Vulnerabilidades explotables hoy
414,772en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,781
Nuevos KEV · 24H0
Exploit Today ≥ 701,709
Distribución · última ventana
- Crítico5,285
- Alto20,846
- Medio19,528
- Bajo2,047
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2013-7030—92.3%
——28——CVE-2016-8619—92.3%
——28——CVE-2005-1380—92.3%
——28——CVE-2022-30605—92.3%
——28——CVE-2016-9894—92.3%
——28——CVE-2002-0276—92.3%
——28——CVE-2011-1908—92.3%
——28——CVE-2019-12182—92.3%
——28——CVE-2004-0591—92.3%
——28——CVE-2004-0425—92.3%
——28——CVE-2018-16009—92.3%
——28——CVE-2006-4608—92.3%
——28——CVE-2024-370817.8 ALT92.3%
——28The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may exploit these issues to elevate privileges to root on vCenter Server Appliance.11dCVE-2026-41922—92.3%
——28WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the wireless.cgi binary that allows unauthenticated remote attackers to execute arbitrary shell commands by injecting malicious input into the sz11gChannel or PIN POST parameters. Attackers can exploit unsanitized parameter handling in the set_wifi_basic and set_wifi_do_wps functions to achieve remote code execution without authentication.19dCVE-2022-44675—92.3%
——28——CVE-2016-5541—92.3%
——28——CVE-2009-4356—92.3%
——28——CVE-2019-0981—92.3%
——28——CVE-2011-5008—92.3%
——28——CVE-2015-5584—92.3%
——28——CVE-2001-1141—92.3%
——28——CVE-2014-3502—92.3%
——28——CVE-2021-372236.5 MED92.3%
——28Nagios Enterprises NagiosXI <= 5.8.4 contains a Server-Side Request Forgery (SSRF) vulnerability in schedulereport.php. Any authenticated user can create scheduled reports containing PDF screenshots of any view in the NagiosXI application. Due to lack of input sanitisation, the target page can be replaced with an SSRF payload to access internal resources or disclose local system files.129dCVE-2001-0337—92.3%
——28——CVE-2001-0046—92.3%
——28——CVE-2010-2129—92.3%
——28——CVE-2021-42665—92.3%
——28——CVE-2021-0326—92.3%
——28——CVE-2019-9497—92.3%
——28——CVE-2026-53384.7 MED92.3%
——28A security vulnerability has been detected in Tenda G103 1.0.0.5. The affected element is the function action_set_system_settings of the file system.lua of the component Setting Handler. Such manipulation of the argument lanIp leads to command injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.19dCVE-2017-8673—92.3%
——28——CVE-2018-16027—92.3%
——28——CVE-2008-4062—92.3%
——28——CVE-2016-9558—92.3%
——28——CVE-2019-3912—92.3%
——28——CVE-2018-7667—92.3%
——28——CVE-2018-12426—92.3%
——28——CVE-2014-5353—92.3%
——28——CVE-2012-3810—92.3%
——28——CVE-2020-25763—92.3%
——28——