Vulnerabilidades explotables hoy
4,375en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,756
Nuevos KEV · 24H0
Exploit Today ≥ 701,689
Distribución · última ventana
- Crítico4,431
- Alto17,996
- Medio16,582
- Bajo1,664
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2021-25646—99.9%
——30——CVE-2025-686139.9 CRÍ99.9%
KEV—80n8n Improper Control of Dynamically-Managed Code Resources Vulnerability12dCVE-2026-240619.8 CRÍ99.9%
KEV—80GNU InetUtils Argument Injection Vulnerability25dCVE-2020-7247—99.9%
KEV—80OpenSMTPD Remote Code Execution Vulnerability—CVE-2021-40539—99.9%
KEVR80Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability—CVE-2019-3929—99.9%
KEV—80Crestron Multiple Products Command Injection Vulnerability—CVE-2017-3881—99.9%
KEV—80Cisco IOS and IOS XE Remote Code Execution Vulnerability—CVE-2011-3192—99.9%
——30——CVE-2020-9496—99.9%
——30——CVE-2025-32433—99.9%
KEV—80Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability—CVE-2012-1442—99.9%
——30——CVE-2017-9791—99.9%
KEV—80Apache Struts 1 Improper Input Validation Vulnerability—CVE-2022-3236—99.9%
KEV—80Sophos Firewall Code Injection Vulnerability—CVE-2023-472469.8 CRÍ99.9%
KEVR80SysAid Server Path Traversal Vulnerability87dCVE-2024-29895—99.9%
——30——CVE-2012-3152—99.9%
KEV—80Oracle Fusion Middleware Unspecified Vulnerability—CVE-2013-2465—99.9%
KEVR80Oracle Java SE Unspecified Vulnerability—CVE-2020-7209—99.9%
——30——CVE-2008-4250—99.9%
KEV—80Microsoft Windows Buffer Overflow Vulnerability—CVE-2019-11477—99.9%
——30——CVE-2018-19276—99.9%
——30——CVE-2023-28341—99.9%
——30——CVE-2026-1281—99.9%
KEV—80Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability—CVE-2015-02044.3 SIN99.9%
——30The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the "FREAK" issue. NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.11dCVE-2022-279257.2 ALT99.9%
KEVR80Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability24dCVE-2018-15473—99.9%
——30——CVE-2026-1340—99.9%
KEV—80Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability—CVE-2024-29059—99.9%
KEV—80Microsoft .NET Framework Information Disclosure Vulnerability—CVE-2015-5119—99.9%
KEV—80Adobe Flash Player Use-After-Free Vulnerability—CVE-2024-506239.8 CRÍ99.9%
KEVR80Cleo Multiple Products Unrestricted File Upload Vulnerability17dCVE-2024-8963—99.9%
KEV—80Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability—CVE-2019-17558—99.9%
KEV—80Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability—CVE-2026-7289810.0 CRÍ99.9%
KEV—80Metabase SQL Injection Vulnerability74dCVE-2024-9463—99.9%
KEV—80Palo Alto Networks Expedition OS Command Injection Vulnerability—CVE-2019-11539—99.9%
KEVR80Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability—CVE-2012-46819.8 CRÍ99.9%
KEVR80Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability81dCVE-2026-419409.8 CRÍ99.9%
KEVR80WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability25dCVE-2024-50603—99.9%
KEV—80Aviatrix Controllers OS Command Injection Vulnerability—CVE-2016-3088—99.9%
KEV—80Apache ActiveMQ Improper Input Validation Vulnerability—CVE-2024-20767—99.9%
KEV—80Adobe ColdFusion Improper Access Control Vulnerability—