnerabilidades explotables hoy
414,707en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,433
- Alto21,690
- Medio20,017
- Bajo2,090
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2018-19586—92.4%
——28——CVE-2016-6973—92.4%
——28——CVE-2018-2826—92.4%
——28——CVE-2022-32430—92.4%
——28——CVE-2016-5281—92.4%
——28——CVE-2016-4254—92.4%
——28——CVE-2002-1405—92.4%
——28——CVE-2023-2478—92.4%
——28——CVE-2007-2242—92.4%
——28——CVE-2016-6970—92.4%
——28——CVE-2019-7980—92.4%
——28——CVE-2021-36953—92.4%
——28——CVE-2012-5221—92.4%
——28——CVE-2018-10607.5 ALT92.4%
——28python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.36dCVE-2016-6950—92.4%
——28——CVE-2014-3094—92.4%
——28——CVE-2006-4181—92.4%
——28——CVE-2015-0410—92.4%
——28——CVE-2019-5685—92.4%
——28——CVE-2016-6951—92.4%
——28——CVE-2010-0117—92.4%
——28——CVE-2001-0486—92.4%
——28——CVE-2011-1426—92.4%
——28——CVE-2025-10359—92.4%
——28——CVE-2017-10176—92.4%
——28——CVE-2026-1121954.7 MED92.4%
——28A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown function of the file app/dialplans/resources/classes/dialplan.php of the component Dialplan Editor. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.25dCVE-2016-6959—92.4%
——28——CVE-2003-1573—92.4%
——28——CVE-2016-6956—92.4%
——28——CVE-2016-6955—92.4%
——28——CVE-2016-6940—92.4%
——28——CVE-2016-6942—92.4%
——28——CVE-2016-6954—92.4%
——28——CVE-2016-6947—92.4%
——28——CVE-2018-8366—92.4%
——28——CVE-2004-1128—92.4%
——28——CVE-2019-7983—92.4%
——28——CVE-2026-18886—92.4%
——28ServiceNow has remediated an improper access control vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to create or modify instance data beyond what was intended, resulting in privilege escalation.
ServiceNow deployed a security update to hosted instances and ServiceNow provided the update to our partners and self-hosted customers. We are not currently aware of exploitation against ServiceNow instances.
We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.72dCVE-2026-46709.8 CRÍ92.4%
——28Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automation allows Authentication Bypass.
This issue affects MOVEit Automation: from 2025.0.0 before 2025.0.9, from 2024.0.0 before 2024.1.8, versions prior to 2024.0.0.18dCVE-2017-7186—92.4%
——28——